Kubernetes v1.37 Sneak Peek: Key Deprecations, Removals, and New Features

by

Kubernetes v1.37 Sneak Peek: Key Deprecations, Removals, and New Features

As Kubernetes v1.37 approaches its release on August 26, 2026, the project is finalizing several deprecations and introducing new features. The release team outlines changes that impact maintenance and upgrade paths.

Deprecations and Removals

  • Kubectl: The --filename (or -f) flag for kubectl run is deprecated. The blog notes that generated pods are always built purely from CLI arguments like NAME and --image.
  • Static Pods: Static Pods can no longer reference Secrets or ConfigMaps. Previously, a bug allowed this via configMapRef or secretRef. The PreventStaticPodAPIReferences feature gate has been removed.
  • Kube-proxy ipvs mode: Support for ipvs mode is deprecated. It is expected to be disabled by default by v1.40 and fully removed by v1.43. The blog suggests checking current mode using a specific kubectl command.
  • Cgroup v1: Support for the legacy cgroup v1 is being phased out. Since v1.35, failCgroupV1 defaults to true. The blog provides a configuration override but advises against using it long-term.

Breaking Changes

  • SELinux Mount: The SELinuxMount feature graduates to GA and is enabled by default. Volumes are mounted with -o context=<label> instead of recursive relabeling. Pods with different SELinux labels sharing a volume may fail to start. A seLinuxChangePolicy: Recursive setting can revert this behavior.

Featured Enhancements

  • Metrics API: The metrics.k8s.io API graduates to Stable (GA) after nearly nine years in Beta. It powers HPA and kubectl top.
  • Rootless Kubelet: The Kubelet in UserNS (Rootless Mode) graduates to Beta, allowing node components to run as unprivileged users.
  • Volume Health Monitor: New CSI RPCs allow drivers to report volume health, populating fields like PersistentVolumeClaim.status.healthStatus.