K8sContributors

• 
  K8sContributors kubernetes.dev · 15h
  CVE-2025-15566: ingress-nginx auth-proxy-set-headers nginx configuration injection -
  

  CVE-2025-15566: ingress-nginx auth-proxy-set-headers nginx configuration injection · Issue #136789 · kubernetes/kubernetes

  CVSS Rating: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H A security issue was discovered in ingress-nginx where the nginx.ingress.kubernetes.io/auth-proxy-set-headers Ingress annotation can be use...

  github.com
  Repost Quote post

  View on BlueskyCopy Bluesky URLCopy post URLTranslate postShow all post labels
• 
  K8sContributors kubernetes.dev · Feb 5
  Last Week in Kubernetes Development: Week Ending February 1, 2026 -
  

  Week Ending February 1, 2026

  Developer News

  lwkd.info
  Repost Quote post

  View on BlueskyCopy Bluesky URLCopy post URLTranslate postShow all post labels
• 
  K8sContributors kubernetes.dev · Feb 5
  Introducing Node Readiness Controller-
  

  Introducing Node Readiness Controller

  In the standard Kubernetes model, a node’s suitability for workloads hinges on a single binary "Ready" condition. However, in modern Kubernetes environments, nodes require complex infrastructure dependencies—such...

  kubernetes.io
  Repost Quote post

  View on BlueskyCopy Bluesky URLCopy post URLTranslate postShow all post labels
• 
  K8sContributors kubernetes.dev · Feb 4
  CVE-2026-24514: ingress-nginx Admission Controller denial of service -
  

  CVE-2026-24514: ingress-nginx Admission Controller denial of service · Issue #136680 · kubernetes/kubernetes

  CVSS Rating: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H A security issue was discovered in ingress-nginx where the validating admission controller feature is subject to a denial of service condit...

  github.com
  Repost Quote post

  View on BlueskyCopy Bluesky URLCopy post URLTranslate postShow all post labels
• 
  K8sContributors kubernetes.dev · Feb 4
  CVE-2026-24513: ingress-nginx auth-url protection bypass -
  

  CVE-2026-24513: ingress-nginx auth-url protection bypass · Issue #136679 · kubernetes/kubernetes

  CVSS Rating: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N A security issue was discovered in ingress-nginx where the protection afforded by the auth-url Ingress annotation may not be effective in t...

  github.com
  Repost Quote post

  View on BlueskyCopy Bluesky URLCopy post URLTranslate postShow all post labels
• 
  K8sContributors kubernetes.dev · Feb 3
  CVE-2026-24512: ingress-nginx rules.http.paths.path nginx configuration injection -
  

  CVE-2026-24512: ingress-nginx rules.http.paths.path nginx configuration injection · Issue #136678 · kubernetes/kubernetes

  CVSS Rating: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H A security issue was discovered in ingress-nginx where the rules.http.paths.path Ingress field can be used to inject configuration into ngi...

  github.com
  Repost Quote post

  View on BlueskyCopy Bluesky URLCopy post URLTranslate postShow all post labels
• 
  K8sContributors kubernetes.dev · Feb 3
  CVE-2026-1580: ingress-nginx auth-method nginx configuration injection -
  

  CVE-2026-1580: ingress-nginx auth-method nginx configuration injection · Issue #136677 · kubernetes/kubernetes

  CVSS Rating: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H A security issue was discovered in ingress-nginx where the nginx.ingress.kubernetes.io/auth-method Ingress annotation can be used to inject...

  github.com
  Repost Quote post

  View on BlueskyCopy Bluesky URLCopy post URLTranslate postShow all post labels
• 
  K8sContributors kubernetes.dev · Feb 2
  New Conversion from cgroup v1 CPU Shares to v2 CPU Weight-
  

  New Conversion from cgroup v1 CPU Shares to v2 CPU Weight

  I'm excited to announce the implementation of an improved conversion formula from cgroup v1 CPU shares to cgroup v2 CPU weight. This enhancement addresses critical issues with CPU priority allocation...

