Kubernetes
KUBERNETES CORE CUTS WATCH LOCK CONTENTION BY 99 PERCENT
A critical performance fix reduces WatchList RLock hold time from linear to constant, unblocking high-cardinality cluster operations.
read --wire →
$ tail -f topics/go.log
Go news, every morning.
Daily updates from Go and the cloud-native infrastructure written in it - Kubernetes, HashiCorp's stack, and the Go standard library.
21 updates across 3 projects this week.
Your week in Go, every Monday.
One calm review of what shipped across Go - the commits, releases, and security advisories that matter. Every Monday, with security advisories same-day. Free, unsubscribe in one click.
We'll start you on the top Go projects - refine anytime. · Read a sample issue →
Recent wires
Go
HTTP/2 TIMEOUT BUG PATCHED IN NET/HTTP, COMPILER CRASHES FIXED ACROSS STACK
Go just plugged a timing hole in HTTP/2 preface detection that left connections exposed, while the compiler team cleaned up three separate miscompilation bugs that were crashing builds.
read --wire →
HashiCorp
VAULT OPERATOR ADOPTS TERRATEST 1.0, CONSUL DUMPS NODE20 RUNTIMES
Vault Secrets Operator moved to Terratest's first stable release while Consul and TFE Helm tightened CI security posture across the org.
read --wire →
Kubernetes
KOPS HARDENS CCM SCHEDULING, DRA GPU DRIVER SHIPS v0.4.1
Cloud-controller-manager pods across five cloud providers now tolerate all node taints, eliminating a class of scheduling failures on heavily tainted control planes.
read --wire →
Go
GOPLS CRASHES ON MALFORMED CACHE, CRYPTO HARDENS SSH AGAINST HOSTILE PEERS
The gopls language server has a mystery crash in its frob decoder that defenders are now treating as a hardware fault scenario, while the crypto team closes two SSH attack surfaces that silently drain memory and corrupt terminal output.
read --wire →
Kubernetes
KUBERNETES ORG EXPANDS AS DOCS SYNC ACCELERATES ACROSS LOCALES
New contributor joins kubernetes org while documentation teams push major localization updates and test infrastructure hardens Windows support.
read --wire →
HashiCorp
NOMAD STACK GETS FRESH NIGHTLY BUILDS FOR TESTING
Both the Podman driver and Autoscaler are publishing nightly snapshots, giving you a chance to validate upcoming changes before they land in stable releases.
read --wire →
Kubernetes
KOPS REFACTORS ROLE COMPARISON AHEAD OF MULTI-PLANE SUPPORT
Kubernetes operations is moving away from direct Role comparisons to helper methods, preparing the infrastructure for supporting additional control plane types beyond the current master/worker split.
read --wire →
Go
GOIMPORTS JUST GOT 3X FASTER
golang/tools cut goimports execution time from seconds to subseconds by leveraging the module cache index that gopls already builds.
read --wire →
HashiCorp
BOUNDARY WORKER HELM OVERHAULS TEST MATRIX, NOMAD AUTOSCALER SHIPS JSONENCODE SUPPORT
Boundary's Kubernetes validation just got real - switching from KIND binaries to actual versioned nodes means the chart now proves it works on the K8s versions you're actually running.
read --wire →
Kubernetes
KARPENTER LANDS IN KOPS, KUBE-PROXY CUTS CADVISOR DEPENDENCY
Kops now ships native Karpenter EC2NodeClass and NodePool support while kube-proxy eliminates its cadvisor dependency by reading CPU topology directly from cpuset.
read --wire →
Go
GOLANG PATCHES CRYPTO RACE, TOOLS FIXES PLAN 9 COMPATIBILITY
Go's crypto/autocert library ships a critical data race fix while the tools team systematically hardens Plan 9 support across gopls and the standard library.
read --wire →
HashiCorp
PYTHON-TFE NOW HYDRATES RELATED RESOURCES FROM API INCLUDES
The Python Terraform Enterprise SDK can now automatically populate related resources when you request them with ?include= parameters, eliminating manual data assembly in your TFE integrations.
read --wire →
Kubernetes
KOPS SHIPS APISERVER-ONLY NODES, KUBE-OPENAPI FIXES STDLIB JSON COLLISION
Kops now lets you run dedicated API server nodes separate from control plane workers, solving a years-old load balancer problem that sent traffic to both when you only wanted one.
read --wire →
Go
GO 1.27 RELEASE CANDIDATE LANDS, VULNDB PLUGS TWO NEW HOLES
Go 1.27 RC1 is available now [ref:11], and the vulnerability database just sealed two fresh CVEs while patching an insufficient fix from last month [ref:1] [ref:2] [ref:3].
read --wire →
HashiCorp
NOMAD ECOSYSTEM EXPANDS WITH INSTANA METRICS AND PODMAN PLATFORM CONTROL
Nomad Autoscaler now ships with native Instana APM integration while the Podman driver gains fine-grained image platform selection.
read --wire →
Kubernetes
KUBERNETES 1.37 CLEANS HOUSE AS KARPENTER V1 ADOPTION ACCELERATES
Kubernetes is purging three deprecated API versions ahead of 1.37 release while kOps moves fast to align with Karpenter v1 semantics and drops support for obsolete master node labels.
read --wire →
Go
JSON V2 BREAKS INLINE TAG, ADOPTS EMBED INSTEAD
The encoding/json/v2 rewrite is renaming its `inline` tag option to `embed` to avoid conflicts with existing Go code that already uses `inline` for different purposes.
read --wire →
HashiCorp
NOMAD PACK AND PODMAN DRIVER PUSH NIGHTLY BUILDS
HashiCorp rolled fresh nightly snapshots across both Nomad Pack and the Podman driver, giving operators early access to unreleased features and bug fixes.
read --wire →
Kubernetes
KOPS BREAKS ETCD COUPLING, KUBERNETES DROPS DEPRECATED SETS
Kops decouples APIServer from local Etcd with load balancer support [ref:1], while core Kubernetes scrubs deprecated libraries ahead of the 1.36 release.
read --wire →