Announcing etcd-operator v0.3.0-
Announcing etcd-operator v0.3.0
Today we are proud to announce the release of etcd-operator v0.3.0. This release represents a substantial rewrite of the operator code in order to move from StatefulSet to a custom controller that can...
etcd.io
November 9, 2026 at 4:06 PM
Announcing etcd-operator v0.3.0-
Congrats on etcd-operator 0.3.0. Moving from StatefulSet to a custom controller for failure recovery is a big step - recovering from etcd quorum loss manually is painful, so an operator that observes etcd state and reacts makes a real difference. Eager to try it for control-plane ops.
November 10, 2026 at 2:45 AM
Congrats on etcd-operator 0.3.0. Moving from StatefulSet to a custom controller for failure recovery is a big step - recovering from etcd quorum loss manually is painful, so an operator that observes etcd state and reacts makes a real difference. Eager to try it for control-plane ops.
Happy Friday! Just in time for #Kubecon NA, we have the etcd-operator 0.3.0 ready for you!
etcd.io/blog/2026/an...
This version jumps beyond prior operators, giving users the ability to recover from various kinds of cluster failures.
#kubernetes #etcd #operator #database
etcd.io/blog/2026/an...
This version jumps beyond prior operators, giving users the ability to recover from various kinds of cluster failures.
#kubernetes #etcd #operator #database
Announcing etcd-operator v0.3.0
Today we are proud to announce the release of etcd-operator v0.3.0. This release represents a substantial rewrite of the operator code in order to move from StatefulSet to a custom controller that can...
etcd.io
November 6, 2026 at 10:00 PM
Happy Friday! Just in time for #Kubecon NA, we have the etcd-operator 0.3.0 ready for you!
etcd.io/blog/2026/an...
This version jumps beyond prior operators, giving users the ability to recover from various kinds of cluster failures.
#kubernetes #etcd #operator #database
etcd.io/blog/2026/an...
This version jumps beyond prior operators, giving users the ability to recover from various kinds of cluster failures.
#kubernetes #etcd #operator #database
Announcing etcd-operator v0.3.0-
Announcing etcd-operator v0.3.0
Today we are proud to announce the release of etcd-operator v0.3.0. This release represents a substantial rewrite of the operator code in order to move from StatefulSet to a custom controller that can...
etcd.io
November 6, 2026 at 11:07 PM
Announcing etcd-operator v0.3.0-
#k8s 1.37 review out! youtu.be/-8TedKnGUmg
🔐 Secret/ConfigMap con utenza dedicata
🔄 StatefulSet Recreate
🛡️ tmpfs noexec/nosuid
⚠️ Addio secret nei pod statici: bug "ovvio", fix con preavviso.
Da dicembre: video a puntate, niente più mallopponi.
Buona visione!
#kubernetes #cncf #cri-o #continerd
🔐 Secret/ConfigMap con utenza dedicata
🔄 StatefulSet Recreate
🛡️ tmpfs noexec/nosuid
⚠️ Addio secret nei pod statici: bug "ovvio", fix con preavviso.
Da dicembre: video a puntate, niente più mallopponi.
Buona visione!
#kubernetes #cncf #cri-o #continerd
November 2, 2026 at 9:44 AM
#k8s 1.37 review out! youtu.be/-8TedKnGUmg
🔐 Secret/ConfigMap con utenza dedicata
🔄 StatefulSet Recreate
🛡️ tmpfs noexec/nosuid
⚠️ Addio secret nei pod statici: bug "ovvio", fix con preavviso.
Da dicembre: video a puntate, niente più mallopponi.
Buona visione!
#kubernetes #cncf #cri-o #continerd
🔐 Secret/ConfigMap con utenza dedicata
🔄 StatefulSet Recreate
🛡️ tmpfs noexec/nosuid
⚠️ Addio secret nei pod statici: bug "ovvio", fix con preavviso.
Da dicembre: video a puntate, niente più mallopponi.
Buona visione!
