Kubernetes

v1.37.2Kubernetes Core

2026年10月28日

保守リリースとして、Goツールチェーンの更新、動作の正確性に関わる修正、サーバー互換性の改善が含まれます。オペレーターが対応すべき移行やセキュリティ対応はありません。

その他の記録済み変更 5 件すべてfixes 4 · value changes 1

- Fixed a bug where NoExecute device taints (DeviceTaintRule) did not evict pods using DRA-backed extended resources (pod.Status.ExtendedResourceClaimStatus). ([#142492](https://github.com/kubernetes/kubernetes/pull/142492), [@troychiu](https://github.com/troychiu)) [SIG Apps, Auth, Node and Scheduling]
- Fixed an issue where a Job recreated with the same name as a recently deleted Job could remain unreconciled because it inherited pending Pod expectations from the previous Job. ([#142390](https://github.com/kubernetes/kubernetes/pull/142390), [@6democratickim9](https://github.com/6democratickim9)) [SIG Apps and Testing]
- Kube-apiserver and other servers built on k8s.io/apiserver now accept up to 16384 request header values. Without this, Go 1.27's default of 500 rejects impersonated or proxied users with about 500 or more groups with HTTP 431. Releases built with Go 1.26 had no separate header-count limit. ([#142770](https://github.com/kubernetes/kubernetes/pull/142770), [@cwedgwood](https://github.com/cwedgwood)) [SIG API Machinery and Auth]
This fixes a regression in 1.36 on systems where kube-proxy does not have permission to modify the sysctls

- Kubernetes is now built with Go 1.26.10 ([#143204](https://github.com/kubernetes/kubernetes/pull/143204), [@dims](https://github.com/dims)) [SIG Release]

Kubernetesをスタックに追加

対応が必要なリリースが出たときに、週次メールでお知らせします。今回のように対応が不要な週は、メールを送りません。