$ cat kubernetes/week/2026-10-26.log
the week in review · Oct 26 – Nov 1, 2026
Kubernetes 1.38 clears two deprecated feature gates
By RepoJournal · composed from the cited sources · human-reviewed weekly · methodology
ExecProbeTimeout and AllowOverwriteTerminationGracePeriodSeconds come out under the three-release emulation window, and CRD types move staging repos.
pkg/features: remove GA feature gate ExecProbeTimeout kubernetes/kubernetes
The gate graduated to GA in 1.20 and was locked to default in 1.35, so 1.38 is the first release the removal window allows. Any manifest or kubelet config still setting ExecProbeTimeout will fail to start after the upgrade.
pkg/features: remove deprecated feature gate AllowOverwriteTerminationGracePeriodSeconds kubernetes/kubernetes
Deprecated in 1.32 and locked to false in 1.35, it now clears the same emulation window. Clusters relying on the gate to override a pod's termination grace period have had no working path since 1.35; strip the flag from saved configs.
Merge pull request #142746 from yongruilin/131447-move-code kubernetes/apiextensions-apiserver
CRD types and clients now live in the new staging repo k8s.io/apiextensions-api. The follow-up marks the client alias variables deprecated, so imports of the old aliases should be rewritten at the point they are touched rather than at the next bump.
Merge pull request #143289 from michaelasp/leader-election-recovery kubernetes/client-go
client-go leader election gains a recovery mode and a write gate. Controllers using client-go's lease-based election should review the change before picking it up, since it alters how a holder reacquires and writes its lease.
Add trixie cloud builder and update cloud/ci builder to 1.27.3/1.26.10 kubernetes/release
The release tooling adds a Trixie variant for the 1.38 cloud builder, tracks its kube-cross dependency, and keeps the existing Bullseye variants alongside it. Python packages now install into a virtual environment.
Merge pull request #143448 from Jefftree/revert-142743 kubernetes/apiserver
The revert undoes removal of "redundant DeepCopyObject calls in Store validation hooks" in the apiserver, restoring the calls the original change dropped. A correctness revert in storage validation, not a behavioral feature.
kueue: skip more paths, raise unscheduled timeout kubernetes/test-infra
A default Kueue PR starts 51 presubmits, and waves of dependabot runs, cherry-picks and /ok-to-test sweeps were tripping pod_unscheduled_timeout on the shared EKS build cluster. The job now skips more paths and raises the timeout.
Update aws-iam-authenticator to v0.7.24 kubernetes/kops
The authentication.aws addon image moves from v0.6.20-eks-1-30-7 to v0.7.24-cvefix-eks-1-37-4, still sourced from eks-distro. kops operators on AWS clusters get this on their next kops update.
$ ls kubernetes/week/ # the briefings behind this review
Keep up with Kubernetes in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.
fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.
Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.