Kubernetes 1.36 Haru: Soaring Toward AI Workloads and Ironclad Stability

Kubernetes v1.36 Haru brings 70 enhancements, with DRA maturity for AI hardware, stable user namespaces for isolation, and VolumeGroupSnapshots for resilience. Deprecations like gitRepo and Ingress NGINX demand audits. Poetic logo inspires as code stabilizes production.
Kubernetes 1.36 Haru: Soaring Toward AI Workloads and Ironclad Stability
Written by Juan Vasquez

Kubernetes v1.36, codenamed Haru, landed on April 22, 2026. This release arrives as spring breaks in Japan. Clear skies ahead. Distant horizons beckoning.

The official announcement from the Kubernetes blog captures it poetically. “We open 2026 with Kubernetes v1.36, a release that arrives as the season turns and the light shifts on the mountain.” Editors Chad M. Crowell, Kirti Goyal, Sophia Ugochukwu, Swathi Rao, and Utkarsh Umre highlight 70 enhancements: 18 stable, 25 beta, 27 alpha. Over a 15-week cycle from January 12, contributions poured in from 491 individuals across 106 companies.

The logo steals the show. Artist Natsuho Ide, known as avocadoneko on X, reimagines Hokusai’s Fine Wind, Clear Morning. Red Fuji glows at dawn. Two cats—Stella and Nacho—stand guard at the base, collared with Kubernetes helms. They evoke komainu, shrine protectors. Calligraphy sweeps across: hare ni kake. Soar into clear skies. The full couplet? “Soar into clear skies; toward tomorrow’s sunrise.” As The Register notes, “the release notes and logo might be more interesting than the software.”

But the code delivers. Dynamic Resource Allocation hits production maturity. Cluster admins now command hardware globally—securely, permanently. DRA’s new beta features include partitionable devices for splitting GPUs, taints and tolerations for picky hardware, consumable capacity tracking, and health status in pod conditions. Alpha pushes further: native ResourceClaims for workloads, downward API exposure, availability visibility. WG Device Management led the charge, per SIG Release highlights.

User namespaces graduate to stable. Container root no longer maps to host root. Isolation strengthens. No more escapes like CVE-2019-5736. SIG Node calls it a milestone after years of work (KEP-127).

Mutating Admission Policies reach GA. CEL expressions handle mutations declaratively. Ditch those webhook servers. SIG API Machinery celebrates cleaner ops (KEP-3962).

Storage and Resilience Get Real Upgrades

VolumeGroupSnapshot goes stable. Crash-consistent snaps across multiple PVCs via CSI. Perfect for databases, stateful sets. SIG Storage also locks in mutable CSINode allocatable properties and faster SELinux relabeling—milliseconds, not seconds (KEP-3476, KEP-1710).

OCI VolumeSource stabilizes too. Mount ML models straight from registries. No more custom pulls. Jobs with suspended mutability enter beta—tweak resources mid-run. SIG Apps eyes better batch handling.

Horizontal Pod Autoscaler scale-to-zero hits alpha. External metrics trigger it. No traffic? Pods vanish. SIG Autoscaling finally delivers after seven years (KEP-2021). Vito Botta posted on LinkedIn: “No more needing KEDA or custom controllers just for this.”

Workload Aware Scheduling debuts in alpha. Gang scheduling. Topology hints. Preemption that groups pods. PodGroup API decouples for AI/ML jobs. SIG Scheduling preps Kubernetes for distributed training, per recent X buzz from @twtayaan: “Kubernetes is evolving from a container orchestrator into the definitive operating system for the AI era.”

But watch the breaks. gitRepo volume? Gone forever. Disabled since 1.11, now unrevivable (KEP-5040). Service.spec.externalIPs deprecated—warnings now, removal in 1.43. Security fix for CVE-2020-8554. Ingress NGINX? Retired March 24. Flaws proved fatal, maintainers bailed. Shift to Gateway API v1.5, per Kubernetes blog.

Fine-grained kubelet auth stabilizes. External ServiceAccount token signing too. Constrained impersonation betas least-privilege. PSI on cgroupv2 exports pressure metrics. Node log queries via kubectl—no SSH needed, especially for Windows.

Alpha metrics shine: informer latencies, queue depths, terminated containers by code. Scalability tests now hit 1.5GB resources, up from 800MB. Mixed-version proxy betas for smoother upgrades.

Release lead Ryota Sawada (@rytswd on X) summed it: “To everyone who shipped this with me—thank you! Not an ending but a passage—the horizon keeps going, bright ahead.” Community meetings buzz. SIGs recruit. v1.36 runs to June 2027 EOL.

Operators test now. DRA reshapes AI clusters. Stable isolation plugs old holes. Deprecations force audits. Haru clears the path. Next summit awaits.

Subscribe for Updates

KubernetesPro Newsletter

News and updates for Kubernetes developers and professionals.

By signing up for our newsletter you agree to receive content related to ientry.com / webpronews.com and our affiliate partners. For additional information refer to our terms of service.

Notice an error?

Help us improve our content by reporting any issues you find.

Get the WebProNews newsletter delivered to your inbox

Get the free daily newsletter read by decision makers

Subscribe
Advertise with Us

Ready to get started?

Get our media kit

Advertise with Us