#kubernetes #cncf #cri-o #continerd
Your StatefulSet pod stuck Pending while the PVC shows Bound? Check kubectl get volumeattachment: an OOMKilled CSI controller can hang Attaching for hours. https://www.valtersit.com/guides/kubernetes/kubernetes-persistentvolumes-storageclass-selection-and-csi-drivers/
Kubernetes PersistentVolumes: StorageClass Selection and CSI Drivers
www.valtersit.com
October 30, 2026 at 5:40 PM
Your StatefulSet pod stuck Pending while the PVC shows Bound? Check kubectl get volumeattachment: an OOMKilled CSI controller can hang Attaching for hours. https://www.valtersit.com/guides/kubernetes/kubernetes-persistentvolumes-storageclass-selection-and-csi-drivers/
StatefulSet trap: volumeClaimTemplates is immutable.
Delete the StatefulSet with --cascade=orphan (pods + PVCs stay), recreate with the smaller template, swap claims by name.
Wrong order = the controller creates fresh empty volumes. Data loss, not just FailedMount.
Delete the StatefulSet with --cascade=orphan (pods + PVCs stay), recreate with the smaller template, swap claims by name.
Wrong order = the controller creates fresh empty volumes. Data loss, not just FailedMount.
October 27, 2026 at 1:14 AM
StatefulSet trap: volumeClaimTemplates is immutable.
Delete the StatefulSet with --cascade=orphan (pods + PVCs stay), recreate with the smaller template, swap claims by name.
Wrong order = the controller creates fresh empty volumes. Data loss, not just FailedMount.
Delete the StatefulSet with --cascade=orphan (pods + PVCs stay), recreate with the smaller template, swap claims by name.
Wrong order = the controller creates fresh empty volumes. Data loss, not just FailedMount.
🚨 EUVD-2026-110501
📊 5.9/10
🏢 Kubernetes
📝 A confused deputy attack exists in the StatefulSet controller that allows a user with namespace-scoped write permissions on StatefulSet and Controlle...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-110501
#cybersecurity #infosec #cve #euvd
📊 5.9/10
🏢 Kubernetes
📝 A confused deputy attack exists in the StatefulSet controller that allows a user with namespace-scoped write permissions on StatefulSet and Controlle...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-110501
#cybersecurity #infosec #cve #euvd
October 26, 2026 at 11:01 PM
🚨 EUVD-2026-110501
📊 5.9/10
🏢 Kubernetes
📝 A confused deputy attack exists in the StatefulSet controller that allows a user with namespace-scoped write permissions on StatefulSet and Controlle...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-110501
#cybersecurity #infosec #cve #euvd
📊 5.9/10
🏢 Kubernetes
📝 A confused deputy attack exists in the StatefulSet controller that allows a user with namespace-scoped write permissions on StatefulSet and Controlle...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-110501
#cybersecurity #infosec #cve #euvd
Force ordered StatefulSet startup: set podManagementPolicy to OrderedReady and the controller creates pods one at a time, each Ready before the next ordinal. No more race on scale-up. https://www.valtersit.com/vault/enforce-ordered-ready-startup-with-podmanagementpolicy-83f5a9/
Enforce Ordered Ready Startup with podManagementPolicy
www.valtersit.com
October 20, 2026 at 3:00 PM
Force ordered StatefulSet startup: set podManagementPolicy to OrderedReady and the controller creates pods one at a time, each Ready before the next ordinal. No more race on scale-up. https://www.valtersit.com/vault/enforce-ordered-ready-startup-with-podmanagementpolicy-83f5a9/
This case study shows how a team ran ServiceNow's MID Server on EKS as a StatefulSet and faked the EC2 metadata service so the agent would accept IRSA credentials
➤ https://ku.bz/mdkryD536
➤ https://ku.bz/mdkryD536
October 18, 2026 at 6:16 PM
This case study shows how a team ran ServiceNow's MID Server on EKS as a StatefulSet and faked the EC2 metadata service so the agent would accept IRSA credentials
➤ https://ku.bz/mdkryD536
➤ https://ku.bz/mdkryD536
Careful crediting the 200 GB to helm uninstall — it leaves PVCs alone by default unless the chart sets helm.sh/resource-policy: delete. More likely your StatefulSet PVCs were dynamically provisioned on a StorageClass with reclaimPolicy: Delete, and the volumes went away with the pods. Worth …
October 18, 2026 at 6:18 PM
Careful crediting the 200 GB to helm uninstall — it leaves PVCs alone by default unless the chart sets helm.sh/resource-policy: delete. More likely your StatefulSet PVCs were dynamically provisioned on a StorageClass with reclaimPolicy: Delete, and the volumes went away with the pods. Worth …
The persistent-storage layer is where these stacks quietly break: StatefulSet PVCs pin to one zone, and Postgres replication that demos fine stalls the moment a node drains. Worth rehearsing the failure path before the deploy, not after.
