Kubernetes Release Notes

Kubernetes v1.37.0-rc.0 has been built and pushed using Golang version 1.26.5.

The release notes have been updated in CHANGELOG-1.37.md, with a pointer to them on GitHub:

Downloads for v1.37.0-rc.0 include Source Code, Client Binaries, Server Binaries, Node Binaries, and Container Images supporting multiple architectures.

Changelog since v1.37.0-beta.0 includes:

• Dependency updates such as google.golang.org/grpc to v1.82.1.
• API changes including new Pod eviction coordination features, alpha support for binding service account tokens to webhook configurations, CompositePodGroup support, and more.
• Feature additions like a new allocatedPods kubelet endpoint, pod-level cpu_ids and memory reporting, and alpha kubelet metrics.
• Bug fixes addressing issues in kubelet, DRA scheduling, PVC binding, MemoryQoS, and others.
• Other improvements and cleanup tasks.

The release notes document extensive changes across SIGs including API Machinery, Apps, Node, Scheduling, Storage, Instrumentation, Network, and Testing.

Contributors, the CHANGELOG-1.37.md has been bootstrapped with v1.37.0-rc.0 release notes and you may edit now as needed.

Published by your Kubernetes Release Managers.

Original source

Kubernetes Community

Kubernetes v1.36.3 has been built and pushed using Golang version 1.26.5.

The release notes have been updated in CHANGELOG-1.36.md, with a pointer to them on GitHub:

v1.36.3

Downloads for v1.36.3

Source Code

Client Binaries

Server Binaries

Node Binaries

Container Images

All container images are available as manifest lists and support the described architectures. It is also possible to pull a specific architecture directly by adding the "-$ARCH" suffix to the container image name.

Changelog since v1.36.2

Changes by Kind

Feature

• Kubernetes is now built with Go 1.26.5 (#140581, @palnabarun) [SIG Release and Testing]

Failing Test

• Fixed a bug when the DRADeviceTaintRules feature is enabled that caused kube-scheduler to panic when DeviceTaintRules exist and ResourceSlices are changed or to ignore new changes to DeviceTaintRules. (#139681, @nojnhuh) [SIG Node and Testing]

Bug or Regression

• Cri-api: Reverts to pre-1.34 JSON encoding of the KeyValue value field (#139965, @liggitt) [SIG Node]
• Fixed DRA scheduling bugs where the structured allocator mis-counted a device's shared counters while exploring candidates: it could keep a counter reserved after rejecting or backtracking a candidate, or drop a shared device's in-use marker so a later share was charged the counter twice. Either way the allocator could treat a counter set as exhausted and leave a pod pending on a node that could satisfy it. This affected the allocator used by the default feature configuration. (#140663, @thc1006) [SIG Node]
• Fixed a kubelet memory leak regression in 1.36 caused by leaked contexts on every Pod sync. (#140066, @compumike) [SIG Node]
• Fixes a 1.36 regression in server side apply where patching a container type (list or map) could result in 422 required errors for apply requests that previously succeeded. (#140296, @jpbetz) [SIG API Machinery, Architecture, Auth, CLI, Cloud Provider, Cluster Lifecycle, Network, Node, Scheduling and Storage]
• Kubeadm: Improved resilience of kubeadm etcd learner promotion. kubeadm now correctly handles cases where learner promotion succeeds on the etcd side but a transient client-side error is returned, preventing unnecessary etcd-join failures. (#139910, @jihyun-huh) [SIG Cluster Lifecycle]
• Kubeadm: during "kubeadm join", use the KubernetesAPICall timeout (default 1 minute) when fetching the kubeadm-config ConfigMap, instead of the short 350ms retry used for optional component configs. A new shortConfigMapGet parameter is added to FetchInitConfigurationFromCluster so that callers like "kubeadm reset" can still use the short retry. (#139808, @damdo) [SIG Cluster Lifecycle]
• Kubeadm: fix MemberPromote to skip the etcd promote API call when the member is already a voting member, avoiding unnecessary retries and timeout. (#138493, @wgkingk) [SIG Cluster Lifecycle]
• Kubelet no longer emits V(4) "Label not found" logs for missing optional container annotations. (#140322, @HirazawaUi) [SIG Node]

Dependencies

Added

Nothing has changed.

