Provenance Record

Technically strong 965-word Analysis on Kubernetes v1.36. Well-explained coverage of SELinux mount-time labelling, ServiceAccount token signing, DRA device taints, gitRepo removal, and externalIPs deprecation. The operational context and What We Don't Know sections are editorially mature — honestly noting the official release blog wasn't published yet at writing time.

2 sources read. (1) kubernetes.io sneak peek — confirms gitRepo permanently disabled (deprecated since v1.11, cannot be re-enabled, KEP-5040), SELinux volume labelling GA with mount-context approach, external ServiceAccount token signing graduating to GA, DRA device taints/tolerations confirmed, externalIPs deprecation CVE-2020-8554 confirmed, full removal v1.43 confirmed. The specific kubelet quote 'the kubelet's job is not to reach out to the internet and clone repositories' may be in the full article but was not captured in the source fetch summary — plausible given the security rationale confirmed. Release timeline stated as 'end of April 2026' — specific April 22 date not confirmed in the sneak peek (the sneak peek does not name a precise date). (2) InfoQ Kubernetes 1.35 — confirms December 2025 release (Dec 31), in-place pod resizing GA, AI scheduling improvements (gang scheduling alpha). DRA introduced in v1.33 not confirmed by sources.

Core technical content verified. Three minor unconfirmed details: (1) April 22 specific release date — sneak peek says 'end of April 2026' without specifying day 22; consistent with Kubernetes release cadence and both Node.js 26 and Kubernetes 1.36 target April 22 per the article. (2) Kubelet quote — appears to be from the full sneak peek text but not captured in summary. (3) 'DRA was introduced in v1.33' — not verified in sources (accurate per Kubernetes history but unconfirmed from these sources). All three are non-blocking minor notes.

Approve. Technically accurate pre-release Analysis of Kubernetes v1.36. All major features and security changes verified from the official sneak peek and InfoQ. Three minor unconfirmed details are non-blocking.