Kubernetes
v1.34.7Kubernetes Corev1.34.7 is a focused patch release fixing two regressions — audit log latency annotations and nftables kube-proxy compatibility — plus a Go 1.25.9 rebuild.
breakingAudit log latency data was silently missing — patch if you rely on it
Any 1.34.x cluster prior to this patch has been dropping the request latency annotation from audit logs whenever a request exceeded 500ms. If your security or compliance tooling parses these annotations for SLO tracking or anomaly detection, your data has gaps. Upgrade to v1.34.7 and consider whether historical audit logs need to be flagged as incomplete for that window.
breakingnftables kube-proxy is broken on nft 1.1.3 — don't skip this patch
Clusters running kube-proxy in nftables mode on nodes with nft 1.1.3 (common in newer distros like Fedora 42 or Ubuntu 25.04) have non-functional networking. This isn't a performance issue — it's a hard failure. Either pin nft to an older version as a workaround or upgrade to v1.34.7 immediately. The fix is in the knftables library bump (v0.0.17 → v0.0.21).
enhancementOTel dependency jump to v1.41.0 — verify your tracing integrations
The OpenTelemetry Go packages moved from v1.35.0 to v1.41.0, which is a substantial jump. If you have custom instrumentation or sidecars that interact with Kubernetes' OTel spans, test in staging first. The change is backward-compatible in the API but internal behavior around span propagation and metric collection has evolved.
主な変更 (5)
- Rebuilt with Go 1.25.9, picking up upstream language and runtime fixes
- Fixed 1.34+ regression where audit log was missing request latency annotations for requests over 500ms
- Fixed kube-proxy nftables mode broken on systems running nft 1.1.3
- Fixed device plugin test failures after kubelet restart (test stability, not a runtime bug)
- OpenTelemetry dependencies bumped from v1.35.0 to v1.41.0 across otel, metric, and trace packages