{"id":36354,"date":"2026-04-22T23:41:19","date_gmt":"2026-04-22T21:41:19","guid":{"rendered":"https:\/\/www.cloudmagazin.com\/2026\/04\/22\/kubernetes-1-36-arrives-user-namespaces-stable-ipvs-gone\/"},"modified":"2026-04-22T23:41:19","modified_gmt":"2026-04-22T21:41:19","slug":"kubernetes-1-36-arrives-user-namespaces-stable-ipvs-gone","status":"publish","type":"post","link":"https:\/\/www.cloudmagazin.com\/en\/2026\/04\/22\/kubernetes-1-36-arrives-user-namespaces-stable-ipvs-gone\/","title":{"rendered":"Kubernetes 1.36 arrives: User Namespaces stable, IPVS gone, Ingress\u2011NGINX retired"},"content":{"rendered":"<p style=\"color:#6190a9;font-size:0.9em;margin:0 0 16px;padding:0;\">5 min read<\/p>\n<p><strong>Kubernetes 1.36 drops on April 22, 2026, with around 80 enhancements and several changes that will keep operations teams busy in the weeks ahead. User Namespaces reach stable, IPVS mode is removed from kube-proxy, the gitRepo volume plugin is gone. On top of that, the externalIPs field is now throwing deprecation warnings. Teams that don&#8217;t update their cluster roadmap today are building toward a wall by v1.43.<\/strong><\/p>\n<div style=\"background:#004a59;color:#fff;padding:32px 36px;margin:32px 0;border-radius:8px;\">\n<p style=\"margin:0 0 18px 0;font-size:0.95em;font-weight:800;text-transform:uppercase;letter-spacing:0.2em;color:#0bb7fd;border-bottom:2px solid rgba(11,183,253,0.25);padding-bottom:12px;\">Key Takeaways<\/p>\n<ul style=\"margin:0;padding-left:22px;color:rgba(255,255,255,0.92);line-height:1.6;\">\n<li style=\"margin-bottom:12px;\"><strong style=\"color:#0bb7fd;\">User Namespaces stable.<\/strong> Pods can now run in production with their own UID range isolated from the host. This was the most anticipated feature of the v1.36 cycle.<\/li>\n<li style=\"margin-bottom:12px;\"><strong style=\"color:#0bb7fd;\">IPVS gone, gitRepo gone, externalIPs on the farewell list.<\/strong> Three breaking changes where cluster owners must review their manifests before upgrading. Anyone still running IPVS in kube-proxy is blocking their upgrade path.<\/li>\n<li><strong style=\"color:#0bb7fd;\">Ingress-NGINX has been in retirement since March 24, 2026.<\/strong> No more security patches. SIG Security has recommended a migration path to Gateway API or alternative ingress controllers.<\/li>\n<\/ul>\n<\/div>\n<p style=\"font-size:0.88em;color:#666;margin:20px 0 32px 0;border-top:1px solid #e5e5e5;border-bottom:1px solid #e5e5e5;padding:10px 0;\"><span style=\"color:#004a59;font-weight:700;text-transform:uppercase;font-size:0.72em;letter-spacing:0.14em;margin-right:14px;\">Related<\/span><a href=\"https:\/\/www.cloudmagazin.com\/2026\/04\/15\/finops-maturity-check-crawl-walk-run-cloud-teams-2026\/\" style=\"color:#333;text-decoration:underline;\">FinOps Maturity Check 2026<\/a>&nbsp;&nbsp;<span style=\"color:#ccc;\">\/<\/span>&nbsp;&nbsp;<a href=\"https:\/\/www.cloudmagazin.com\/2026\/04\/21\/opus-4-7-gpt-5-4-eu-cloud-inference-2026\/\" style=\"color:#333;text-decoration:underline;\">Opus 4.7 vs GPT-5.4: EU Cloud Inference 2026<\/a><\/p>\n<h2>What Actually Changed in Kubernetes 1.36<\/h2>\n<p>The numbers at a glance: 80 enhancements in this release, 18 graduating to stable, 18 to beta, and 26 brand-new alpha features. After several release cycles dominated by AI-focused additions (AI-Optimized Scheduling in 1.35), v1.36 returns to platform fundamentals. User Namespaces are the headline: pods can now run in production with their own user ID range isolated from the host, shrinking the classic container escape surface. For security-sensitive workloads in regulated environments, this was the most frequently cited missing feature for two years.<\/p>\n<p>OCI Volumes (Stable) allow OCI artifacts to be mounted directly as read-only volumes in pods without a dedicated init container. HPA Scale-to-Zero moves to Beta, opening the door to permanently dormant deployments that only scale up on demand. For serverless-style patterns inside traditional Kubernetes clusters, this is a concrete lever worth pulling.<\/p>\n<p>The removals matter just as much. gitRepo volumes are definitively gone after repeated security audits documented supply chain risks. IPVS mode in kube-proxy was deprecated in v1.35 and is now fully removed, making iptables-based proxy configuration the default. externalIPs fields in Service objects now emit deprecation warnings and will disappear entirely in v1.43. Anyone still using externalIPs in their manifests needs to migrate to LoadBalancer or Ingress before then.