Last Week In Kubernetes Development

Subscribe
Archives
June 5, 2025

LWKD: Week Ending June 1, 2025

Week Ending June 1, 2025

Developer News

The Enhancements subteam issued a reminder about tracking changes. Contributors must opt in for tracking if their KEP includes user-facing changes or behavior affecting improvements, even if the KEP doesn't graduate to a new stage. Pure refactors, non-behavioural improvements, and bug fixes do not require tracking by the Release Team.

Release Schedule

Next Deadline: PRR Freeze, June 12th

This is the last week-and-a-half before those KEPs need to be ready for production readiness review with all the PRR questions answered.

Cherry-picks for the June Patch Releases are due on June 6.

KEP of the Week

KEP-3331: Structured Authentication Config

This KEP introduces the capability to add structured authentication configuration to the Kubernetes API server, using a new API Object called AuthenticationConfiguration. It supports a JWT token, which serves as the next stage for the OIDC authenticator. Previously, authentication for the API server was performed using command-line flags, which were difficult to manage, validate, and lacked consistency. The KEP implements the Kubernetes API schema for validation and provides a standardized, extensible format, improving configuration clarity.

This KEP is tracked as stable in v1.34.

Other Merges

  • kuberc adds tests for DefaultGetPreferences
  • PVCs annotated with node-expand-not-required to not be expanded
  • Pod admission and resize logic moved into the allocation manager
  • Stress tests added for VolumeAttributesClass
  • New --show-swap option for kubectl top subcommands
  • 5s delay of tainting node.kubernetes.io/unreachable:NoExecute reduced when a Node becomes unreachable
  • kubelet: the --image-credential-provider-config flag can now specify a directory path as well
  • Moved Scheduler interfaces to staging
  • agnhost: added server address for conntrack cleanup entries
  • kube-proxy: Remove iptables cli wait interval flag
  • DRA: kubelet added validation before changing claim info cache
  • DRA: Improvements to the implementation of counter management in allocator

Promotions

  • RelaxedDNSSearchValidation to GA

Version Updates

  • kube-dns to v1.26.4

Subprojects and Dependency Updates

  • Python client 32.0.0 Alpha is released, as well as version 33.1.0 Beta.
Don't miss what's next. Subscribe to Last Week In Kubernetes Development:
Powered by Buttondown, the easiest way to start and grow your newsletter.