Kubernetes — full archive
176 daily briefings · 14 reviews.
$ ls kubernetes/reviews/ # the step-back reads
- week Kubernetes release v0.23.0 adds trixie kube-cross variant
- week Kubernetes 1.38 clears two deprecated feature gates
- week IPVS deprecation gains migration guide to iptables, nftables
- week node-problem-detector 1.37.0 ships with three CVE fixes
- week Kubelet filters scoped link-local nameservers from pods
- month node-problem-detector 1.37.0 patches three CVEs
- week Apiserver write throughput KEP opens as seven KEPs move
- week v1.38 KEPs stack up: WebSockets GA, WAS and CRI streaming to beta
- week Master drops containerd 1.7 over RuntimeConfig RPC
- week Kubernetes patches SSH DoS, ships quantity overflow fix
- month Kubernetes patches SSH DoS CVE as 1.38 KEPs line up
- week Declarative validation for Condition.Message lands, graduates stable
- week kOps 1.37 beta lands, GCE jobs and Kopeio dropped
- month August Ships Kubernetes 1.37 RC and kOps 1.37 Beta
- Control plane cleanups: watchcache context prep, RecursiveReadOnlyMounts gate removed
- Consistent get backed out when etcd transforms are on
- Admission webhook metrics go beta; watch cache gets a minheap freshness waiter
- ML-DSA support for service account tokens
- PodGroupPreemptionPolicy gate removed, ResourceQuota retry admits denied requests
- Alibaba Cloud provider fixes stale LB backends, release tooling goes SPDX 3
- Registry client stops fetching foreign bundle layers, client-go bumps x/net for two CVEs
- Release tooling gains per-image levels, Kueue CI moves to Go 1.27
- kops stops pruning Karpenter NodePools it cannot fully render
- Scheduler narrows DRA queues, cloud-provider-aws takes two Go security fixes
- kops fixes kubelet status flooding, controller-manager deprecates raw Config builders
- Kueue presubmits stop firing 51 jobs at a time
- CRD types move to k8s.io/apiextensions-api, grpc hits 1.85.0
- DeepCopy revert lands, client-go leader election gets a recovery mode
- Two deprecated kubelet feature gates drop in 1.38
- SystemdWatchdog gate retired as minikube's CI learns to survive capacity pressure
- Kops exposes kubelet burst and fixes IPv6-only node registration
- go-tpm-tools gets a CVE fix as git-sync stops leaking secrets
- kubectl drops OpenAPI v2, client-go extracts from v3
- kops fixes bare-metal S3 uploads, cacher watch alignment lands
- Go 1.27.3 lands in kubernetes, addon-resizer ports to master
- IPVS deprecation gets a migration guide, NLB gains an ALPN knob
- kops fixes kubeconfig reconcile, scheduler stops leaking nominated nodes
- kops compares GCE firewall rules as sets, PSA drops its webhook
- Pod security admission webhook removed, release signing moves to sigstore-go
- Golangci-lint enforces deprecation notices, dbus pin dropped
- kubectl always uses WebSockets; node-problem-detector 1.37.0 patches three CVEs
- Watch cache correctness work lands in apiserver
- etcd benchmark fixed, promo-tools bump breaks the release build
- etcd 3.7 lands in perf-tests, watch cache gains Limit support
- client_golang 1.25.0 lands across four published components, scheduler validates pod group hierarchies
- Per-release EC2 scale jobs, kops bastion capacity fallbacks
- VPA gains a startup observation window, OCI autoscaling reads real ephemeral storage
- DRA deadlock fix lands, watch cache tightens List selectors
- Storage gets RV-aware, VPA matching gets a baseline
- Kubelet stops leaking unusable link-local nameservers into pods
- Per-VPA target percentiles, WatchList benchmarks in the request path
- Watch cache streaming, kubectl kuberc fixes
- Quantity becomes a value type, HPA overflow fixed
- GCP provider learns to skip firewall rules, metis gets non-reusable CIDRs
- DRA capacity requests, in-place node resize, and weighted load balancing head to KEP review
- kube-state-metrics exposes PVC idle time, apiserver write throughput gets a KEP
- Proxy fix targets NodePort localhost detection, hugepages KEP takes shape
- kubeadm adds ML-DSA signing support
- kops adopts patched containerd, grpc unpinned across Kubernetes repos
- Post-quantum certs reach client-go, managedFields gets a server-side opt-out
- DRA plugin socket paths shortened, k8s CI gains write-throughput and minimum-Go jobs
- Watch cache stops broadcasting unchanged resource versions
- 1.38 KEPs line up: WebSockets GA, CRI streaming and Workload Aware Scheduling to beta
- Minikube probes drivers in parallel, promo-tools signs promotion records
- Minikube drops pre-1.28 test fixtures, golang.org/x bumps land across the tree
- kubectl explain gains shell completion, kubelet threads real contexts
- Vultr autoscaling fixes, LimitRanger stops re-rejecting PVC updates
- DRA feature gate removed, code-generator learns multi-doc extensions files
- Master drops containerd 1.7, StorageClass validation goes stable
- KubeCon NA banner lands, go-jose and go-oidc bumped across published staging repos
- DRA kind jobs get 12Gi, kubelet drops an optimistic volume default
- kops SSH test skip pattern fixed, allowPrivilegeEscalation docs clarified
- Service CIDR feature gates retired, grpc bumped to 1.82.2
- Quantity overflow fixes land as security profiles merger gets a team
Never miss a Kubernetes briefing.
Get Kubernetes's week in review every Monday - and security advisories the day they land. Free, unsubscribe in one click.
One click. Every Monday: what mattered across the projects you've been reading (or our AI picks) — security news same-day. You refine anytime. Choose specific journals · Read a sample issue →