k8s: Kubernetes v1.36: Deprecation and removal of Service ExternalIPs
Kubernetes Official Blog
2026-05-14
Kubernetes 1.36 formally deprecates `Service.spec.externalIPs` because the feature is insecure by default and can enable CVE-2020-8554-style abuse. Kubernetes will warn on use now, disable it in kube-proxy no earlier than v1.40 with an opt-in path, and remove opt-back-in support no earlier than v1.43.