Release Notes draft for k/k v1.35.0-alpha.2

Jimmykhangnguyen · Jimmykhangnguyen · commit 11400fb6ffac · 2025-10-29T14:26:20.000-04:00
Signed-off-by: NgocPhucKhang Nguyen &lt;khang.nguyen@shopify.com&gt;
diff --git a/releases/release-1.35/release-notes/maps/pr-131411-map.yaml b/releases/release-1.35/release-notes/maps/pr-131411-map.yaml
@@ -0,0 +1,7 @@
+pr: 131411
+releasenote:
+  text: 'kube-apiserver: Made sure that when `--requestheader-client-ca-file` and
+    `--client-ca-file` contain overlapping certificates, `--requestheader-allowed-names`
+    must be specified so that regular client certificates cannot set authenticating
+    proxy headers for arbitrary users.'
+pr_body: ""
diff --git a/releases/release-1.35/release-notes/maps/pr-132927-map.yaml b/releases/release-1.35/release-notes/maps/pr-132927-map.yaml
@@ -0,0 +1,5 @@
+pr: 132927
+releasenote:
+  text: 'DRA API: Fixed the `tolerations` field in exact and sub requests to drop
+    properly when the `DRADeviceTaints` API is disabled.'
+pr_body: ""
diff --git a/releases/release-1.35/release-notes/maps/pr-133072-map.yaml b/releases/release-1.35/release-notes/maps/pr-133072-map.yaml
@@ -0,0 +1,6 @@
+pr: 133072
+releasenote:
+  text: Fixed a startup probe race condition that caused main containers to remain
+    stuck in "Initializing" state when sidecar containers with startup probes had
+    failed initially but succeeded on restart in pods with `restartPolicy=Never`.
+pr_body: ""
diff --git a/releases/release-1.35/release-notes/maps/pr-133128-map.yaml b/releases/release-1.35/release-notes/maps/pr-133128-map.yaml
@@ -0,0 +1,5 @@
+pr: 133128
+releasenote:
+  text: Promoted HPA configurable tolerance to beta. The `HPAConfigurableTolerance`
+    feature gate has now been enabled by default.
+pr_body: ""
diff --git a/releases/release-1.35/release-notes/maps/pr-133153-map.yaml b/releases/release-1.35/release-notes/maps/pr-133153-map.yaml
@@ -0,0 +1,4 @@
+pr: 133153
+releasenote:
+  text: Promoted the `MaxUnavailableStatefulSet` feature to beta and enabling it by default.
+pr_body: ""
diff --git a/releases/release-1.35/release-notes/maps/pr-133373-map.yaml b/releases/release-1.35/release-notes/maps/pr-133373-map.yaml
@@ -0,0 +1,5 @@
+pr: 133373
+releasenote:
+  text: Fixed the kubelet to honor the `userNamespaces.idsPerPod`
+    configuration, which was previously ignored.
+pr_body: ""
diff --git a/releases/release-1.35/release-notes/maps/pr-133706-map.yaml b/releases/release-1.35/release-notes/maps/pr-133706-map.yaml
@@ -0,0 +1,5 @@
+pr: 133706
+releasenote:
+  text: Fixed a bug that prevents scheduling the next pod when using the `DRAConsumableCapacity`
+    feature.
+pr_body: ""
diff --git a/releases/release-1.35/release-notes/maps/pr-133721-map.yaml b/releases/release-1.35/release-notes/maps/pr-133721-map.yaml
@@ -0,0 +1,6 @@
+pr: 133721
+releasenote:
+  text: 'kube-apiserver: Fixed a possible panic validating a custom resource whose
+    `CustomResourceDefinition` indicates a status subresource exists, but which does
+    not define a `status` property in the `openAPIV3Schema`.'
