RepoJournal
Kubernetes @kubernetes
176 wires and counting

$ follow Kubernetes

Keep up with Kubernetes in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-10-31
stories 181
GitHub RSS Archive Reviews

© 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire · showcase

Scheduler narrows DRA queues, cloud-provider-aws takes two Go security fixes

By RepoJournal · Filed · About Kubernetes · Composed from the cited sources · methodology

Bi Ge Ciprian Hacman Davanum Srinivas cblecker kubernetes-prow[bot] Marian Koreniuk tetianakh
9 people shipped this
Bi Ge @bgee 3 cited Ciprian Hacman @hakman 1 cited Davanum Srinivas @dims 1 cited cblecker @cblecker 1 cited kubernetes-prow[bot] @kubernetes-prow[bot] Marian Koreniuk @themoriarti tetianakh @tetianakh Mario Jason Braganza @jasonbraganza Kubernetes Publisher @k8s-publishing-bot

The scheduler's PreQueueingHint narrowing got both a correctness fix and coverage for CompositePodGroups, while cloud-provider-aws moved to Go 1.27.3 and golang.org/x/net v0.62.0 for two reported Go vulnerabilities.

scheduler: fix PreQueueingHint narrowing bugs kubernetes/kubernetes

by Bi Ge

The narrowing logic added earlier distinguished "some plugins want all pods" from "all plugins want all pods" incorrectly: a PreQueueingHintFn returning AllPods or an error collapsed into the second case, and plugins without a PreQueueingHintFn were skipped entirely. An evaluateAllPods field on preQueueingHintPodKeys now separates the two, so queue filtering no longer under-narrows when plugin ...

scheduler: support CompositePodGroup in PreQueueingHint narrowing kubernetes/kubernetes

by Bi Ge

Narrowing via PreQueueingHint was disabled for CompositePodGroup because collectEntitiesToEvaluate could not resolve a hinted pod to its CompositePodGroup root. A hinted group member is now resolved through getRootLookupInfoForPod, which handles both PodGroup and CompositePodGroup roots and collects each root once, so CompositePodGroup workloads get narrowing and the unused isCompositePodGroupE...

Bump Go to 1.27.3 and golang.org/x/net to v0.62.0 kubernetes/cloud-provider-aws

by Ciprian Hacman

cloud-provider-aws bumped Go to 1.27.3 and golang.org/x/net to v0.62.0; the module bump is what closes GO-2026-6860 and GO-2026-6866. If you vendor or build the AWS cloud provider from source, do it at this Go toolchain version or later.

scheduler: gate DRA pod-claim index, tighten PreQueueingHint tests kubernetes/kubernetes

by Bi Ge

The pod-by-claim index and preQueueingHint registration now only happen when SchedulerPreQueueingHints is enabled, behind a new EnableSchedulerPreQueueingHints plugin feature flag, and one pod-by-claim index is shared across scheduler profiles instead of one per profile. That second part matters because profiles share the pod informer, so later profiles' AddIndexers calls failed on the existing...

e2e/ssh: dial node internal IPs through the bastion kubernetes/kubernetes

by Davanum Srinivas

Every e2e SSH test now dials the node's internal IP before connecting from the bastion, after callers kept passing the external IP. On kops/AWS the control plane cannot reach that address, since the connection left via the internet gateway and the node security group only admits the admin CIDR, timing out every SSH-based test.

Manage org roles with peribolos kubernetes/org

by cblecker

Peribolos can now assign GitHub org roles, predefined ones like security_manager and all_repo_* or custom roles, to teams and users through a roles: block in the org config. admin/update.sh passes --fix-org-roles and cmd/merge rejects roles: inputs; this change declares no roles and alters nothing in GitHub yet. Elsewhere the long tail was routine: Ukrainian glossary translations for security-c...

$ ls kubernetes/reviews/ # the step-back reads

the week in review Kubernetes release v0.23.0 adds trixie kube-cross variant the month in review node-problem-detector 1.37.0 patches three CVEs
Full archive → Weekly reviews →

Quick answers

What shipped in Kubernetes on October 31, 2026?
The scheduler's PreQueueingHint narrowing got both a correctness fix and coverage for CompositePodGroups, while cloud-provider-aws moved to Go 1.27.3 and golang.org/x/net v0.62.0 for two reported Go vulnerabilities. In total, 112 commits and 69 pull requests landed.
Who contributed to Kubernetes on October 31, 2026?
9 developers shipped this update, including kubernetes-prow[bot], Marian Koreniuk, Ciprian Hacman, Davanum Srinivas, Bi Ge, tetianakh, cblecker, and Mario Jason Braganza, and 1 more.
What were the notable Kubernetes updates?
scheduler: fix PreQueueingHint narrowing bugs, scheduler: support CompositePodGroup in PreQueueingHint narrowing, and Bump Go to 1.27.3 and golang.org/x/net to v0.62.0.
♥

$ log @kubernetes --recent

Control plane cleanups: watchcache context prep, RecursiveReadOnlyMounts gate removed 90 shipped Consistent get backed out when etcd transforms are on 121 shipped Admission webhook metrics go beta; watch cache gets a minheap freshness waiter 103 shipped ML-DSA support for service account tokens 7 shipped

$ log --all # elsewhere on the wire

Agent Security Quiet day in agent security as guard coverage reaches four clients Alignment & Post-training verl defaults Ascend RL mode, open-instruct unblocks SFT packing

$ ls showcases/

Safety Evals AI Red Teaming Agent Security Interpretability Alignment & Post-training

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.