Kubernetes changelog

since v1.37.0 Changes by Kind Feature Kubernetes is now built using Go 1.26.8 (#142179, @cpanato) [SIG Release and Testing] Failing Test Adjust the Projected PodCertificate e2e conformance test added in 1.37 to be able to run in unprivilege

since v1.36.4 Changes by Kind Feature Kubernetes is now built using Go 1.26.8 (#142180, @cpanato) [SIG Release and Testing] Failing Test Three conformance tests added in 1.35 that are not interoperable with static CPU manager are demoted to

since v1.35.8 Changes by Kind Feature Kubelet: defer the configurations flags (and the related fallback behavior) deprecation removal timeline from 1.37 to 1.38 to align with containerd v1.7 support kubeadm: the preflight check ContainerRun

since v1.34.11 Changes by Kind Bug or Regression Kube-scheduler: a ResourceClaim whose device request counts add up past the int range no longer crashes the scheduler or skips the firstAvailable fallback in the DRA allocator. A request over

since v1.36.0 Urgent Upgrade Notes (No, really, you MUST read this before you upgrade) ACTION REQUIRED: Graduated the SELinuxMount feature gate to GA. The feature is enabled by default in v1.37, which may break existing workloads in cluster

since v1.36.3 Changes by Kind Bug or Regression Client-go: FakeCustomStore implements the Bookmark and LastStoreSyncResourceVersion methods added to the cache.Store interface in v0.36, so it satisfies cache.Store again (#141001, @alancaldel

since v1.35.7 Changes by Kind Dependency Kubernetes 1.35 is now built with Go 1.26 (#140920, @kmala) [SIG Release and Testing] Bug or Regression Fixed a race condition in preemption, where a preemptor pod could get stuck in unschedulable st

since v1.34.10 Changes by Kind Dependency Kubernetes 1.34 is now built with Go 1.26 (#140919, @kmala) [SIG API Machinery, Node, Release and Testing] Bug or Regression Update golang.org/x/text and golang.org/x/net dependencies to include sec

since v1.36.2 Changes by Kind Feature Kubernetes is now built with Go 1.26.5 (#140581, @palnabarun) [SIG Release and Testing] Failing Test Fixed a bug when the DRADeviceTaintRules feature is enabled that caused kube-scheduler to panic when

since v1.35.6 Changes by Kind Feature Kubernetes is now built with Go 1.25.12 (#140585, @palnabarun) [SIG Release and Testing] Bug or Regression Cri-api: Reverts to pre-1.34 JSON encoding of the KeyValue value field (#139966, @liggitt) [SIG

since v1.34.9 Changes by Kind Feature Kubernetes is now built with Go 1.25.12 (#140584, @palnabarun) [SIG Release and Testing] Bug or Regression Cri-api: Reverts to pre-1.34 JSON encoding of the KeyValue value field (#139967, @liggitt) [SIG

since v1.36.1 Changes by Kind Feature Kubernetes is now built using Go 1.26.4 (#139585, @cpanato) [SIG Release and Testing] Kubernetes is now built with Go 1.26.4 (#138871, @BenTheElder) [SIG Release] Bug or Regression Avoid costly comparis

since v1.35.5 Changes by Kind Feature Kubernetes is now built using Go 1.25.11 (#139588, @cpanato) [SIG Release and Testing] Bug or Regression Fixed a bug where Pods that share multi-node claims and also have per-node claims can get stuck i

since v1.34.8 Changes by Kind Feature Kubernetes is now built using Go 1.25.11 (#139589, @cpanato) [SIG Release and Testing] Bug or Regression Fixed a panic in the endpoint controller when processing services with empty IPFamilies field (pr

since v1.33.12 Changes by Kind Feature Kubernetes is now built using Go 1.25.11 (#139590, @cpanato) [SIG Release and Testing] Bug or Regression Fixed a panic in the endpoint controller when processing services with empty IPFamilies field (p

since v1.36.0 Changes by Kind Bug or Regression DRA metadata read helper (KEP-5304): on decode skip only if version is unknown, return error if object/file is malformed (#138859, @alaypatel07) [SIG Node] Fixed kubelet failure starting on ZF