+pr_body: ""
diff --git a/releases/release-1.35/release-notes/maps/pr-133778-map.yaml b/releases/release-1.35/release-notes/maps/pr-133778-map.yaml
@@ -0,0 +1,7 @@
+pr: 133778
+releasenote:
+  text: 'kubeadm: stopped applying the `--pod-infra-container-image` flag for the
+    kubelet. The flag has been deprecated and no longer served a purpose in the kubelet
+    as the logic was migrated to CRI (Container Runtime Interface). During upgrade,
+    kubeadm will attempt to remove the flag from the file `/var/lib/kubelet/kubeadm-flags.env`.'
+pr_body: ""
diff --git a/releases/release-1.35/release-notes/maps/pr-134193-map.yaml b/releases/release-1.35/release-notes/maps/pr-134193-map.yaml
@@ -0,0 +1,5 @@
+pr: 134193
+releasenote:
+  text: Fixed a bug where 64-bit IPv6 `ServiceCIDRs` allocated addresses outside the
+    subnet range.
+pr_body: ""
diff --git a/releases/release-1.35/release-notes/maps/pr-134256-map.yaml b/releases/release-1.35/release-notes/maps/pr-134256-map.yaml
@@ -0,0 +1,10 @@
+pr: 134256
+releasenote:
+  text: Kubernetes API Go types removed runtime use of the `github.com/gogo/protobuf`
+    library, and are no longer registered into the global gogo type registry. Kubernetes
+    API Go types were not suitable for use with the `google.golang.org/protobuf` library,
+    and no longer implement `ProtoMessage()` by default to avoid accidental incompatible
+    use. If removal of these marker methods impacts your use, it can be re-enabled
+    for one more release with a `kubernetes_protomessage_one_more_release` build tag,
+    but will be removed in `v1.36`.
+pr_body: ""
diff --git a/releases/release-1.35/release-notes/maps/pr-134298-map.yaml b/releases/release-1.35/release-notes/maps/pr-134298-map.yaml
@@ -0,0 +1,6 @@
+pr: 134298
+releasenote:
+  text: "ACTION REQUIRED: `failCgroupV1` will be set to true from 1.35. \nThis means that nodes
+    will not start on a cgroup v1 by default. This puts cgroup v1 into a deprecated
+    state."
+pr_body: ""
diff --git a/releases/release-1.35/release-notes/maps/pr-134381-map.yaml b/releases/release-1.35/release-notes/maps/pr-134381-map.yaml
@@ -0,0 +1,5 @@
+pr: 134381
+releasenote:
+  text: Fixed a bug to prevent segmentation fault from occurring when updating deeply
+    nested JSON fields.
+pr_body: ""
diff --git a/releases/release-1.35/release-notes/maps/pr-134388-map.yaml b/releases/release-1.35/release-notes/maps/pr-134388-map.yaml
@@ -0,0 +1,5 @@
+pr: 134388
+releasenote:
+  text: Moved the CPU Manager static policy option `strict-cpu-reservation` to the
+    GA version.
+pr_body: ""
diff --git a/releases/release-1.35/release-notes/maps/pr-134433-map.yaml b/releases/release-1.35/release-notes/maps/pr-134433-map.yaml
@@ -0,0 +1,5 @@
+pr: 134433
+releasenote:
+  text: 'kubeadm: Added error printing during retries related to the `WaitForAllControlPlaneComponents`
+    functionality at verbosity level 5.'
+pr_body: ""
diff --git a/releases/release-1.35/release-notes/maps/pr-134479-map.yaml b/releases/release-1.35/release-notes/maps/pr-134479-map.yaml
@@ -0,0 +1,7 @@
+pr: 134479
+releasenote:
+  text: 'DRA Device Taints: Fixed toleration of `NoExecute`. Prior to this enhancement,
+    tolerating a `NoExecute` did not work because the scheduler did not inform the
+    eviction controller about the toleration, so the scheduled pod got evicted almost
+    immediately.'
+pr_body: ""
diff --git a/releases/release-1.35/release-notes/maps/pr-134481-map.yaml b/releases/release-1.35/release-notes/maps/pr-134481-map.yaml
@@ -0,0 +1,5 @@
+pr: 134481
+releasenote:
+  text: Promoted the `--chunk-size` flag to stable. The kubectl `describe`, `get`,
+    `drain`, and `events` commands can use `--chunk-size` flag to set chunk size.
