Kubernetes - 3

2026 (9)

April (8)

k8s: Kubernetes v1.36: User Namespaces in Kubernetes are finally GA

Kubernetes Official Blog

2026-04-23

Kubernetes v1.36 makes User Namespaces GA on Linux, allowing Pods to run with hostUsers: false so container root is isolated from host root. The release also relies on ID-mapped mounts to avoid recursive chown on volumes, improving startup performance and preserving on-disk ownership.

azure: [Launched] Generally Available: Azure Monitor for Azure Arc-enabled Kubernetes with OpenShift and Azure Red Hat OpenShift

Azure Updates

2026-04-23

Azure Monitor is now generally available for Azure Arc-enabled Kubernetes clusters running OpenShift and Azure Red Hat OpenShift. It extends monitoring for health and performance across Kubernetes infrastructure and dependent applications.

k8s: SELinux Volume Label Changes goes GA (and likely implications in v1.37)

Kubernetes Official Blog

2026-04-22

Kubernetes v1.36 introduces stable Pod field `spec.securityContext.seLinuxChangePolicy` and a new optional `selinux-warning-controller` to help prepare for a likely v1.37 default-on `SELinuxMount` change. When SELinux is enabled, mounts can switch from recursive relabeling to mount-time labeling, which improves performance but can break some shared-volume patterns; clusters should audit for conflicts and opt out per Pod with `Recursive` if needed.

k8s: Kubernetes v1.36: ハル (Haru)

Kubernetes Official Blog

2026-04-22

Kubernetes v1.36 (Haru) ships 70 enhancements: 18 stable, 25 beta, and 25 alpha. Highlights include GA for fine-grained kubelet API authorization, user namespaces in pods, external ServiceAccount token signing, SELinux volume label changes, and removal of the gitRepo volume driver; Service.spec.externalIPs is deprecated for removal in v1.43.

k8s: Gateway API v1.5: Moving features to Stable

Kubernetes Official Blog

2026-04-21

Gateway API v1.5 promotes six features to the Standard channel and updates the release process to a release train model with feature freeze dates. It also includes a v1 bump for ReferenceGrant, plus notes on migration and compatibility for existing Experimental TLSRoute resources.

aks: Release 2026-04-02

Release notes from AKS

2026-04-09

AKS release 2026-04-02 adds new Kubernetes patch versions, preview and GA feature updates, component bumps, and several bug fixes/security remediations. It also announces future retirements for Ubuntu 22.04, a kubelet certificate rotation disable tag, and Teleport (preview).

azure: [Launched] Generally Available: Pod CIDR expansion in AKS

Azure Updates

2026-04-07

Azure Kubernetes Service (AKS) now supports generally available Pod CIDR expansion for overlay-based clusters. This lets teams increase the pod IP range when clusters run out of addresses, avoiding cluster rebuilds.

github: Prioritize security alerts with runtime context from Dynatrace

GitHub

2026-04-07

GitHub Advanced Security alerts can now be prioritized using runtime context from Dynatrace, including deployed artifacts and runtime risk in Kubernetes environments. This adds environment-aware signal to help rank alerts.

March (1)

k8s: Kubernetes v1.36 Sneak Peek

Kubernetes Official Blog

2026-03-30

Kubernetes v1.36 is planned for April 22, 2026 and includes API deprecations/removals plus several feature graduations. Notable changes are deprecating Service .spec.externalIPs, disabling the gitRepo volume driver, and promoting SELinux volume labeling and external ServiceAccount token signing to GA.