Changed

• sigs.k8s.io/structured-merge-diff/v6: v6.3.2 → v6.3.3

Removed

Nothing has changed.

Contributors, the CHANGELOG-1.36.md has been bootstrapped with v1.36.3 release notes and you may edit now as needed.

Published by your Kubernetes Release Managers.

Original source

Kubernetes Community,

Kubernetes v1.35.7 has been built and pushed using Golang version 1.25.12.

The release notes have been updated in CHANGELOG-1.35.md, with a pointer to them on GitHub:

v1.35.7

Downloads for v1.35.7

Source Code filename sha512 hash kubernetes.tar.gz 4b0e8827fddd8ca281856cbed66e8b0c70c36d7dc63772b4bf05edff187a820cc2b22d7e673b2519412f980bea99b3e6ca36765b3e6ad54aafaa7a3d2bf8cb9d kubernetes-src.tar.gz 03a61008e9203cc862cbebec3dcb5ef00ec564ccd1825ef0bd2933a250e14de37433e9405f8b1df7c75e88eb65fa3654f037a55fc21c6e65a927c80e61e3711a Client Binaries filename sha512 hash kubernetes-client-darwin-amd64.tar.gz 00e57bc27b3ed2afddb7aa86b15176e8f42fb962ef33a453684d32ae6d4cd055dd1c21e953ec13d34fa99e667006c03982ee02e8bb17371f61fa5ae0536bf8e1 kubernetes-client-darwin-arm64.tar.gz 0fbc27b0aea9d78197fb47667e27013ad31390cb2922ca562f22ddaddcba8f50fdb272c358db06c30c1b2f2f866cf3cac28ab974df957477eb0f59d627e48663 kubernetes-client-linux-386.tar.gz 541e21f7033d35a1fb6eb75fdc7c1cc0cd28aa2927d8ffa6c9dc8724a7f9717266f6cc0d25aadd38cec1f4e00d665ff083be968d383027ed6566014991dd6004 kubernetes-client-linux-amd64.tar.gz 923f50fd1fd1b959d7c609732db59523281c10fe3c4f2ff2c677163e7403fcf0c78c9e1fc06b6b60fad4a76647c3a92be8d6e08514d1e5a6459c74757b2a1082 kubernetes-client-linux-arm.tar.gz 18c6a6d2b8703cfe60e2475e7c1352fead5c2956af313d9dbd05b1b1a5fe3be47f1343d7d3cc83ae74667f808accd8f2fa5703b8faa9f2d369d328c57ab1f7cc kubernetes-client-linux-arm64.tar.gz 218770474da60916a1485e48c649898618e9a4fe9ad91e5557a6862035fbbccedabe6d9330aa8e2e8fb649a39b2ba2df15c0bdcb8f6287775ed746e46f04bcb6 kubernetes-client-linux-ppc64le.tar.gz e87ae90862c8af2b0e43426b2c9681adf1fa0d9bf96148a83984e01e8148362162c47a25460651fbbc452b0dcf6f90f45834a99f470804ff480a8c65e47532c1 kubernetes-client-linux-s390x.tar.gz b708d1a265ab8c514c064a908bbc57b3b1125d0eae399686a1d8623265a110b12b8a6fd43c89a6d1a221f4b0f2e4d32f43600b43e322394835d149454bf2bc89 