since v1.35.4 Changes by Kind Bug or Regression Fixed a scheduler bug where replacing a Pod with the same name during a failed scheduling attempt could leave stale in-flight queue state and unbounded growth of in-flight event tracking. The

since v1.34.7 Changes by Kind Bug or Regression Fixed a bug where 64 bit IPv6 ServiceCIDRs allocated addresses outside the subnet range. (#138385, @hoskeri) [SIG Network] Fixed a scheduler bug where replacing a Pod with the same name during

since v1.33.11 Changes by Kind Bug or Regression Kubeadm: during 'kubeadm init', if the default 'admin.conf' and 'super-admin.conf' paths are used, load the files, but construct in memory kubeconfigs that point to the InitConfiguration.loca

since v1.35.0 Urgent Upgrade Notes (No, really, you MUST read this before you upgrade) ACTION REQUIRED: kube-controller-manager: Renamed metric volume_operation_total_errors to volume_operation_errors_total. If you are using custom monitori

since v1.35.3 Changes by Kind Feature Kubernetes is now built using Go 1.25.9 (#138304, @xmudrii) [SIG Release and Testing] Bug or Regression Fixed a bug where, after a kubelet restart, regular containers in a pod with a sidecar (initContai

since v1.34.6 Changes by Kind Dependency Kubernetes 1.34 is now built with Go 1.25 (#138150, @liggitt) [SIG Architecture, Release and Testing] Feature Kubernetes is now built using Go 1.25.9 (#138305, @xmudrii) [SIG Release and Testing] Bug

since v1.33.10 Changes by Kind Dependency Kubernetes 1.33 is now built with Go 1.25 (#138151, @liggitt) [SIG Architecture, Release and Testing] Feature Kubernetes is now built using Go 1.25.9 (#138306, @xmudrii) [SIG Release and Testing] Bu

since v1.35.2 Changes by Kind Bug or Regression Kubeadm: do not add learner member to etcd client endpoints (#137257, @ahrtr) [SIG Cluster Lifecycle] Kubeadm: ignore EINVAL when unmounting /var/lib/kubelet peer mounts during reset (#137569,

since v1.34.5 Changes by Kind Bug or Regression Kubeadm: do not add learner member to etcd client endpoints (#137258, @ahrtr) [SIG Cluster Lifecycle] Kubeadm: ignore EINVAL when unmounting /var/lib/kubelet peer mounts during reset (#137570,

since v1.33.9 Changes by Kind Bug or Regression Fix bug in ValidatingAdmissionPolicy where a object schema with additionalProperties:true would crash the kube-controller-manager with a nil pointer exception. (#136958, @lalitc375) [SIG API M

since v1.35.1 Changes by Kind Feature Kubernetes is now built using Go 1.25.7 (#136985, @cpanato) [SIG Release and Testing] Dependencies Added Nothing has changed. Changed Nothing has changed. Removed Nothing has changed.

since v1.34.4 Changes by Kind Feature Kubernetes is now built using Go 1.24.13 (#136984, @cpanato) [SIG Release and Testing] Dependencies Added Nothing has changed. Changed Nothing has changed. Removed Nothing has changed.

since v1.33.8 Changes by Kind Feature Kubernetes is now built using Go 1.24.13 (#136983, @cpanato) [SIG Release and Testing] Dependencies Added Nothing has changed. Changed Nothing has changed. Removed Nothing has changed.

since v1.32.12 Changes by Kind Feature Kubernetes is now built using Go 1.24.13 (#137048, @cpanato) [SIG Release and Testing] Dependencies Added Nothing has changed. Changed Nothing has changed. Removed Nothing has changed.

