Kubernetes

Kubernetes v1.38.0-alpha.2: cgroup v1 fallback removal scheduled

Kubernetes v1.38.0-alpha.2 signals removal of cgroup v1 fallback—platform teams must test cgroup v2 on nodes, runtimes, and CI before it breaks clusters.

October 27, 2026·3 min read·AI researched · AI written · AI reviewed

Kubernetes pushed v1.38.0-alpha.2 on October 7, 2026 — and that single alpha release is the only upstream movement in the last seven days worth noting. That’s not a lull; it’s a clarifying signal. The project is narrowing its forward path around cgroup v2, and v1.38 is where the blunt end of that migration will land for most clusters.

Alpha releases don't carry the guarantee of stable behavior, and v1.38.0-alpha.2's GitHub entry doesn't expose a neat, consumable change list you can copy into your runbook. Still, v1.38 being active is meaningful because the release line is when the Kubernetes project makes irreversible infrastructure changes — and the community has been explicit about removing fallback paths for cgroup v1 for months. Upstream posts and KEPs have made the direction clear: cgroup v2 is the default future, and the fallback to v1 is being removed.

Why this matters now

Operationally, removing the cgroup v1 fallback is one of those breaking-but-right decisions that will expose neglected assumptions in build images, node OS images, and custom runtimes. If your nodes still boot with cgroup v1 or your kubelet relies on legacy behaviors, v1.38 is where you'll start seeing hard failures rather than deprecation warnings. The kubelet is being driven toward an operational mode that enforces cgroup v2-only operation, and when that mode becomes the default it will turn passive tech debt into active outages.

This isn't theoretical. The project published posts in early October about the cgroup v2 shift and node OS image changes, and v1.38 alpha being the only upstream release in the recent week consolidates those signals into the next development frontier. In short: the roadmap isn't vague anymore; it has a version number attached.

What teams should actually be doing (not hedging)

  • Test nodes with cgroup v2 kernel boot parameters and modern CRI runtime configs. If your CI images, init systems, or bootstrap scripts assume cgroup v1 paths, they'll fail during kubelet startup once the fallback is removed.
  • Validate your runtime stack (containerd, runc, and other CRI runtimes) under cgroup v2. The ecosystem has been migrating, but vendor-specific quirks still surface in edge cases (nested containers, systemd integration, mixed-legacy kernels).
  • Treat v1.38 as a canary for cluster-wide behavior changes. Run a small fleet of non-critical clusters on v1.38 alpha builds to exercise kubelet start paths, eviction heuristics, and node-level tooling that manipulates cgroup hierarchies.

Yes, this is overdue — and good

Kubernetes removing cgroup v1 fallback is the right call. Keeping two active, subtly incompatible resource-management systems in the same codebase was slowing runtime innovation and creating security and performance footguns. The painful part is organizational: OS images, CI runners, and ops scripts that haven't been updated will fail loudly, and that's on platform teams to fix now rather than later.

What didn’t move last week

The broader ecosystem — containerd, runc, the OCI specs, Helm, major lightweight distributions and desktop runtimes — produced no confirmed, qualifying releases in the same seven-day window. That means most of the dependency coordination work remains an ops problem, not something that will be auto-resolved by an ecosystem release cycle next week.

If you want a practical next step, set up a small v1.38 alpha cluster and exercise node lifecycle flows: reboot, kernel upgrades, CRI restarts, and node drains. Expose monitoring to kubelet startup logs and cgroup mount points. This is not a comfort test; it's a fast-fail test that surfaces the class of issues you'll hit in production once the fallback goes away.

Final take: treat v1.38 like a deadline, not a suggestion. The upstream churn has focused on a single, disruptive migration: cgroup v2. The code will land, and when it does the ones who suffer will be the teams that failed to run reality against an alpha. If you haven't already started removing cgroup v1 assumptions from your node images and automation, you're out of time — the project didn't waste the quiet week on polishing; it used it to advance the migration. For teams that execute early, the outcome is simpler resource accounting and fewer runtime surprises; for the rest, this will be an ugly operational quarter.

Sources

kubernetescgroup-v2kubelet
← All articles
Kubernetes

Kubernetes v1.35: failCgroupV1=true by default — AI Conformance promoted to SIG Architecture

Kubernetes v1.35 sets kubelets to fail on cgroup v1 by default and promotes AI Conformance to SIG Architecture, creating a Workload Conformance WG for AI.

Oct 31, 2026·3mkubernetescgroup-v2
Kubernetes

Kubernetes Workload Conformance WG: executable runtime tests and per-minor workload behavior spec

Kubernetes Workload Conformance WG will publish executable runtime tests and a per-minor workload spec, forcing runtimes and vendors to reconcile behavior.

Oct 30, 2026·3mkubernetesrunc
Kubernetes

Kubernetes Workload Conformance WG: per-minor workload behavior and executable runtime tests

Kubernetes Workload Conformance WG defines per-minor workload behavior with executable runtime tests and publishes tooling so vendors can prove conformance.

Oct 28, 2026·3mkubernetesworkload-conformance