Kubernetes v1.36: Deprecation and removal of Service ExternalIPs

The .spec.externalIPs field for Service was an early attempt to provide cloud-load-balancer-like functionality for non-cloud clusters. Unfortunately, the API assumes that every user in the cluster is fully trusted, and in any situation where that is not the case, it enables various security exploits, as described in CVE-2020-8554 . Since Kubernetes 1.21, the Kubernetes project has recommended that all users disable .spec.externalIPs . To make that easier, Kubernetes also added an admission controller ( DenyServiceExternalIPs ) that can be enabled to do this. At the time, SIG Network felt that…

Kubernetes Blogで読む

2026/05/15 03:35、Kubernetes Blogが「Kubernetes v1.36: Deprecation and removal of Service ExternalIPs」を公開しました (種別: リリース・告知)。関連する技術: Kubernetes。CVE: CVE-2020-8554。