Results for “kubernetes”
24 results in news.
News
24 matches-
Kubernetes 1.36 formally deprecates Service externalIPs
The .spec.externalIPs field on Service objects is formally deprecated in Kubernetes v1.36, with kube-proxy implementation slated for removal in a future minor release. Driven by CV…
-
Kubernetes 1.36 splits Workload and PodGroup APIs for batch and AI scheduling
Kubernetes v1.36 introduces a new PodGroup API alongside the Workload API in scheduling.k8s.io/v1alpha2, separating static templates from runtime state and unlocking DRA for gang-s…
-
Kubernetes 1.36 graduates PSI metrics to GA
Pressure Stall Information metrics are now GA at node, pod, and container levels in Kubernetes v1.36, giving operators a kernel-grade signal for resource contention without out-of-…
-
Kubernetes Ships May Patch Wave Across 1.33–1.36, Fixes IPv6 ServiceCIDR Allocation Bug
Kubernetes 1.36.1, 1.35.5, 1.34.8, and 1.33.12 landed on the May 12 cherry-pick window. No CVEs, but a real correctness bug — services getting IPv6 addresses outside their allocate…
-
Kubernetes 1.36 Sneak Peek: DRA Goes GA, Ingress-NGINX Retires, HPA Scales to Zero
Kubernetes v1.36, releasing April 22, finalizes DRA to GA, graduates User Namespaces, enables HPA scale-to-zero by default, and formally retires Ingress-NGINX.
-
vLLM, SGLang, Kubernetes, Kueue, and Helm ship runtime fixes
vLLM and SGLang released AI serving updates, while Kubernetes, Kueue, and Helm shipped scheduler, queueing, and release-management fixes.
-
Kubernetes 1.36 graduates DRA prioritized list to GA and pushes five device-control features to beta
On the heels of DRA graduating to GA in v1.36, the May 7 follow-up details one new stable feature — prioritized list — and five betas covering partitionable devices, device taints,…
-
Kubernetes 1.36 lands server-side sharded list and watch in alpha
KEP-5866 ships in v1.36 with a new shardSelector field on ListOptions, moving event filtering from clients to the API server. Horizontally sharded controllers no longer pay for the…
-
Kubernetes 1.36 introduces pod-level CPU, memory, and topology managers in alpha
The kubelet's CPU, memory, and topology managers extend to pod scope behind the PodLevelResourceManagers and PodLevelResources feature gates. Performance-critical containers keep N…
-
llm-d Accepted as CNCF Sandbox Project — Kubernetes-Native Distributed LLM Inference Gets an Open Standard
The distributed LLM inference engine co-created by Red Hat, Google Cloud, IBM Research, CoreWeave, and NVIDIA joins the CNCF, establishing an open standard for inference workloads…
-
CVE-2026-33105: AKS Critical Privilege Escalation Hits CVSS 10.0
Microsoft disclosed a CVSS 10.0 privilege escalation vulnerability in Azure Kubernetes Service. Specific technical details are still sparse, but the confirmed characteristics make…
-
Kyverno Graduates from CNCF — Policy-as-Code Goes Mainstream
Kyverno reaches CNCF Graduated status with full CEL adoption, completing its journey from Kubernetes admission controller to a broader policy engine for the cloud native stack.
-
ExternalDNS 0.23.0 Fixes Dry-Run Mutations and Changes the CRD Registry Namespace Default
ExternalDNS 0.23.0 prevents NS1 and Alibaba Cloud changes during dry-run, while CRD registry users must pin their existing DNSRecord namespace before upgrading.
-
Gloo Gateway Fixes Interrupted Validation That Could Drop Listeners
Four Gloo Gateway patch releases stop interrupted Envoy validation from being cached as a configuration failure, which could remove a listener during WAF validation.
-
runc 1.5.0 ships stable, Prometheus 3.13 enters RC, Talos patches etcd leak
runc cut its first stable 1.5 release with libpathrs hardening and a new support policy, Prometheus opened a 3.13.0 release candidate with new PromQL functions, and Talos v1.12.9 f…
-
containerd patches a runAsNonRoot bypass across every supported branch
containerd v2.3.1, v2.2.4, v2.0.9, and v1.7.32 fix CVE-2026-46680, a moderate-severity flaw that lets a crafted image override a pod's numeric runAsUser by exploiting integer overf…
-
CRI-O 1.36 ships with CNI health monitoring; all supported branches patch a spdystream DoS
CRI-O 1.36.0 and patch releases for 1.35, 1.34, and 1.33 landed on May 5 with CVE-2026-35469 (CVSS 8.7) fixed across the board, alongside new CNI status polling and GOMAXPROCS inje…
-
Dragonfly Adds Native Hugging Face and ModelScope Protocols
Dragonfly's dfget now supports hf:// and modelscope:// with auth and revision pinning. The upside is simpler model distribution and lower origin egress, but benchmark claims still…
-
Istio Ships Ambient Multicluster Beta and Gateway API Inference Extension
Istio's ambient mode gains multicluster support in beta with sidecar-free cross-cluster routing, and integrates the Gateway API Inference Extension for model-aware traffic manageme…
-
KubeVirt v1.8: Hypervisor Abstraction Layer, Confidential VMs, and the Push Toward CNCF Graduation
KubeVirt v1.8 introduces a hypervisor abstraction layer decoupling it from KVM, Intel TDX attestation for confidential VMs, and PCIe NUMA topology awareness for near-native GPU per…
-
NVIDIA Donates GPU DRA Driver to CNCF, Open-Sources KAI Scheduler and Grove
NVIDIA shifts governance of its Dynamic Resource Allocation driver for GPUs to the CNCF, gets KAI Scheduler accepted as a Sandbox project, and open-sources Grove for AI inference o…
-
Linux Foundation Secures $12.5M to Defend Open Source from AI-Generated Vulnerability Flood
Anthropic, AWS, GitHub, Google, Microsoft, and OpenAI fund $12.5M through OpenSSF to help open source maintainers cope with the flood of AI-generated security reports and vulnerabi…
-
Flux 2.8.8 patches two go-git CVEs and stops helm-controller memory growth
Flux v2.8.8 picks up go-git v5.19.1 to address CVE-2026-45571 and CVE-2026-45570, fixes an unbounded memory leak in helm-controller's Kubernetes client transport, and adds GCP sove…
-
SPIRE 1.15 promotes Sigstore attestation out of experimental and adds a Vault Key Manager
SPIRE v1.15.0 graduates Sigstore support in the Kubernetes and Docker workload attestors, ships a HashiCorp Vault Key Manager plugin, and changes CLI JSON output in a way that will…