since v1.35.0 Changes by Kind Feature Kubeadm: when patching a Node object do not exit early on unknown (non-allowlisted) API errors. Instead, always retry within the duration of the polling for getting and patching a Node object. (#136072,

since v1.34.3 Changes by Kind Feature Kubeadm: when patching a Node object do not exit early on unknown (non-allowlisted) API errors. Instead, always retry within the duration of the polling for getting and patching a Node object. (#136071,

since v1.33.7 Changes by Kind Feature Kubeadm: when patching a Node object do not exit early on unknown (non-allowlisted) API errors. Instead, always retry within the duration of the polling for getting and patching a Node object. (#136070,

since v1.32.11 Changes by Kind Feature Kubeadm: when patching a Node object do not exit early on unknown (non-allowlisted) API errors. Instead, always retry within the duration of the polling for getting and patching a Node object. (#136069

since v1.34.0 Urgent Upgrade Notes (No, really, you MUST read this before you upgrade) ACTION REQUIRED: Removed the --pod-infra-container-image flag from kubelet command line. For non-kubeadm clusters, users must manually remove this flag f

since v1.32.10 Changes by Kind Feature Kubernetes is now built using Go 1.24.10 (#135508, @cpanato) [SIG Release and Testing] Kubernetes is now built using Go 1.24.11 (#135614, @cpanato) [SIG Release and Testing] Bug or Regression Fixes a s

since v1.34.2 Changes by Kind Feature Kubernetes is now built using Go 1.24.10 (#135506, @cpanato) [SIG Release and Testing] Kubernetes is now built using Go 1.24.11 (#135612, @cpanato) [SIG Release and Testing] Bug or Regression Fixes a sp

since v1.33.6 Changes by Kind Feature Kubernetes is now built using Go 1.24.10 (#135507, @cpanato) [SIG Release and Testing] Kubernetes is now built using Go 1.24.11 (#135613, @cpanato) [SIG Release and Testing] Bug or Regression Fixed a da

since v1.34.1 Changes by Kind Feature Kubernetes is now built using Go 1.24.7 (#134222, @cpanato) [SIG Release and Testing] Kubernetes is now built using Go 1.24.9 update setcap and debian-base to bookworm-v1.0.6 (#134612, @cpanato) [SIG Ar

since v1.33.5 Changes by Kind Feature Kubernetes is now built using Go 1.24.9 update setcap and debian-base to bookworm-v1.0.6 (#134613, @cpanato) [SIG Architecture, Cloud Provider, Etcd, Release, Storage and Testing] Bug or Regression Bump

since v1.32.9 Changes by Kind Feature Kubernetes is now built using Go 1.24.9 update setcap and debian-base to bookworm-v1.0.6 (#134617, @cpanato) [SIG Architecture, Auth, Cloud Provider, Etcd, Release, Storage and Testing] Bug or Regressio

since v1.31.13 Changes by Kind Feature Kubernetes is now built using Go 1.24.9 update setcap and debian-base to bookworm-v1.0.6 (#134618, @cpanato) [SIG API Machinery, Architecture, Cloud Provider, Etcd, Release, Storage and Testing] Bug or

since v1.34.0 Changes by Kind Bug or Regression Fixed SELinux warning controller not emitting events on some SELinux label conflicts. (#133745, @jsafrane) [SIG Apps, Storage and Testing] Fixed broken shell completion for api resources. (#13

since v1.33.4 Changes by Kind Feature Kubernetes is now built using Go 1.24.6 (#133522, @cpanato) [SIG Release and Testing] Bug or Regression Adjusted the conformance test for the ServiceCIDR API to not test Patch/Update, since they are lis

since v1.32.8 Changes by Kind Feature Kubernetes is now built using Go 1.23.12 (#133521, @cpanato) [SIG Release and Testing] Bug or Regression Kubeadm: fixed bug where v1beta3's ClusterConfiguration.APIServer.TimeoutForControlPlane is not r

since v1.31.12 Changes by Kind Feature Kubernetes is now built using Go 1.23.12 (#133517, @cpanato) [SIG Release and Testing] Bug or Regression Kubeadm: fixed bug where v1beta3's ClusterConfiguration.APIServer.TimeoutForControlPlane is not

since v1.33.0 Urgent Upgrade Notes (No, really, you MUST read this before you upgrade) For metrics apiserver_cache_list_fetched_objects_total, apiserver_cache_list_returned_objects_total, apiserver_cache_list_total replace resource_prefix l