  kubernetes.io
  Repost Quote post

  View on BlueskyCopy Bluesky URLCopy post URLTranslate postShow all post labels
• 
  K8sContributors kubernetes.dev · Jan 30
  Last Week in Kubernetes Development: Week Ending January 25, 2026 -
  

  Week Ending January 25, 2026

  Developer News

  lwkd.info
  Repost Quote post

  View on BlueskyCopy Bluesky URLCopy post URLTranslate postShow all post labels
• 
  K8sContributors kubernetes.dev · Jan 29
  Ingress NGINX: Statement from the Kubernetes Steering and Security Response Committees-
  

  Ingress NGINX: Statement from the Kubernetes Steering and Security Response Committees

  In March 2026, Kubernetes will retire Ingress NGINX, a piece of critical infrastructure for about half of cloud native environments. The retirement of Ingress NGINX was announced for March 2026, after...

  kubernetes.io
  Repost Quote post

  View on BlueskyCopy Bluesky URLCopy post URLTranslate postShow all post labels
• 
  K8sContributors kubernetes.dev · Jan 28
  Experimenting with Gateway API using kind-

  Experimenting with Gateway API using kind

  This document will guide you through setting up a local experimental environment with Gateway API on kind. This setup is designed for learning and testing. It helps you understand Gateway API concepts...

  kubernetes.io
  Repost Quote post

  View on BlueskyCopy Bluesky URLCopy post URLTranslate postShow all post labels
• 
  K8sContributors kubernetes.dev · Jan 27
  Cluster API v1.12: Introducing In-place Updates and Chained Upgrades-
  

  Cluster API v1.12: Introducing In-place Updates and Chained Upgrades

  Cluster API brings declarative management to Kubernetes cluster lifecycle, allowing users and platform teams to define the desired state of clusters and rely on controllers to continuously reconcile toward...

  kubernetes.io
  Repost Quote post

  View on BlueskyCopy Bluesky URLCopy post URLTranslate postShow all post labels
• 
  K8sContributors kubernetes.dev · Jan 26
  [SIG ContribEx] Weekly Contributor Comms Meeting for 2026-01-16 www.youtube.com/watch?v=UqnX...
  
  Repost Quote post

  View on BlueskyCopy Bluesky URLCopy post URLTranslate postDownload imageShow all post labels
• 
  K8sContributors kubernetes.dev · Jan 26
  Kubernetes New Contributor Orientation for 2026-01-20 www.youtube.com/watch?v=atDq...
  
  Repost Quote post

  View on BlueskyCopy Bluesky URLCopy post URLTranslate postDownload imageShow all post labels
• 
  K8sContributors kubernetes.dev · Jan 23
  Kubernetes New Contributor Orientation for 2026-01-20 www.youtube.com/watch?v=h3Rz...
  
  Repost Quote post

  View on BlueskyCopy Bluesky URLCopy post URLTranslate postDownload imageShow all post labels
• 
  K8sContributors kubernetes.dev · Jan 23
  Last Week in Kubernetes Development: Week Ending January 18, 2026 -
  

  Week Ending January 18, 2026

  Developer News

  lwkd.info
  Repost Quote post

  View on BlueskyCopy Bluesky URLCopy post URLTranslate postShow all post labels
• 
  K8sContributors kubernetes.dev · Jan 22
  Headlamp in 2025: Project Highlights-
  

  Headlamp in 2025: Project Highlights

  This announcement is a recap from a post originally published on the Headlamp blog. Headlamp has come a long way in 2025. The project has continued to grow – reaching more teams across platforms, powering...

  kubernetes.io
  Repost Quote post

  View on BlueskyCopy Bluesky URLCopy post URLTranslate postShow all post labels
• 
  K8sContributors kubernetes.dev · Jan 22
  Announcing the Checkpoint/Restore Working Group-

