Last Week in Kubernetes Development
Stay up-to-date on Kubernetes development in 15 minutes a week.
Week Ending August 16, 2026
Developer News
containerd is deprecating the implicit restore-via-CreateContainer codepath introduced by KEP-2008 (Forensic Container Checkpointing) after multiple CVEs; containerd 2.3.4 and 2.2.7 retain it as an experimental opt-in behind enable_experimental_restore_via_create, and containerd 2.4 removes it in favor of the explicit RestorePod API from KEP-5823.
SIG ContribEx has added AI notetaker guidance to Kubernetes Zoom meeting guidelines. AI notetaker bots (such as Granola, Otter.ai, Fireflies.ai, Fathom, or Read.ai) are not permitted on Kubernetes Zoom calls. Unauthorized third-party recording poses risks around consent, privacy, and moderation.
Election Update
Voting is now open for the 2026 Kubernetes Steering Committee election. Six candidates are running this year, including Sean McGinnis (stmcginnis), Michael McCune (elmiko), Priyanka Saggu (priyankasaggu11929), Janet Kuo (janetkuo), Kaslin Fields (kaslin), and Jack Francis (jackfrancis).
Voting will remain open through October 1, with exception requests due by September 29. If you are marked as not eligible despite your contributions, please request an exception.
Release Schedule
Next Deadline: v1.37.0 release, 26th August
The v1.37 release cycle enters its final week. Kubernetes v1.37.0-rc.1 has been released, built with Go 1.26.5, following v1.37.0-rc.0 on August 6. The final v1.37.0 release, and release blog publication are all targeted for August 26.
August Kubernetes patch releases have been delayed to August 19 to allow additional time for cherry-picks affected by recent GitHub disruptions and automation failures.
Kubernetes v1.38 Release Team Shadow application is open through August 28, with the v1.38 release cycle expected to begin around August 31.
Featured PRs
141375: fix: count init container node allocatable DRA claim overhead only towards peak resource calculation
pravk03 fixed DRA resource accounting for init containers. Resource overhead from DRA claims used by init containers should contribute to a Pod’s peak resource usage while those containers are running, but should not continue reducing the node’s steady-state allocatable capacity after they finish. This PR corrects that distinction, helping prevent nodes from appearing to have less capacity than they actually do and improving scheduling decisions for workloads that use Dynamic Resource Allocation.
141459: kubelet: invalidate name-keyed ClusterTrustBundle cache entries
RafPe fixed kubelet cache invalidation for name-keyed ClusterTrustBundle objects. Without invalidating cached entries when a bundle changes, kubelet could continue using stale trust-bundle data instead of observing the latest object contents. This PR ensures that updates to named ClusterTrustBundles invalidate the corresponding cache entries, allowing kubelet consumers to use current trust information.
KEP of the Week
KEP-5729: DRA: ResourceClaim Support for Workloads
This enhancement extends the Workload API and PodGroup API to allow ResourceClaims and ResourceClaimTemplates to be associated with an entire PodGroup, making it easier to share DRA resources across multiple related Pods. A ResourceClaim referenced by a PodGroup is reserved for the whole group rather than each individual Pod, avoiding the current 256-entry limit in status.reservedFor. Similarly, a ResourceClaimTemplate can automatically generate one ResourceClaim for the PodGroup, eliminating the need to manually create and name shared claims. This is particularly useful for large AI/ML workloads, where closely related Pods need to be placed within the same network or topology boundary for better performance. The enhancement also makes resource sharing more practical for workload APIs such as JobSet and LeaderWorkerSet, allowing Kubernetes to manage shared DRA resources generically through the common PodGroup abstraction.
This enhancement has been proposed to become Beta for Kubernetes v1.37.
Version Updates
Subprojects and Dependency Updates
- cluster-api v1.14.0: bump to Golang 1.26, introduce dedicated API Go module, enable safe joining of nodes on older Kubernetes versions with kubeadm, surface upgrade plan and Runtime Extension errors in cluster status; also v1.13.5
- containerd v2.3.4: disable checkpoint restore in CreateContainer by default, fix memory leak in OOM watcher, fix EROFS snapshotter dropping lower layers; also v2.2.7
Shoutouts
- No shoutouts this week. Want to thank someone for special efforts to improve Kubernetes? Tag them in the #shoutouts channel.
Last Week In Kubernetes Development (LWKD) is a product of multiple contributors participating in Kubernetes SIG Contributor Experience. All original content is licensed Creative Commons Share-Alike, although linked content and images may be differently licensed. LWKD does collect some information on readers, see our privacy notice for details.
You may contribute to LWKD by submitting pull requests or issues on the LWKD github repo.