<\/p>\n<h2>Why this matters for DACH teams right now<\/h2>\n<p>The operational impact lies less in the new features than in the breaking changes. German enterprise clusters with multi-year evolution frequently carry legacy configurations that survived 1.35 but will break under 1.36. IPVS was the default setting for many teams because its performance advantages at high service counts were well-documented. Its removal forces a review of connection-tracking limits and capacity planning in iptables setups.<\/p>\n<p>The Ingress-NGINX situation is even more pressing. SIG Security officially deprecated the controller on 24 March 2026 because maintainer capacity for the required security reviews was no longer available. Across DACH installations, Ingress-NGINX is by far the most common choice for cluster ingress. The migration path to Gateway API or alternative controllers such as HAProxy, Contour or Traefik is non-trivial. SIG recommends an inventory within 60 days, as new CVEs in Ingress-NGINX will no longer be patched.<\/p>\n<p>At the same time, the graduation of User Namespaces opens a door that German security teams have wanted open for years. Regulated industries \u2014 financial services, healthcare, critical infrastructure \u2014 now have a platform-native way to harden container isolation without falling back on external projects like gVisor or Kata Containers. For NIS2 audits, this will become a talking point in security reviews over the coming months.<\/p>\n<div style=\"display:grid;grid-template-columns:repeat(auto-fit,minmax(280px,1fr));gap:16px;margin:28px 0;\">\n<div style=\"background:#fafafa;border-top:3px solid #c0392b;padding:18px 20px;border-radius:4px;\">\n<p style=\"margin:0 0 10px 0;font-size:0.78em;font-weight:700;text-transform:uppercase;letter-spacing:0.12em;color:#c0392b;\">What to check before upgrading to 1.36<\/p>\n<ul style=\"margin:0;padding-left:18px;color:#333;line-height:1.55;font-size:0.95em;\">\n<li style=\"margin-bottom:6px;\">kube-proxy mode: is IPVS in use?<\/li>\n<li style=\"margin-bottom:6px;\">Manifests with gitRepo volumes<\/li>\n<li style=\"margin-bottom:6px;\">externalIPs fields in services<\/li>\n<li>Ingress-NGINX version and patch level<\/li>\n<\/ul>\n<\/div>\n<div style=\"background:#fafafa;border-top:3px solid #2d7a3e;padding:18px 20px;border-radius:4px;\">\n<p style=\"margin:0 0 10px 0;font-size:0.78em;font-weight:700;text-transform:uppercase;letter-spacing:0.12em;color:#2d7a3e;\">What becomes available with 1.36<\/p>\n<ul style=\"margin:0;padding-left:18px;color:#333;line-height:1.55;font-size:0.95em;\">\n<li style=\"margin-bottom:6px;\">User Namespaces for security-sensitive workloads<\/li>\n<li style=\"margin-bottom:6px;\">OCI volumes for read-only artefacts<\/li>\n<li style=\"margin-bottom:6px;\">HPA scale-to-zero (beta)<\/li>\n<li>26 new alpha features to test in staging<\/li>\n<\/ul>\n<\/div>\n<\/div>\n<h2>Assessment for cloud architects<\/h2>\n<p>This release is less feature-driven than its predecessors, but it brings more work per cluster. Managed Kubernetes providers \u2014 EKS, AKS, GKE, IONOS Managed Kubernetes, STACKIT \u2014 will roll out 1.36 support over the next four to eight weeks. Self-managed operators have had release day since 22 April. Teams running mid-sized clusters should upgrade at least one staging cluster to 1.36, run manifest scans against the three breaking changes, and in parallel draft a plan for the Ingress-NGINX migration.<\/p>\n<p>Strategically, the most significant item is the Ingress-NGINX exit. Anyone without a roadmap should decide within the next two weeks: stay put with an in-house security-patching commitment, migrate to Gateway API with a different implementation, or switch to a commercial ingress controller with a support contract. The decision has consequences for resource planning and security governance well into Q3 2026.<\/p>\n<p>In practical terms, many teams will need to free up a sprint or two on the planning board. Those who have already experimented with Gateway API are halfway there. Anyone who has never rehearsed an ingress-rules migration should schedule a tabletop walkthrough with SRE and the network team no later than the end of May.<\/p>\n<h2 style=\"padding-top:64px;margin-bottom:20px;\">Frequently Asked Questions<\/h2>\n<details>\n<summary><strong>Is upgrading to Kubernetes 1.36 strictly necessary?<\/strong><\/summary>\n<p style=\"margin:8px 0 4px 24px;color:#555;line-height:1.6;\">Kubernetes 1.33 (February 2025) is the first release to receive just one more month of support. From May 2026, Kubernetes 1.34 becomes the oldest supported version. Anyone still running 1.32 or earlier is already out of support. Upgrading to 1.36 isn&#8217;t an immediate hard requirement, but skip-to-next-LTS is not a pattern that works well with Kubernetes.