  Announcing the Checkpoint/Restore Working Group

  The community around Kubernetes includes a number of Special Interest Groups (SIGs) and Working Groups (WGs) facilitating discussions on important topics between interested contributors. Today we would...

  kubernetes.io
  Repost Quote post

  View on BlueskyCopy Bluesky URLCopy post URLTranslate postShow all post labels
• 
  K8sContributors kubernetes.dev · Jan 21
  Blog: Announcing the Checkpoint/Restore Working Group-

  Announcing the Checkpoint/Restore Working Group

  The community around Kubernetes includes a number of Special Interest Groups (SIGs) and Working Groups (WGs) facilitating discussions on important topics between interested contributors. Today we would...

  kubernetes.dev
  Repost Quote post

  View on BlueskyCopy Bluesky URLCopy post URLTranslate postShow all post labels
• 
  K8sContributors kubernetes.dev · Jan 21
  Ingress NGINX is being retired as of March 2026. After this date, no security patches or bugfixes will be issued. Plan your migration to Gateway API or a supported controller now. Read the retirement guide: kubernetes.io/blog/2025/11...

  Ingress NGINX Retirement: What You Need to Know

  To prioritize the safety and security of the ecosystem, Kubernetes SIG Network and the Security Response Committee are announcing the upcoming retirement of Ingress NGINX. Best-effort maintenance…

  kubernetes.io
  Repost Quote post

  View on BlueskyCopy Bluesky URLCopy post URLTranslate postShow all post labels
• 
  K8sContributors kubernetes.dev · Jan 20
  Registration for the Maintainer Summit Europe 2026 is OPEN! Kubernetes Org Members can register to join us on March 22 to connect, solve project hurdles, and grow the ecosystem. Register for the Maintainer Summit here: events.linuxfoundation.org/kubecon-clou...
  

  Maintainer Summit | LF Events

  RAI Amsterdam Europaplein 24, 1078 GZ Amsterdam, Netherlands RAI Amsterdam Europaplein 24, 1078 GZ Amsterdam, Netherlands The CNCF Maintainer Summit is an exclusive event for the people behind our…

  events.linuxfoundation.org
  1

  Repost Quote post

  View on BlueskyCopy Bluesky URLCopy post URLTranslate postShow all post labels
• 
  K8sContributors kubernetes.dev · Jan 20
  Uniform API server access using clientcmd-

  Uniform API server access using clientcmd

  If you've ever wanted to develop a command line client for a Kubernetes API, especially if you've considered making your client usable as a kubectl plugin, you might have wondered how to make your client...

  kubernetes.io
  Repost Quote post

  View on BlueskyCopy Bluesky URLCopy post URLTranslate postShow all post labels
• 
  K8sContributors kubernetes.dev · Jan 19
  Kubernetes New Contributor Orientation is typically held on the third Tuesday of each month, in two timezones. The next session is tomorrow, 20th January! Check out k8s.dev/calendar, add the next session to your calendar and get started contributing! #Kubernetes

  Community Calendar

  Meetings in the Kubernetes Community

  k8s.dev
  Repost Quote post

  View on BlueskyCopy Bluesky URLCopy post URLTranslate postShow all post labels
• 
  K8sContributors kubernetes.dev · Jan 9
  Kubernetes v1.35: Restricting executables invoked by kubeconfigs via exec plugin allowList added to kuberc-

  Kubernetes v1.35: Restricting executables invoked by kubeconfigs via exec plugin allowList added to kuberc

  Did you know that kubectl can run arbitrary executables, including shell scripts, with the full privileges of the invoking user, and without your knowledge? Whenever you download or auto-generate a kubeconfig,...

  kubernetes.io
  Repost Quote post

  View on BlueskyCopy Bluesky URLCopy post URLTranslate postShow all post labels
• 
  K8sContributors kubernetes.dev · Jan 9
  Kubernetes v1.35: Mutable PersistentVolume Node Affinity (alpha)-

