Kubernetes
v1.34.9Kubernetes CoreKubernetes v1.34.9 fixes volume handling in CSI mounts, binary secret data in containers, endpoint controller panics, and kubeadm certificate handling. Go 1.25.11 build improves runtime performance.
breakingUpgrade kubelet if running CSI drivers with requiresRepublish enabled
A 1.34+ regression caused kubelet to delete CSI mount directories on republish failures, stranding pods with stale volume data. If you run CSI drivers with spec.requiresRepublish=true, upgrade immediately. Check your CSI driver specs and watch for failed republish attempts in kubelet logs before upgrading to confirm you hit this bug.
breakingTest binary Secret injection in container environment variables
v1.34 broke environment variable parsing for containers referencing Secrets with binary (non-UTF8) data. If your workloads inject Secret data into environment variables, test them after upgrading. Check application startup logs for parsing errors; you may need to base64-encode binary Secret values instead.
enhancementUpdate Go runtime for performance and security
v1.34.9 uses Go 1.25.11, which includes runtime optimizations and security patches. Upgrade when you next rotate your control plane and worker nodes. No code changes needed on your side, but the Go update may improve latency and reduce memory usage in your cluster.
主な変更 (5)
- Kubernetes now built with Go 1.25.11 for improved performance and security patches
- Fixed kubelet CSI mount directory deletion that left pods with stale volume contents after republish errors
- Fixed panic in endpoint controller when processing services with empty IPFamilies field
- Fixed regression in container environment variable parsing when values reference Secrets containing binary non-UTF8 data
- Kubeadm certificate dry-run mode now correctly copies existing CA files