Gardener Review Meetings (2026) β
In case you couldn't participate and are interested in catching up, you can find the contents of the review meetings we have had in 2026 here.
Meetings are recorded and published on Gardener's YouTube channel.
Check back regularly for updates and upcoming topics!
Reviews β
2026/03/18 - v1.138 Release β
Demo Agenda π β
| Presenter(s) | Duration | Topic | Reference(s) |
|---|---|---|---|
| @rfranzke | 10m | π Serial OperatingSystemConfig Reconciliation Coordination in gardener-node-agent | #14129 |
| @cerealsnow | 10m | π Local Setup DNS via bind9 β No More /etc/hosts Manipulation | #14062 |
| @oliver-goetz | 10m | ποΈ Provider Extensions Setup Migrated to gardener-operator-Based remote Setup | #13994 |
| @nickytd | 5m | π·οΈ ShootAdvertisedAddress Application Field for UI-Friendly Endpoint Names | #14140 |
| @acumino | 5m | πΊοΈ gardenadm init/join Availability Zone Support via --zone Flag | #14081 |
No Demo, But Still Worth Celebrating π β
- βοΈ [OPERATOR] Hard memory limit on istio-ingress has been removed. Memory is managed by VPA in all cases now. #14197
- π [OPERATOR] Fixed a race condition in the
ControllerInstallationreconciler that could create duplicate installations due to reading from a stale informer cache instead of the API server. #14274 - π [OPERATOR] The per-worker-pool
node-local-dnsDaemonSets now also include the name of the worker in their label selector and in their Pods' labels. This resolves an issue where each of the correspondingVPAs targeted allnode-cachecontainers from all of theseDaemonSets resulting in incorrect resource recommendations. #14294
2026/03/11 - Kubernetes v1.35 Special Edition β
Demo Agenda π β
Presenters: @timuthy, @rfranzke
| Duration | Topic | Reference(s) |
|---|---|---|
15m | π Graduation Ceremony Graduated Features | KEP-1287, KEP-5067, KEP-4381, KEP-3015, KEP-4368, KEP-4622, KEP-5504 |
20m | πΈ Beta Bloom Alpha -> Beta Promotions | KEP-4742, KEP-4192, KEP-4876, KEP-5598, KEP-961, KEP-5295, KEP-127, KEP-4639, KEP-2535, KEP-5307, KEP-3973 |
10m | ποΈ Fresh Off The Press New Alpha Features | KEP-4671, KEP-5284, KEP-4828, KEP-4827, KEP-5440, KEP-5237, KEP-5471 |
5m | π§Ό Security, Deprecations & Removals | KEP-5495, KEP-4033, KEP-5573, KEP-4781 |
5m | πͺ΄ What's Changing In Gardener | #13687, #13845, #13707 |
2026/03/04 - v1.137 Release β
Demo Agenda π β
| Presenter(s) | Duration | Topic | Reference(s) |
|---|---|---|---|
| @rfranzke | 5m | π GEPs Moved to New gardener/enhancements Repository | #14043 |
| @rfranzke | 5m | π Secrets Manager: Config Functions and Lazy CA Loading | #14000 |
| @rrhubenov | 10m | πͺ΅ VictoriaLogsBackend Feature Gate | #13988 |
| @ScheererJ | 5m | π₯οΈ Node-Specific Configuration Files in gardener-node-agent | #13412 |
| @LucaBernstein | 5m | π¦ Go Submodule for Gardener APIs | #13536 |
No Demo, But Still Worth Celebrating π β
- πͺ [DEVELOPER] When using
ModeServicein the extension webhook library, the specified service port is now properly propagated when constructing theadmissionregistrationv1.WebhookClientConfigfor{Validating,Mutating}WebhookConfigurations (previously, it was not specified at all and defaulted to443by Kubernetes). Make sure to specify--webhook-config-service-portto prevent falling back to the--webhook-config-server-port(if configured). #14063 - π [OPERATOR] Fixed the shoot-care controller panic for clusters where
.status.credentials.rotationexists but.status.credentials.encryptionAtRestis nil. #14147 - π [OPERATOR] An issue causing the control-plane migration to get stuck if the source backup entry deployment was retried is now fixed. #14091