kubernetes-client-windows-386.tar.gz cd64ded1984657a0622f1680cd419d49670982942fd68fba8d40de727dd2239b1c19fff56b16e5b4b53581f6a8f36f5a832e5e271731bc22f6b9fc0a221cb170 kubernetes-client-windows-amd64.tar.gz 4056e4e8714ba89b8bc2c162bd16b36eafb7ba208d2f73eefc17b27f739b667adb4141c817e03e25504e5fc33ae657de76c0195fbdd801273a17c854f41d088e kubernetes-client-windows-arm64.tar.gz 752151ce21e2a9fa7d5448c21838e34f4b21c252305cc7009f6074a31c409bfe8abb13b98c62f491cd60dabecf2e8993c19eb48b8f2b11863a7bef9f0712320d Server Binaries filename sha512 hash kubernetes-server-linux-amd64.tar.gz 4a4a16e47cba5f862e743fc6cbaed1f3a8abf58cd7acaab289d66ac11b6772daeb166a70475136ef5cea6318c240052572288506c15fbc17423d2a344e2dc363 kubernetes-server-linux-arm64.tar.gz 134dafeab6ce82bcc3f8ea4174b220c4dbbdb2a021a54654d932d11be6f0e22b11280017e08da46a1f1a583a272872212d7a1c0bade8f45bed97f0a88c8c7f25 kubernetes-server-linux-ppc64le.tar.gz 9e6a9efbeedc6b2da3182c36be98964e239eb7d65fe404cfb492369a81c8b844a71716ec391c2ac173a1b9e3a9014ff267fe7c1f171decf9d85feeccc13b4313 kubernetes-server-linux-s390x.tar.gz 3666446ccdbdb7a9e99860563f56afe6e404211e44154da7a0eabf76489dea028594b7fea887c15c23938fdcca21cfc29b37414f02e5592564ce6f78e8b99c04 Node Binaries filename sha512 hash kubernetes-node-linux-amd64.tar.gz 712b856b5aababc0958f9bd620c22f37cefaefd10bfb25f0a11f9a23b97812cadb11795eb6f269b32fc1fe3a87ce988f9ddb2772aadf974b39d94cda0470a9e8 kubernetes-node-linux-arm64.tar.gz b0540aa6ad0faf9615e13e30ac90ae3264c8f94aa7c81e3b01adb64e725087ad09e46e52c6acbf580977df8a5e81d6eb917665d5a1e05ed4deafe0e65f184ece kubernetes-node-linux-ppc64le.tar.gz afb18e3d98df96b699d6a8c68b013046355e82444cf97d30838a95b4b6926c44a90e9650c11b9f686c6b369d6165ccb4ad9a8e4181b09b5548e7c00cb7b21cf2 kubernetes-node-linux-s390x.tar.gz 778c36eac6bd55001eb7d227a039a4ced11b94bc071a600a88a0b685c02d16125f7f6dd0fd76d2438794db2eebeccff59422005d45208e72027961bb4a891039 kubernetes-node-windows-amd64.tar.gz cc38a9627b2aceb1bf8e2de04b31ff81a9e80a39cadbdd6ac6a6fc39d8a64809bb786cb0b42be146abb03558853a2a4724b66fd8311d5f3de84180245e38b4cd Container Images