  Kubernetes v1.35: Mutable PersistentVolume Node Affinity (alpha)

  The PersistentVolume node affinity API dates back to Kubernetes v1.10. It is widely used to express that volumes may not be equally accessible by all nodes in the cluster. This field was previously immutable,...

  kubernetes.io
  Repost Quote post

  View on BlueskyCopy Bluesky URLCopy post URLTranslate postShow all post labels
• 
  K8sContributors kubernetes.dev · Jan 8
  Last Week in Kubernetes Development: Week Ending January 4, 2026 -
  

  Week Ending January 4, 2026

  Developer News

  lwkd.info
  Repost Quote post

  View on BlueskyCopy Bluesky URLCopy post URLTranslate postShow all post labels
• 
  K8sContributors kubernetes.dev · Jan 8
  Kubernetes v1.35: A Better Way to Pass Service Account Tokens to CSI Drivers-

  Kubernetes v1.35: A Better Way to Pass Service Account Tokens to CSI Drivers

  If you maintain a CSI driver that uses service account tokens, Kubernetes v1.35 brings a refinement you'll want to know about. Since the introduction of the TokenRequests feature, service account tokens...

  kubernetes.io
  Repost Quote post

  View on BlueskyCopy Bluesky URLCopy post URLTranslate postShow all post labels
• 
  K8sContributors kubernetes.dev · Jan 6
  Kubernetes v1.35: Extended Toleration Operators to Support Numeric Comparisons (Alpha)-

  Kubernetes v1.35: Extended Toleration Operators to Support Numeric Comparisons (Alpha)

  Many production Kubernetes clusters blend on-demand (higher-SLA) and spot/preemptible (lower-SLA) nodes to optimize costs while maintaining reliability for critical workloads. Platform teams need a safe...

  kubernetes.io
  Repost Quote post

  View on BlueskyCopy Bluesky URLCopy post URLTranslate postShow all post labels
• 
  K8sContributors kubernetes.dev · Jan 5
  Kubernetes v1.35: New level of efficiency with in-place Pod restart-

  Kubernetes v1.35: New level of efficiency with in-place Pod restart

  The release of Kubernetes 1.35 introduces a powerful new feature that provides a much-requested capability: the ability to trigger a full, in-place restart of the Pod. This feature, Restart All Containers...

  kubernetes.io
  Repost Quote post

  View on BlueskyCopy Bluesky URLCopy post URLTranslate postShow all post labels
• 
  K8sContributors kubernetes.dev · Jan 1
  Kubernetes 1.35: Enhanced Debugging with Versioned z-pages APIs-

  Kubernetes 1.35: Enhanced Debugging with Versioned z-pages APIs

  Debugging Kubernetes control plane components can be challenging, especially when you need to quickly understand the runtime state of a component or verify its configuration. With Kubernetes 1.35, we're...

  kubernetes.io
  Repost Quote post

  View on BlueskyCopy Bluesky URLCopy post URLTranslate postShow all post labels
• 
  K8sContributors kubernetes.dev · Dec 31, 2025
  Kubernetes v1.35: Watch Based Route Reconciliation in the Cloud Controller Manager-

  Kubernetes v1.35: Watch Based Route Reconciliation in the Cloud Controller Manager

  Up to and including Kubernetes v1.34, the route controller in Cloud Controller Manager (CCM) implementations built using the k8s.io/cloud-provider library reconciles routes at a fixed interval. This causes...

  kubernetes.io
  Repost Quote post

  View on BlueskyCopy Bluesky URLCopy post URLTranslate postShow all post labels
• 
  K8sContributors kubernetes.dev · Dec 30, 2025
  Kubernetes v1.35: Introducing Workload Aware Scheduling-

  Kubernetes v1.35: Introducing Workload Aware Scheduling

  Scheduling large workloads is a much more complex and fragile operation than scheduling a single Pod, as it often requires considering all Pods together instead of scheduling each one independently. For...