October 14, 2026 at 6:19 PM
The persistent-storage layer is where these stacks quietly break: StatefulSet PVCs pin to one zone, and Postgres replication that demos fine stalls the moment a node drains. Worth rehearsing the failure path before the deploy, not after.
Last Week in Kubernetes Development: Week Ending September 27, 2026 -
Week Ending September 27, 2026
Developer News Two security advisories were published on September 24: CVE-2026-2270 (rated Medium, 5.9) describes a confused deputy attack in the StatefulSet controller that lets a user with namespace-scoped...
lwkd.info
October 1, 2026 at 3:06 PM
Last Week in Kubernetes Development: Week Ending September 27, 2026 -
Last Week in Kubernetes Development: Week Ending September 27, 2026 -
Week Ending September 27, 2026
Developer News Two security advisories were published on September 24: CVE-2026-2270 (rated Medium, 5.9) describes a confused deputy attack in the StatefulSet controller that lets a user with namespace-scoped...
lwkd.info
October 1, 2026 at 12:56 PM
Last Week in Kubernetes Development: Week Ending September 27, 2026 -
The check that doesn't lie: a weekly restore of the latest Completed backup into drill-<ns>-<date>. A resource modifier forces replicas: 0 on every Deployment/StatefulSet, LoadBalancer → ClusterIP, no cluster-scoped resources. Restored pods never start, never touch prod DBs.
October 1, 2026 at 1:14 AM
The check that doesn't lie: a weekly restore of the latest Completed backup into drill-<ns>-<date>. A resource modifier forces replicas: 0 on every Deployment/StatefulSet, LoadBalancer → ClusterIP, no cluster-scoped resources. Restored pods never start, never touch prod DBs.
Week Ending September 27: Kubernetes security patches released, v1.38 Enhancements Freeze, and DRA Device Binding Conditions graduate to GA.
lwkd.info/2026/20260930
#kubernetes #opensource #cloudnative
lwkd.info/2026/20260930
#kubernetes #opensource #cloudnative
Week Ending September 27, 2026
Developer News Two security advisories were published on September 24: CVE-2026-2270 (rated Medium, 5.9) describes a confused deputy attack in the StatefulSet controller that lets a user with namespac...
lwkd.info
September 30, 2026 at 11:32 PM
Week Ending September 27: Kubernetes security patches released, v1.38 Enhancements Freeze, and DRA Device Binding Conditions graduate to GA.
lwkd.info/2026/20260930
#kubernetes #opensource #cloudnative
lwkd.info/2026/20260930
#kubernetes #opensource #cloudnative
Week Ending September 27, 2026 #devopsish #kubernetes
Week Ending September 27, 2026 | Last Week in Kubernetes Development
Developer News Two security advisories were published on September 24: CVE-2026-2270 (rated Medium, 5.9) describes a confused deputy attack in the StatefulSet controller that lets a user with namespace-scoped write permissions on StatefulSet and ControllerRevision objects create a cross-namespace pod, and CVE-2026-76654 (rated Medium, 5.8) describes an NTLM coercion vulnerability on Windows nodes when a pod’s subPath is a symbolic link to an attacker-controlled UNC network share; both are fixed in the September patch releases (v1.34.12, v1.35.9, v1.36.5, v1.37.1) covered in the Release Schedule below.
