## Kubernetes v1.36: Deprecation and removal of Service ExternalIPs

- 種別: release
- 関連技術: kubernetes
- CVE: CVE-2020-8554
- 公開日時: 2026-05-14T18:35:00.000Z
- 情報源: Kubernetes Blog (https://kubernetes.io/blog/2026/05/14/kubernetes-v1-36-deprecation-and-removal-of-service-externalips/)
- パーマリンク: https://vulnpulse.app/items/kubernetes-dedcac98a1f3

The .spec.externalIPs field for Service was an early attempt to provide cloud-load-balancer-like functionality for non-cloud clusters. Unfortunately, the API assumes that every user in the cluster is fully trusted, and in any situation where that is not the case, it enables various security exploits, as described in CVE-2020-8554 . Since Kubernetes 1.21, the Kubernetes project has recommended that all users disable .spec.externalIPs . To make that easier, Kubernetes also added an admission controller ( DenyServiceExternalIPs ) that can be enabled to do this. At the time, SIG Network felt that…