since v1.33.3 Important Security Information This release contains changes that address the following vulnerabilities: CVE-2025-5187: Nodes can delete themselves by adding an OwnerReference A vulnerability exists in the NodeRestriction admi

since v1.32.7 Important Security Information This release contains changes that address the following vulnerabilities: CVE-2025-5187: Nodes can delete themselves by adding an OwnerReference A vulnerability exists in the NodeRestriction admi

since v1.31.11 Important Security Information This release contains changes that address the following vulnerabilities: CVE-2025-5187: Nodes can delete themselves by adding an OwnerReference A vulnerability exists in the NodeRestriction adm

since v1.33.2 Changes by Kind Bug or Regression Fix a bug causing unexpected delay of creating pods for newly created jobs (#132158, @linxiulei) [SIG Apps and Testing] Fix regression introduced in 1.33 - where some Paginated LIST calls are

since v1.32.6 Changes by Kind Bug or Regression Fix a bug causing unexpected delay of creating pods for newly created jobs (#132159, @linxiulei) [SIG Apps and Testing] Fix validation for Job with suspend=true, and completions=0 to set the C

since v1.31.10 Changes by Kind Bug or Regression Fix a bug causing unexpected delay of creating pods for newly created jobs (#132109, @linxiulei) [SIG Apps and Testing] Kubeadm: fixed issue where etcd member promotion fails with an error sa

since v1.33.1 Important Security Information This release contains changes that address the following vulnerabilities: CVE-2025-4563: Nodes can bypass dynamic resource allocation authorization checks A vulnerability exists in the NodeRestri

since v1.32.5 Important Security Information This release contains changes that address the following vulnerabilities: CVE-2025-4563: Nodes can bypass dynamic resource allocation authorization checks A vulnerability exists in the NodeRestri

since v1.31.9 Changes by Kind Feature Kubernetes is now built using Go 1.23.10 (#132224, @cpanato) [SIG Release and Testing] Kubernetes is now built using Go 1.23.9 (#131937, @cpanato) [SIG Release and Testing] Bug or Regression Removed a w

since v1.30.13 Changes by Kind Feature Kubernetes is now built using Go 1.23.10 (#132223, @cpanato) [SIG Release and Testing] Kubernetes is now built using Go 1.23.9 (#131938, @cpanato) [SIG Release and Testing] Bug or Regression Improve er

since v1.33.0 Changes by Kind Bug or Regression Check for newer resize fields when deciding recovery feature's status in kubelet (#131437, @gnufied) [SIG Storage] Disable reading of disk geometry before calling expansion for ext and xfs fil

since v1.32.4 Changes by Kind Feature Kubernetes is now built with Go 1.23.8 (#131528, @ameukam) [SIG Release and Testing] Bug or Regression Check for newer resize fields when deciding recovery feature's status in kubelet (#131438, @gnufied

since v1.31.8 Changes by Kind Feature Kubernetes is now built with Go 1.23.8 (#131537, @ameukam) [SIG Release and Testing] Bug or Regression Check for newer resize fields when deciding recovery feature's status in kubelet (#131439, @gnufied

since v1.30.12 Changes by Kind Feature Kubernetes is now built using Go 1.23.8 (#131683, @ameukam) [SIG Release and Testing] Dependencies Added Nothing has changed. Changed Nothing has changed. Removed Nothing has changed.

since v1.32.0 Urgent Upgrade Notes (No, really, you MUST read this before you upgrade) Added the ability to reduce both the initial delay and the maximum delay accrued between container restarts for a node for containers in CrashLoopBackOff

since v1.32.3 Changes by Kind Bug or Regression Fix a bug where kube-apiserver could emit an further watch even even if decryption failed for earlier event and it was not emitted. (#131159, @wojtek-t) [SIG API Machinery and Etcd] Fix kubele

since v1.31.7 Changes by Kind Bug or Regression Fix a bug where kube-apiserver could emit an further watch even even if decryption failed for earlier event and it was not emitted. (#131160, @wojtek-t) [SIG API Machinery and Etcd] Fix kubele

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG. See the CHANGELOG for more details.