lwkd.info
September 30, 2026 at 11:32 PM
Week Ending September 27, 2026 #devopsish #kubernetes
今日のZennトレンド
Kubernetes 1.37: SIG Appsの変更内容
Kubernetes v1.37におけるSIG Appsの変更点をまとめています。
主な内容は、StatefulSetへのRecreate戦略の追加（Alpha）、MaxUnavailableStatefulSetのデフォルト再有効化、StorageVersionMigratorのGAおよびデフォルト有効化の3点です。
その他、認証やボリューム、プローブなどに関する複数のアルファ機能が導入されています。
Kubernetes 1.37: SIG Appsの変更内容
Kubernetes v1.37におけるSIG Appsの変更点をまとめています。
主な内容は、StatefulSetへのRecreate戦略の追加（Alpha）、MaxUnavailableStatefulSetのデフォルト再有効化、StorageVersionMigratorのGAおよびデフォルト有効化の3点です。
その他、認証やボリューム、プローブなどに関する複数のアルファ機能が導入されています。
Kubernetes 1.37: SIG Appsの変更内容
Kubernetes v1.37が2026/08/26にリリースされました🎉本記事では、特にSIG Appsに関係する変更点を、CHANGELOGからピックアップして紹介いたします。📝がついた文章は、CHANGELOGの公式内容ではなく筆者の補足です。また、内容に誤り等ございましたら、コメントまたはDM等でご連絡ください！直近の変更点は以下になります。Kubernetes 1.36: SIG Ap
zenn.dev
September 28, 2026 at 5:24 PM
今日のZennトレンド
Kubernetes 1.37: SIG Appsの変更内容
Kubernetes v1.37におけるSIG Appsの変更点をまとめています。
主な内容は、StatefulSetへのRecreate戦略の追加（Alpha）、MaxUnavailableStatefulSetのデフォルト再有効化、StorageVersionMigratorのGAおよびデフォルト有効化の3点です。
その他、認証やボリューム、プローブなどに関する複数のアルファ機能が導入されています。
Kubernetes 1.37: SIG Appsの変更内容
Kubernetes v1.37におけるSIG Appsの変更点をまとめています。
主な内容は、StatefulSetへのRecreate戦略の追加（Alpha）、MaxUnavailableStatefulSetのデフォルト再有効化、StorageVersionMigratorのGAおよびデフォルト有効化の3点です。
その他、認証やボリューム、プローブなどに関する複数のアルファ機能が導入されています。
https://lckhd.eu/XvfP5v
#Kubernetes #StatefulSet #Deployment
Kubernetes can seem complicated with so many options available. Choosing between StatefulSets and Deployments is one confusing example. If your app needs persistent storage or unique pod identities, go with StatefulSet. Otherwise,
#Kubernetes #StatefulSet #Deployment
Kubernetes can seem complicated with so many options available. Choosing between StatefulSets and Deployments is one confusing example. If your app needs persistent storage or unique pod identities, go with StatefulSet. Otherwise,
Kubernetes StatefulSet vs. Deployment: Differences & Examples
Learn the differences between Kubernetes StatefulSets and Deployments, with examples and best practices for managing stateful and stateless applications.
lckhd.eu
September 26, 2026 at 5:30 AM
https://lckhd.eu/XvfP5v
#Kubernetes #StatefulSet #Deployment
Kubernetes can seem complicated with so many options available. Choosing between StatefulSets and Deployments is one confusing example. If your app needs persistent storage or unique pod identities, go with StatefulSet. Otherwise,
#Kubernetes #StatefulSet #Deployment
Kubernetes can seem complicated with so many options available. Choosing between StatefulSets and Deployments is one confusing example. If your app needs persistent storage or unique pod identities, go with StatefulSet. Otherwise,
Deployment is what you want.
The real mistake is overthinking it or forcing a stateless app into a StatefulSet setup. I keep almost everything stateless with Kubernetes, but there are exceptions. You can always migrate a Deployment to a StatefulSet later if requirements change.
This article from
The real mistake is overthinking it or forcing a stateless app into a StatefulSet setup. I keep almost everything stateless with Kubernetes, but there are exceptions. You can always migrate a Deployment to a StatefulSet later if requirements change.
This article from
September 26, 2026 at 5:30 AM
Deployment is what you want.
The real mistake is overthinking it or forcing a stateless app into a StatefulSet setup. I keep almost everything stateless with Kubernetes, but there are exceptions. You can always migrate a Deployment to a StatefulSet later if requirements change.
This article from
The real mistake is overthinking it or forcing a stateless app into a StatefulSet setup. I keep almost everything stateless with Kubernetes, but there are exceptions. You can always migrate a Deployment to a StatefulSet later if requirements change.
This article from
CVE-2026-2270: StatefulSet and ControllerRevision write permissions allow cross-namespace pod creation -
CVE-2026-2270: StatefulSet and ControllerRevision write permissions allow cross-namespace pod creation · Issue #142097 · kubernetes/kubernetes
CVSS Rating: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N - Medium (5.9) A confused deputy attack exists in the StatefulSet controller that allows a user with namespace-scoped write permissions on ...
github.com
September 25, 2026 at 3:06 PM
CVE-2026-2270: StatefulSet and ControllerRevision write permissions allow cross-namespace pod creation -