+pr_body: ""
diff --git a/releases/release-1.35/release-notes/maps/pr-134510-map.yaml b/releases/release-1.35/release-notes/maps/pr-134510-map.yaml
@@ -0,0 +1,5 @@
+pr: 134510
+releasenote:
+  text: Substantially simplified building Kubernetes by making the process run a pre-built
+    container image directly without running `rsyncd`.
+pr_body: ""
diff --git a/releases/release-1.35/release-notes/maps/pr-134539-map.yaml b/releases/release-1.35/release-notes/maps/pr-134539-map.yaml
@@ -0,0 +1,5 @@
+pr: 134539
+releasenote:
+  text: Marked `ipvs` mode in kube-proxy as deprecated, which will be removed in a future
+    version of Kubernetes. Users are encouraged to migrate to `nftables`.
+pr_body: ""
diff --git a/releases/release-1.35/release-notes/maps/pr-134577-map.yaml b/releases/release-1.35/release-notes/maps/pr-134577-map.yaml
@@ -0,0 +1,7 @@
+pr: 134577
+releasenote:
+  text: |-
+    kube-apiserver: Made the subresources `pods/exec`, `pods/attach`, and `pods/portforward` require `create` permission for both SPDY and Websocket API requests. Previously, SPDY requests required `create` permission, but Websocket requests only required `get` permission. This change is gated by the `AuthorizePodWebsocketUpgradeCreatePermission` feature-gate, which is enabled by default.
+
+    Before upgrading to 1.35, ensure any custom ClusterRoles and Roles intended to grant `pods/exec`, `pods/attach`, or `pods/portforward` permission include the `create` verb.
+pr_body: ""
diff --git a/releases/release-1.35/release-notes/maps/pr-134588-map.yaml b/releases/release-1.35/release-notes/maps/pr-134588-map.yaml
@@ -0,0 +1,5 @@
+pr: 134588
+releasenote:
+  text: 'kubeadm: Fixed a preflight check that could fail hostname construction in IPv6
+    setups.'
+pr_body: ""
diff --git a/releases/release-1.35/release-notes/maps/pr-134598-map.yaml b/releases/release-1.35/release-notes/maps/pr-134598-map.yaml
@@ -0,0 +1,4 @@
+pr: 134598
+releasenote:
+  text: Updated the Go version of Kubernetes to `1.25.3`.
+pr_body: ""
diff --git a/releases/release-1.35/release-notes/maps/pr-134601-map.yaml b/releases/release-1.35/release-notes/maps/pr-134601-map.yaml
@@ -0,0 +1,7 @@
+pr: 134601
+releasenote:
+  text: Made legacy watch calls (`ResourceVersion` = 0 or unset) that generate init-events weigh
+    higher in `API Priority and Fairness (APF)` seat usage. Properly accounting for their
+    cost protects the API server from CPU overload. Users might see increased
+    throttling of such calls as a result.
+pr_body: ""
diff --git a/releases/release-1.35/release-notes/maps/pr-134611-map.yaml b/releases/release-1.35/release-notes/maps/pr-134611-map.yaml
@@ -0,0 +1,4 @@
+pr: 134611
+releasenote:
+  text: Updated underlying images and dependencies to be compatible with Go version`1.25.3`.
+pr_body: ""
diff --git a/releases/release-1.35/release-notes/maps/pr-134614-map.yaml b/releases/release-1.35/release-notes/maps/pr-134614-map.yaml
@@ -0,0 +1,5 @@
+pr: 134614
+releasenote:
+  text: Promoted the Topology Manager policy option `max-allowable-numa-nodes` to
+    GA version.
