Kubernetes v1.36 formally deprecates the Service.spec.externalIPs field. The project cites security risks, specifically CVE-2020-8554, and advises migrating to Gateway API or cloud-native load balancers like MetalLB.
Kubernetes has corrected CVE records for four vulnerabilities that cannot be patched due to architectural constraints. This update clarifies the status of CVE-2020-8554, CVE-2020-8561, CVE-2020-8562, and CVE-2021-25740, and provides specific configuration steps to mitigate the risks.
Kubernetes Dashboard has been archived and Headlamp is its successor. This article explains the key differences, new capabilities, and practical steps to transition your teams smoothly.
The SIG Storage blog spotlight reveals the latest milestones—VolumeGroupSnapshot now GA, CSI Changed Block Tracking entering beta, and upcoming features like Volume Health and Mutable PV Affinity—shaping storage for AI‑driven workloads in Kubernetes.
The Device Management Working Group’s Dynamic Resource Allocation (DRA) framework has reached General Availability in Kubernetes 1.34, offering a programmable, hardware‑aware model for GPUs, TPUs, NICs and other accelerators.
The Headlamp Knative plugin lets operators view, edit, and debug Knative workloads—KServices, Revisions, and traffic splits—directly from the Headlamp UI, consolidating kubectl, kn CLI, and other tools into one interface.
Learn how the Volcano plugin for Headlamp brings batch‑scheduler resources like Jobs, Queues, and PodGroups into a single Kubernetes UI, streamlining troubleshooting for AI/ML, HPC, and other high‑performance workloads.
Kubernetes has published an AI policy that requires contributors to disclose AI usage, keeps humans accountable for code changes, and outlines how AI tools like Copilot and CodeRabbit can be used safely in the project.
The Kubernetes SIG etcd announced etcd v3.7.0, adding the long‑awaited RangeStream RPC, eliminating legacy v2store dependencies, and bringing a suite of performance, security, and usability improvements for cloud‑native workloads.
The Kubernetes SIG‑etcd announced the first beta of etcd 3.7.0, featuring the long‑awaited RangeStream RPC, removal of legacy v2store code, and the end‑of‑life of version 3.4.
Kubernetes 1.36 adds an alpha counter metric, route_controller_route_sync_total, to the Cloud Controller Manager. The metric lets operators verify the new watch‑based route reconciliation feature gate and see how many route syncs actually occur.
Kubernetes 1.36 moves the Mixed Version Proxy (MVP) from Alpha to Beta and enables it by default, improving upgrade safety by transparently routing unknown‑resource requests to a capable API server.
