Posts in 2026
Kubernetes v1.36: Fine-Grained Kubelet API Authorization Graduates to GA
By Vinayak Goyal (Google) | Friday, April 24, 2026 in Blog
On behalf of Kubernetes SIG Auth and SIG Node, we are pleased to announce the graduation of fine-grained kubelet API authorization to General Availability (GA) in Kubernetes v1.36! The KubeletFineGrainedAuthz feature gate was introduced as an opt-in …
Kubernetes v1.36: User Namespaces in Kubernetes are finally GA
By Rodrigo Campos Catelin (Amutable), Giuseppe Scrivano (Red Hat) | Thursday, April 23, 2026 in Blog
After several years of development, User Namespaces support in Kubernetes reached General Availability (GA) with the v1.36 release. This is a Linux-only feature. For those of us working on low level container runtimes and rootless technologies, this …
SELinux Volume Label Changes goes GA (and likely implications in v1.37)
By Jan Šafránek (Red Hat) Swathi Rao (Independent) | Wednesday, April 22, 2026 in Blog
If you run Kubernetes on Linux with SELinux in enforcing mode, plan ahead: a future release (anticipated to be v1.37) is expected to turn the SELinuxMount feature gate on by default. This makes volume setup faster for most workloads, but it can break …
Kubernetes v1.36: ハル (Haru)
By Kubernetes v1.36 Release Team | Wednesday, April 22, 2026 in Blog
Editors: Chad M. Crowell, Kirti Goyal, Sophia Ugochukwu, Swathi Rao, Utkarsh Umre Similar to previous releases, the release of Kubernetes v1.36 introduces new stable, beta, and alpha features. The consistent delivery of high-quality releases …
Gateway API v1.5: Moving features to Stable
Tuesday, April 21, 2026 in Blog
The Kubernetes SIG Network community presents the release of Gateway API (v1.5)! Released on February 27, 2026, version 1.5 is our biggest release yet, and concentrates on moving existing Experimental features to Standard (Stable). The Gateway API …
Kubernetes v1.36 Sneak Peek
By Chad Crowell, Kirti Goyal, Sophia Ugochukwu, Swathi Rao, Utkarsh Umre | Monday, March 30, 2026 in Blog
Kubernetes v1.36 is coming at the end of April 2026. This release will include removals and deprecations, and it is packed with an impressive number of enhancements. Here are some of the features we are most excited about in this cycle! Please note …
Announcing Ingress2Gateway 1.0: Your Path to Gateway API
By Beka Modebadze (Google), Steven Jin (Microsoft) | Friday, March 20, 2026 in Blog
With the Ingress-NGINX retirement scheduled for March 2026, the Kubernetes networking landscape is at a turning point. For most organizations, the question isn't whether to migrate to Gateway API, but how to do so safely. Migrating from Ingress to …
Running Agents on Kubernetes with Agent Sandbox
By Janet Kuo, Justin Santa Barbara | Friday, March 20, 2026 in Blog
The landscape of artificial intelligence is undergoing a massive architectural shift. In the early days of generative AI, interacting with a model was often treated as a transient, stateless function call: a request that spun up, executed for perhaps …
Securing Production Debugging in Kubernetes
By Shridivya Sharma | Wednesday, March 18, 2026 in Blog
During production debugging, the fastest route is often broad access such as cluster-admin (a ClusterRole that grants administrator-level access), shared bastions/jump boxes, or long-lived SSH keys. It works in the moment, but it comes with two …
The Invisible Rewrite: Modernizing the Kubernetes Image Promoter
By Sascha Grunert (Red Hat) | Tuesday, March 17, 2026 in Blog
Every container image you pull from registry.k8s.io got there through kpromo, the Kubernetes image promoter. It copies images from staging registries to production, signs them with cosign, replicates signatures across more than 20 regional mirrors, …