- π [USER] An issue which lead to a nil pointer in gardenlet when a Shoot had an empty
.spec.addonsstructure defined is now fixed. #14112
2026/02/18 - v1.136 Release β
Demo Agenda π β
| Presenter(s) | Duration | Topic | Reference(s) |
|---|---|---|---|
| @oliver-goetz | 5m | π kube-apiserver Access Logs | #13569 |
| @maxmsap | 5m | π§² provider-ironcore: Experimental GPU Support | ironcore-dev/roadmap#31 |
| @rfranzke | 5m | π£ Manifest Propagation To Shoots | #13614 |
| @vitanovs | 10m | β»οΈ InPlaceOrRecreate VPA Update Mode Webhook | #12940, #13573 |
| @DockToFuture | 5m | π€ Seamless Overlay Network Switch | networking-calico#779, aws-custom-route-controller#411 |
| @shafeeqes | 5m | πͺͺ Custom CA Bundle Support For Helm Repositories | #13868 |
| @timuthy | 5m | β Leftover Toleration During Shoot Cleanup | #13918 |
No Demo, But Still Worth Celebrating π β
- β¨ [USER] Shoot addons (
.spec.addons) have been deprecated and will be forbidden starting with Kubernetes 1.35. Their usage was already discouraged for productive clusters, as they now only include unmaintained components (Kubernetes dashboard and Ingress NGINX Controller). #13845 - β¨ [USER] The
Shootfield.spec.seedSelectorcan now be adjusted for already scheduled shoots, as long as the new selector still selects the assigned seed. #13920 - β¨ [OPERATOR] The
gardener-controller-managernow increases allResourceQuotas in project namespaces when a Gardener update leads to Gardener creating more resources in them. This was introduced to prevent failingShootreconciliations whenResourceQuotas of projects are near their limit. #13850
2026/01/28 - v1.135 Release β
Demo Agenda π β
| Presenter(s) | Duration | Topic | Reference(s) |
|---|---|---|---|
| @AleksandarSavchev | 5m | π Automatic Credentials Rotation During Shoot Maintenance | #13493 |
| @LucaBernstein | 5m | π©Ή TokenRequestor: Remediate Outdated ServiceAccount Tokens | #13630 |
| @domdom82 | 10m | π HA VPN Round-Robin Bonding Mode | #13649 |
| @vpnachev | 5m | πͺͺ WorkloadIdentity Support For DNS | #13720, #13680, #13469 |
| @vicwicker | 10m | π©Ί Prometheus Health Checks In Care Controllers | #13341 |
| @kon-angelo | 5m | π§βπΌ ManagedResource Support In Generic ControlPlane Actuator | #13585 |
| @marc1404 | 5m | βΈοΈ Kubernetes Minor Version Retention | #13471 |
No Demo, But Still Worth Celebrating π β
- β¨ [OPERATOR]
gardenletcan now propagate static manifests stored in the seed cluster'sgardennamespace to all shoot namespaces. Read all about it here. #13614 - β¨ [DEVELOPER] The generic control-plane webhook is now capable of ensuring the
kube-apiserverandkube-controller-managerDeployments, as well asetcds, of the virtual garden cluster. #13635 - β¨ [DEPENDENCY]
CredentialsBindings can now referencecore.gardener.cloud/v1beta1.InternalSecretresources. Provider extensions should start validating them similar to references forv1.Secretresources. #13759
2026/01/21 - Kubernetes v1.34 Special Edition β
Demo Agenda π β
Presenters: @ScheererJ, @tobschli
| Duration | Topic | Reference(s) |
|---|---|---|
25m | π Graduation Ceremony Graduated Features | KEP-4381, KEP-3939, KEP-1790, KEP-3751, KEP-5080, KEP-4601, KEP-3331, KEP-4633, KEP-3960, KEP-4818, KEP-2400, KEP-4033 |
15m | πΈ Beta Bloom Alpha -> Beta Promotions | KEP-4412, KEP-740, KEP-3104, KEP-2837, KEP-3962, KEP-5073, KEP-1287 |
10m | ποΈ Fresh Off The Press New Alpha Features | KEP-5295, KEP-4317, KEP-5307, KEP-3721 |
5m | π§Ό Security, Deprecations & Removals | KEP-4033, KEP-3015 |
5m | πͺ΄ What's Changing In Gardener | #12814, #12883 |