  kubernetes.io
  Repost Quote post

  View on BlueskyCopy Bluesky URLCopy post URLTranslate postShow all post labels
• 
  K8sContributors kubernetes.dev · Dec 24, 2025
  Kubernetes v1.35: Fine-grained Supplemental Groups Control Graduates to GA-

  Kubernetes v1.35: Fine-grained Supplemental Groups Control Graduates to GA

  On behalf of Kubernetes SIG Node, we are pleased to announce the graduation of fine-grained supplemental groups control to General Availability (GA) in Kubernetes v1.35! The new Pod field, supplementalGroupsPolicy,...

  kubernetes.io
  Repost Quote post

  View on BlueskyCopy Bluesky URLCopy post URLTranslate postShow all post labels
• 
  K8sContributors kubernetes.dev · Dec 24, 2025
  Kubernetes v1.35: Kubelet Configuration Drop-in Directory Graduates to GA-

  Kubernetes v1.35: Kubelet Configuration Drop-in Directory Graduates to GA

  With the recent v1.35 release of Kubernetes, support for a kubelet configuration drop-in directory is generally available. The newly stable feature simplifies the management of kubelet configuration across...

  kubernetes.io
  Repost Quote post

  View on BlueskyCopy Bluesky URLCopy post URLTranslate postShow all post labels
• 
  K8sContributors kubernetes.dev · Dec 23, 2025
  Avoiding Zombie Cluster Members When Upgrading to etcd v3.6-

  Avoiding Zombie Cluster Members When Upgrading to etcd v3.6

  The key takeaway? Always upgrade to etcd v3.5.26 or later before moving to v3.6. This ensures your cluster is automatically repaired, and avoids zombie members.

  kubernetes.io
  Repost Quote post

  View on BlueskyCopy Bluesky URLCopy post URLTranslate postShow all post labels
• 
  K8sContributors kubernetes.dev · Dec 23, 2025
  Kubernetes 1.35: In-Place Pod Resize Graduates to Stable-

  Kubernetes 1.35: In-Place Pod Resize Graduates to Stable

  This release marks a major step: more than 6 years after its initial conception, the In-Place Pod Resize feature (also known as In-Place Pod Vertical Scaling), first introduced as alpha in Kubernetes...

  kubernetes.io
  Repost Quote post

  View on BlueskyCopy Bluesky URLCopy post URLTranslate postShow all post labels
• 
  K8sContributors kubernetes.dev · Dec 22, 2025
  Kubernetes v1.35: Job Managed By Goes GA-

  Kubernetes v1.35: Job Managed By Goes GA

  In Kubernetes v1.35, the ability to specify an external Job controller (through .spec.managedBy) graduates to General Availability. This feature allows external controllers to take full responsibility...

  kubernetes.io
  Repost Quote post

  View on BlueskyCopy Bluesky URLCopy post URLTranslate postShow all post labels
• 
  K8sContributors kubernetes.dev · Dec 22, 2025
  Last Week in Kubernetes Development: Week Ending December 14, 2025 -
  

  Week Ending December 14, 2025

  Developer News

  lwkd.info
  Repost Quote post

  View on BlueskyCopy Bluesky URLCopy post URLTranslate postShow all post labels
• 
  K8sContributors kubernetes.dev · Dec 19, 2025
  Kubernetes New Contributor Orientation for 2025-12-16 www.youtube.com/watch?v=JmMD...
  
  Repost Quote post

  View on BlueskyCopy Bluesky URLCopy post URLTranslate postDownload imageShow all post labels
• 
  K8sContributors kubernetes.dev · Dec 19, 2025
  Kubernetes New Contributor Orientation for 2025-12-16 www.youtube.com/watch?v=bOI6...
  