All container images are available as manifest lists and support the described architectures. It is also possible to pull a specific architecture directly by adding the "-$ARCH" suffix to the container image name.

name architectures registry.k8s.io/conformance:v1.35.7 amd64, arm64, ppc64le, s390x registry.k8s.io/kube-apiserver:v1.35.7 amd64, arm64, ppc64le, s390x registry.k8s.io/kube-controller-manager:v1.35.7 amd64, arm64, ppc64le, s390x registry.k8s.io/kube-proxy:v1.35.7 amd64, arm64, ppc64le, s390x registry.k8s.io/kube-scheduler:v1.35.7 amd64, arm64, ppc64le, s390x registry.k8s.io/kubectl:v1.35.7 amd64, arm64, ppc64le, s390x

Changelog since v1.35.6

Changes by Kind

Feature

• Kubernetes is now built with Go 1.25.12 (#140585, @palnabarun) [SIG Release and Testing]

Bug or Regression

• Cri-api: Reverts to pre-1.34 JSON encoding of the KeyValue value field (#139966, @liggitt) [SIG Node]
• Kubeadm: Improved resilience of kubeadm etcd learner promotion. kubeadm now correctly handles cases where learner promotion succeeds on the etcd side but a transient client-side error is returned, preventing unnecessary etcd-join failures. (#139909, @jihyun-huh) [SIG Cluster Lifecycle]
• Kubeadm: during "kubeadm join", use the KubernetesAPICall timeout (default 1 minute) when fetching the kubeadm-config ConfigMap, instead of the short 350ms retry used for optional component configs. A new shortConfigMapGet parameter is added to FetchInitConfigurationFromCluster so that callers like "kubeadm reset" can still use the short retry. (#139809, @damdo) [SIG Cluster Lifecycle]
• Kubeadm: fix MemberPromote to skip the etcd promote API call when the member is already a voting member, avoiding unnecessary retries and timeout. (#138492, @wgkingk) [SIG Cluster Lifecycle]
• Kubelet no longer emits V(4) "Label not found" logs for missing optional container annotations. (#140321, @HirazawaUi) [SIG Node]

Dependencies

Added

Nothing has changed.

Changed

• google.golang.org/protobuf: v1.36.8 → f2248ac

Removed

Nothing has changed.

Contributors, the CHANGELOG-1.35.md has been bootstrapped with v1.35.7 release notes and you may edit now as needed.

Published by your Kubernetes Release Managers.

Original source

Kubernetes Community,

Kubernetes v1.34.10 has been built and pushed using Golang version 1.25.12.

The release notes have been updated in CHANGELOG-1.34.md, with a pointer to them on GitHub:

v1.34.10

Downloads for v1.34.10

Source Code

Client Binaries

Server Binaries

Node Binaries

Container Images

All container images are available as manifest lists and support the described architectures. It is also possible to pull a specific architecture directly by adding the "-$ARCH" suffix to the container image name.

Changelog since v1.34.9

Changes by Kind

Feature

• Kubernetes is now built with Go 1.25.12 (#140584, @palnabarun) [SIG Release and Testing]

Bug or Regression

• Cri-api: Reverts to pre-1.34 JSON encoding of the KeyValue value field (#139967, @liggitt) [SIG Node]
• Kubeadm: Improved resilience of kubeadm etcd learner promotion. kubeadm now correctly handles cases where learner promotion succeeds on the etcd side but a transient client-side error is returned, preventing unnecessary etcd-join failures. (#139908, @jihyun-huh) [SIG Cluster Lifecycle]
• Kubeadm: during "kubeadm join", use the KubernetesAPICall timeout (default 1 minute) when fetching the kubeadm-config ConfigMap, instead of the short 350ms retry used for optional component configs. A new shortConfigMapGet parameter is added to FetchInitConfigurationFromCluster so that callers like "kubeadm reset" can still use the short retry. (#139810, @damdo) [SIG Cluster Lifecycle]
• Kubeadm: fix MemberPromote to skip the etcd promote API call when the member is already a voting member, avoiding unnecessary retries and timeout. (#138491, @wgkingk) [SIG Cluster Lifecycle]
• Kubelet no longer emits V(4) "Label not found" logs for missing optional container annotations. (#140320, @HirazawaUi) [SIG Node]

Other (Cleanup or Flake)

• Kubelet: defer the configurations flags (and the related fallback behavior) deprecation removal timeline from 1.37 to 1.38 to align with containerd v1.7 support (#139269, @carlory) [SIG Node and Testing]

Dependencies

Added

Nothing has changed.

Changed

• google.golang.org/protobuf: v1.36.5 → f2248ac

Removed

Nothing has changed.

Contributors, the CHANGELOG-1.34.md has been bootstrapped with v1.34.10 release notes and you may edit now as needed.

Published by your Kubernetes Release Managers.

Original source