+pr_body: ""
diff --git a/releases/release-1.35/release-notes/maps/pr-134625-map.yaml b/releases/release-1.35/release-notes/maps/pr-134625-map.yaml
@@ -0,0 +1,5 @@
+pr: 134625
+releasenote:
+  text: Removed the `VolumeAttributesClass` resource from the `storage.k8s.io/v1alpha1`
+     API in `v1.35`.
+pr_body: ""
diff --git a/releases/release-1.35/release-notes/maps/pr-134631-map.yaml b/releases/release-1.35/release-notes/maps/pr-134631-map.yaml
@@ -0,0 +1,6 @@
+pr: 134631
+releasenote:
+  text: Enabled the feature gate `ContainerRestartRules` by default. The `ContainerRestartRules`
+    feature has been promoted to beta. Fixed a bug in this feature that caused probes
+    to continue to run even if the container has terminated and is not restartable.
+pr_body: ""
diff --git a/releases/release-1.35/release-notes/maps/pr-134654-map.yaml b/releases/release-1.35/release-notes/maps/pr-134654-map.yaml
@@ -0,0 +1,5 @@
+pr: 134654
+releasenote:
+  text: 'kube-controller-manager: Resolved potential issues handling pods with incorrect
+    uids in their `ownerReference`.'
+pr_body: ""
diff --git a/releases/release-1.35/release-notes/maps/pr-134656-map.yaml b/releases/release-1.35/release-notes/maps/pr-134656-map.yaml
@@ -0,0 +1,4 @@
+pr: 134656
+releasenote:
+  text: Removed `rsync` as a dependency to build Kubernetes.
+pr_body: ""
diff --git a/releases/release-1.35/release-notes/maps/pr-134685-map.yaml b/releases/release-1.35/release-notes/maps/pr-134685-map.yaml
@@ -0,0 +1,4 @@
+pr: 134685
+releasenote:
+  text: Dropped support for `policy/v1beta1` PodDisruptionBudget in kubectl.
+pr_body: ""
diff --git a/releases/release-1.35/release-notes/maps/pr-134692-map.yaml b/releases/release-1.35/release-notes/maps/pr-134692-map.yaml
@@ -0,0 +1,5 @@
+pr: 134692
+releasenote:
+  text: 'kubeadm: Updated the supported `etcd` version to `v3.5.23` for supported control
+    plane versions `v1.31`, `v1.32`, and `v1.33`.'
+pr_body: ""
diff --git a/releases/release-1.35/release-notes/maps/pr-134715-map.yaml b/releases/release-1.35/release-notes/maps/pr-134715-map.yaml
@@ -0,0 +1,6 @@
+pr: 134715
+releasenote:
+  text: 'kubeadm: Added missing cluster-info context validation to prevent panics
+    when the user has a malformed kubeconfig in the cluster-info ConfigMap that excludes
+    a valid current context.'
+pr_body: ""
diff --git a/releases/release-1.35/release-notes/maps/pr-134729-map.yaml b/releases/release-1.35/release-notes/maps/pr-134729-map.yaml
@@ -0,0 +1,4 @@
+pr: 134729
+releasenote:
+  text: Promoted the `HostnameOverride` feature gate to beta and enabled it by default.
+pr_body: ""
diff --git a/releases/release-1.35/release-notes/maps/pr-134739-map.yaml b/releases/release-1.35/release-notes/maps/pr-134739-map.yaml
@@ -0,0 +1,6 @@
+pr: 134739
+releasenote:
+  text: Improved performance of `Endpoint` and `EndpointSlice` controllers when
+    there are a large number of services in a single namespace by making pod-to-service
+    lookup asynchronous.
+pr_body: ""
diff --git a/releases/release-1.35/release-notes/release-notes-draft.json b/releases/release-1.35/release-notes/release-notes-draft.json
diff --git a/releases/release-1.35/release-notes/release-notes-draft.md b/releases/release-1.35/release-notes/release-notes-draft.md
diff --git a/releases/release-1.35/release-notes/sessions/maps-1761415847.json b/releases/release-1.35/release-notes/sessions/maps-1761415847.json
