Kubernetes release 1.26.0

Urgent Upgrade Notes

  • Deprecated beta APIs scheduled for removal in v1.26 are no longer served.
  • In-tree cloud provider for OpenStack and cinder volume provider removed; switch to external cloud provider and CSI driver.
  • GlusterFS in-tree storage driver removed; migrate volumes to alternative storage solutions.

Deprecation

  • CLI flag pod-eviction-timeout deprecated, removal in v1.27.
  • Kube-apiserver flag --master-service-namespace deprecated, removal in v1.27.
  • Removal of gcp and azure auth plugins from client-go and kubectl.

API Change

  • New preEnqueue extension point added to scheduler's component config.
  • Added ResourceClaim API for flexible resource allocation.
  • Container lifecycle handlers using httpGet now honor scheme and headers fields.

Feature

  • Selector validation added to HorizontalPodAutoscaler.
  • Pod Security admission: warn level defaults to enforce level.
  • Promoted APIServerIdentity to Beta, enabling Lease creation for active API server identification.

Bug or Regression

  • Fixed spurious field is immutable errors for Event API objects.
  • Corrected protobuf serialization of metav1.MicroTime timestamps.
  • Fixed ephemeral port exhaustion issue in kubectl with exec auth.