Week Ending June 1, 2025

Developer News

The Enhancements subteam issued a reminder about tracking changes. Contributors must opt in for tracking if their KEP includes user-facing changes or behavior affecting improvements, even if the KEP doesn’t graduate to a new stage. Pure refactors, non-behavioural improvements, and bug fixes do not require tracking by the Release Team.

Release Schedule

Next Deadline: PRR Freeze, June 12th

This is the last week-and-a-half before those KEPs need to be ready for production readiness review with all the PRR questions answered.

Cherry-picks for the June Patch Releases are due on June 6.

KEP of the Week

KEP-3331: Structured Authentication Config

This KEP introduces the capability to add structured authentication configuration to the Kubernetes API server, using a new API Object called AuthenticationConfiguration. It supports a JWT token, which serves as the next stage for the OIDC authenticator. Previously, authentication for the API server was performed using command-line flags, which were difficult to manage, validate, and lacked consistency. The KEP implements the Kubernetes API schema for validation and provides a standardized, extensible format, improving configuration clarity.

This KEP is tracked as stable in v1.34.

Other Merges

• kuberc adds tests for DefaultGetPreferences
• PVCs annotated with node-expand-not-required to not be expanded
• Pod admission and resize logic moved into the allocation manager
• Stress tests added for VolumeAttributesClass
• New –show-swap option for kubectl top subcommands
• 5s delay of tainting node.kubernetes.io/unreachable:NoExecute reduced when a Node becomes unreachable
• kubelet: the –image-credential-provider-config flag can now specify a directory path as well
• Moved Scheduler interfaces to staging
• agnhost: added server address for conntrack cleanup entries
• kube-proxy: Remove iptables cli wait interval flag
• DRA: kubelet added validation before changing claim info cache
• DRA: Improvements to the implementation of counter management in allocator

Promotions

• RelaxedDNSSearchValidation to GA

Version Updates

• kube-dns to v1.26.4

Subprojects and Dependency Updates

• Python client 32.0.0 Alpha is released, as well as version 33.1.0 Beta.

Last Week In Kubernetes Development (LWKD) is a product of multiple contributors participating in Kubernetes SIG Contributor Experience. All original content is licensed Creative Commons Share-Alike, although linked content and images may be differently licensed. LWKD does collect some information on readers, see our privacy notice for details.

You may contribute to LWKD by submitting pull requests or issues on the LWKD github repo.