Kubernetes v1.36: ハル (Haru) Note

Kubernetes v1.36: ハル (Haru)

Kubernetes v1.36 has been released, featuring 70 enhancements with 18 graduating to stable and 25 entering beta. The release theme, "Haru," symbolizes spring, clear skies, and distant horizons, with the logo inspired by Hokusai's "Red Fuji." This release emphasizes community collaboration, with many individuals and teams contributing to its success.Key stable features include fine-grained kubelet API authorization for improved least-privilege access control. Resource health status for allocated devices has entered beta, offering unified reporting for hardware failures. Alpha introduces Workload Aware Scheduling, treating related pods as a single logical entity for better resource management.Volume group snapshots are now stable, enabling crash-consistent snapshots across multiple PersistentVolumeClaims. Mutable CSI node allocatable limits also reach stability, allowing dynamic updates to node volume capacities. The external ServiceAccount token signer feature is now stable for offloading token signing to external systems.Dynamic Resource Allocation (DRA) admin access and prioritized lists are now stable, providing a secure framework for resource management. Declarative mutating admission policies are stable, offering a native alternative to webhooks for resource mutations. Declarative validation for Kubernetes native types with validation-gen has also graduated to stable, streamlining custom resource development. The removal of the gogo protobuf dependency for Kubernetes API types marks a significant step forward for security and maintainability.