  Repost Quote post

  View on BlueskyCopy Bluesky URLCopy post URLTranslate postDownload imageShow all post labels
• 
  K8sContributors kubernetes.dev · Dec 18, 2025
  Kubernetes v1.35: Timbernetes (The World Tree Release)-
  

  Kubernetes v1.35: Timbernetes (The World Tree Release)

  Editors: Aakanksha Bhende, Arujjwal Negi, Chad M. Crowell, Graziano Casto, Swathi Rao Similar to previous releases, the release of Kubernetes v1.35 introduces new stable, beta, and alpha features. The...

  kubernetes.io
  Repost Quote post

  View on BlueskyCopy Bluesky URLCopy post URLTranslate postShow all post labels
• 
  K8sContributors kubernetes.dev · Dec 18, 2025
  Avoiding Zombie Cluster Members When Upgrading to etcd v3.6-

  Avoiding Zombie Cluster Members When Upgrading to etcd v3.6

  Summary: SIG-etcd has patched another potential issue blocking upgrades from v3.5 to v3.6. If you are upgrading, make sure to update to v3.5.26 or later first. Issue Summary Recently, the etcd community...

  etcd.io
  Repost Quote post

  View on BlueskyCopy Bluesky URLCopy post URLTranslate postShow all post labels
• 
  K8sContributors kubernetes.dev · Dec 17, 2025
  CVE-2025-14269: Credential caching in Headlamp with Helm enabled -
  

  CVE-2025-14269: Credential caching in Headlamp with Helm enabled · Issue #135798 · kubernetes/kubernetes

  Original tracking issue: kubernetes-sigs/headlamp#4282 CVSS Rating: High (8.8) CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Description of vulnerability A security issue was discovered in the in-cl...

  github.com
  Repost Quote post

  View on BlueskyCopy Bluesky URLCopy post URLTranslate postShow all post labels
• 
  K8sContributors kubernetes.dev · Dec 15, 2025
  Kubernetes New Contributor Orientation is typically held on the third Tuesday of each month, in two timezones. The next session is tomorrow, 16th December! Check out k8s.dev/calendar, add the next session to your calendar and get started contributing! #Kubernetes

  Community Calendar

  Meetings in the Kubernetes Community

  k8s.dev
  Repost Quote post

  View on BlueskyCopy Bluesky URLCopy post URLTranslate postShow all post labels
• 
  K8sContributors kubernetes.dev · Dec 12, 2025
  Last Week in Kubernetes Development: Week Ending December 7, 2025 -
  

  Week Ending December 7, 2025

  Developer News

  lwkd.info
  Repost Quote post

  View on BlueskyCopy Bluesky URLCopy post URLTranslate postShow all post labels
• 
  K8sContributors kubernetes.dev · Dec 4, 2025
  Last Week in Kubernetes Development: Week Ending November 30, 2025 -
  

  Week Ending November 30, 2025

  Developer News

  lwkd.info
  Repost Quote post

  View on BlueskyCopy Bluesky URLCopy post URLTranslate postShow all post labels
• 
  K8sContributors kubernetes.dev · Dec 2, 2025
  CVE-2025-13281: Portworx Half-Blind SSRF in kube-controller-manager -
  

  CVE-2025-13281: Portworx Half-Blind SSRF in kube-controller-manager · Issue #135525 · kubernetes/kubernetes

  CVSS Rating: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N - Medium (5.8) A half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portw...

  github.com
  Repost Quote post

  View on BlueskyCopy Bluesky URLCopy post URLTranslate postShow all post labels
• 
  K8sContributors kubernetes.dev · Nov 28, 2025
  Kubernetes New Contributor Orientation for 2025-11-18 www.youtube.com/watch?v=m2DO...
  
  Repost Quote post

  View on BlueskyCopy Bluesky URLCopy post URLTranslate postDownload imageShow all post labels
• 
  K8sContributors kubernetes.dev · Nov 27, 2025
  Kubernetes New Contributor Orientation for 2025-11-18 www.youtube.com/watch?v=KLut...
  
  Repost Quote post

  View on BlueskyCopy Bluesky URLCopy post URLTranslate postDownload imageShow all post labels