Kubernetes

Kubernetes 1.36.1 — kind Defaults to v1.36.1 and v1.37 Release-Cycle Freezes (June 2026)

Kubernetes 1.36.1 remains the stable patch; kind defaults to v1.36.1. v1.37 entered Production Readiness Freeze — actions for platform and CI teams now.

June 11, 2026·6 min read·AI researched · AI written · AI reviewed

Summary

This week in Kubernetes was about alignment and cadence. Kubernetes v1.36.1 (stable patch) remains current, kind (Kubernetes-in-Docker) updated its default node image to kindest/node:v1.36.1, and the v1.37 release cycle reached Production Readiness Freeze (June 9 AoE / June 10, 12:00 UTC) and is moving toward Enhancements Freeze (June 16 AoE / June 17, 12:00 UTC). No new GA-level runtime or tooling releases (containerd, runc, Docker Desktop, Podman) were observed in the period covered.

Why this matters

These items together affect how platform and CI teams maintain reproducible test environments and plan upgrades. kind changing its default image shifts the implicit Kubernetes version developers and ephemeral CI clusters get. The v1.37 freezes define the last windows to finalize KEPs, tests, and production-readiness artifacts for that minor release. Your immediate operational choices — pinning node images, updating CI matrices, and triaging KEP-related tests — will reduce the risk of drifting into unsupported or untested combinations.

What changed in Kubernetes v1.36.1 and supported branches

  • v1.36.1 (released May 13, 2026) is the latest stable patch for the 1.36 line. Upstream support currently covers minors 1.34, 1.35, and 1.36.
  • Practical impact:
    • Aim CI integrations, conformance baselines, and golden-cluster images at v1.36.1 if you certify 1.36 fleets.
    • Expect increased patch/test cadence as SIG Release cuts more test or hotfix releases tied to the v1.37 development cycle; plan for narrower test windows and more frequent infra updates.
    • If you operate operators or admission webhooks compiled against older API versions, verify compatibility against v1.36.1 and plan upgrade sequences for control plane and nodes.

kind defaults to v1.36.1 — local cluster and CI implications

kind's release that changes the default node image to kindest/node:v1.36.1 affects reproducibility and CI parity.

Key risks:

  • Unpinned developer laptops and CI jobs will create clusters running v1.36.1 by default, which can reveal incompatibilities if your CI matrix still targets v1.35.x.
  • Projects that treat kind as the canonical local harness (operators, controller-runtime) frequently encounter nondeterministic failures when local and CI Kubernetes versions diverge.

Recommended immediate actions:

  • Pin the kind node image in CI and developer documentation to ensure consistent clusters. Examples:

bash

Create a kind cluster pinned to v1.36.1

kind create cluster --name ci-cluster --image kindest/node:v1.36.1

Or specify the image in a kind config file

cat > kind-config.yaml <<EOF kind: Cluster apiVersion: kind.x-k8s.io/v1alpha4 nodes:

  • role: control-plane image: kindest/node:v1.36.1 EOF kind create cluster --config kind-config.yaml --name dev-cluster

(Note: verify the kind API version and image tags against the kind release notes for your toolchain.)

  • Add v1.36.1 to your CI test matrix and run regression, integration, and a conformance subset where practical.
  • Record the kind node image and Kubernetes version in issue templates and CI artifacts to speed triage.

v1.37 release cycle: Production Readiness Freeze and next steps

  • Production Readiness Freeze (June 9 AoE / June 10, 12:00 UTC) requires production-readiness artifacts (SLA notes, performance targets, upgrade considerations) to be in place for features targeting GA/stable.
  • Enhancements Freeze (June 16 AoE / June 17, 12:00 UTC) locks scope; features not finalized by then are unlikely to land in v1.37.

Operational guidance:

  • Review KEPs targeted for v1.37 that affect your stack (storage, networking, scheduler). Prioritize tests for KEPs that interact with CRD upgrades, CSI drivers, CNI plugins, and operator lifecycle controllers.
  • If you run pre-release testing against v1.37 alphas/betas, pin harnesses to snapshot builds and monitor SIG Release channels for updated test images — freeze windows can cause rapid iteration in test infra.
  • Triage and map upstream test additions to your internal conformance or e2e suites so you can enable or disable tests relevant to KEPs you plan to adopt.

Runtime and tooling: no new releases this week

  • No major runtime/tooling GA releases were observed in the week covered. That reduces immediate upgrade pressure but does not change CVE monitoring responsibilities.
  • Ensure runtime-level integration tests (CRI hooks, metrics, kubelet interactions) run against the same runtime versions used in staging and production, especially now that local clusters may default to v1.36.1.

Practical checklist for platform teams (next 7–21 days)

  • Pin kind images in CI and docs (use --image or a config file).
  • Add v1.36.1 to CI matrices and run focused regression, integration, and conformance tests; prioritize admission controllers, CRD upgrades, CSI drivers, and RBAC-related flows.
  • Audit v1.37 KEPs that intersect your stack; create test plans for behaviors you intend to adopt before the Enhancements Freeze.
  • Subscribe to SIG Release and kubernetes-announce (or bridge them into your team's chat) for test-image and patch-release notifications.
  • Schedule backports or hotfix work targeting v1.36.1 where required; align upgrade windows with the supported minors (1.34–1.36).
  • Keep runtime and security monitoring active and treat runtime upgrades as planned maintenance rather than one-off responses.
  • Update developer docs and issue templates to capture the kind node image and Kubernetes version used for local reproductions.

Bottom line

This was a stabilization week: kind aligning its default to v1.36.1 reduces a common local-versus-CI mismatch, while v1.37's freezes close the window for feature scope changes. Use this interval to pin images, extend CI coverage for v1.36.1, and finalize tests for any v1.37 features you plan to adopt.

Sources

kubernetes-1-36-1kubernetes-1-37kind-kubernetes-in-dockerkubernetes-release-cycleplatform-engineering
← All articles
Kubernetes

Kubernetes v1.37 Enters Production Readiness Freeze; v1.25.16 Fixes Windows Storage Privilege‑Escalation CVE

v1.37 entered Production Readiness Freeze; v1.25.16 backports a Windows storage privilege‑escalation fix. Actionable steps for teams running 1.34–1.37.

Jun 9, 2026·6mkuberneteskubernetes-1-37
Kubernetes

Kubernetes 1.37: Production Readiness Freeze, 1.37.0-alpha.1 Cut, and Runtime CVE Guidance

Kubernetes 1.37 is in production readiness freeze with 1.37.0-alpha.1. Finalize compatibility checks, prioritize runtime CVE patches, coordinate with vendors.

Jun 8, 2026·6mkubernetes-1-37kubernetes-release-calendar
Kubernetes

Kubernetes v1.37: Freeze Milestones, 1.36.1 Patch, and Platform Team Guidance

v1.37 enters Production Readiness and Enhancements freezes; 1.36.1 is the current patch. Upgrade, testing, and runtime guidance for platform engineering teams.

Jun 6, 2026·6mkuberneteskubernetes-1-37