<\/p>\n<\/details>\n<details>\n<summary><strong>What is a good migration path away from Ingress-NGINX?<\/strong><\/summary>\n<p style=\"margin:8px 0 4px 24px;color:#555;line-height:1.6;\">SIG Security recommends Gateway API paired with an actively maintained implementation. Realistic candidates include Contour, Traefik, HAProxy, or the commercial offerings from NGINX Inc. and F5. This is not a one-sprint project: Gateway API uses different resource types and all rewrite rules need to be migrated. Teams should budget between four and twelve weeks depending on cluster size.<\/p>\n<\/details>\n<details>\n<summary><strong>Should I enable User Namespaces in production right now?<\/strong><\/summary>\n<p style=\"margin:8px 0 4px 24px;color:#555;line-height:1.6;\">For security-sensitive workloads, yes \u2014 but incrementally. The feature gate is stable, though platform maturity in production scenarios warrants another one to two quarters of observation. Running staging tests under representative load is the recommended first step before switching over critical workloads.<\/p>\n<\/details>\n<h2 style=\"padding-top:64px;margin-bottom:20px;\">More from the MBF Media Network<\/h2>\n<div style=\"margin:40px 0 24px 0;\">\n<div style=\"padding:14px 18px;border-left:3px solid #202528;background:#fafafa;margin-bottom:6px;\">\n<div style=\"font-size:0.7em;font-weight:700;color:#202528;text-transform:uppercase;letter-spacing:0.12em;margin-bottom:4px;\">mybusinessfuture<\/div>\n<p><a href=\"https:\/\/mybusinessfuture.com\/predictive-analytics-erp-mittelstand-kundenbindung-2026\/\" style=\"font-weight:600;line-height:1.4;color:#1a1a1a;text-decoration:none;\">Predictive Analytics in ERP: SME Customer Retention 2026<\/a>\n<\/div>\n<div style=\"padding:14px 18px;border-left:3px solid #d65663;background:#fafafa;margin-bottom:6px;\">\n<div style=\"font-size:0.7em;font-weight:700;color:#d65663;text-transform:uppercase;letter-spacing:0.12em;margin-bottom:4px;\">digital-chiefs<\/div>\n<p><a href=\"https:\/\/www.digital-chiefs.de\/nvidia-dominanz-alternativen-ki-stack-cio-2026\/\" style=\"font-weight:600;line-height:1.4;color:#1a1a1a;text-decoration:none;\">NVIDIA Dominance and Alternatives: The CIO AI Stack 2026<\/a>\n<\/div>\n<div style=\"padding:14px 18px;border-left:3px solid #69d8ed;background:#fafafa;\">\n<div style=\"font-size:0.7em;font-weight:700;color:#69d8ed;text-transform:uppercase;letter-spacing:0.12em;margin-bottom:4px;\">securitytoday<\/div>\n<p><a href=\"https:\/\/www.securitytoday.de\/2026\/04\/21\/adaptive-mfa-entra-okta-duo-nis2-rollout-2026\/\" style=\"font-weight:600;line-height:1.4;color:#1a1a1a;text-decoration:none;\">Adaptive MFA in Entra, Okta and Duo: NIS2 Rollout<\/a>\n<\/div>\n<\/div>\n<p style=\"text-align:right;\"><em>Quelle Titelbild: Pexels \/ Wolfgang Weiser (px:33512156)<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"K8s 1.36 with 80 enhancements: User Namespaces stable, IPVS mode gone, gitRepo volume removed. What DACH teams need to check before the upgrade.","protected":false},"author":31,"featured_media":35971,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_yoast_wpseo_focuskw":"","_yoast_wpseo_title":"","_yoast_wpseo_metadesc":"K8s 1.36 Release: User Namespaces stable, IPVS removed, Ingress-NGINX retired. What DACH Ops teams need to check before upgrading.","_yoast_wpseo_meta-robots-noindex":"","_yoast_wpseo_meta-robots-nofollow":"","_yoast_wpseo_meta-robots-adv":"","_yoast_wpseo_canonical":"","_yoast_wpseo_opengraph-title":"","_yoast_wpseo_opengraph-description":"","_yoast_wpseo_opengraph-image":"","_yoast_wpseo_opengraph-image-id":"","_yoast_wpseo_twitter-title":"","_yoast_wpseo_twitter-description":"","_yoast_wpseo_twitter-image":"","_yoast_wpseo_twitter-image-id":"","ngg_post_thumbnail":0,"pre_headline":"","bildquelle":"","teasertext":"","language":"de","footnotes":""},"categories":[744],"tags":[],"industry":[],"class_list":["post-36354","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-kuenstliche-intelligenz"],"wpml_language":"en","wpml_translation_of":35972,"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.1.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Kubernetes 1.36 arrives: User Namespaces stable, IPVS gone, Ingress\u2011NGINX retired - cloudmagazin<\/title>\n<meta name=\"description\" content=\"K8s 1.36 Release: User Namespaces stable, IPVS removed, Ingress-NGINX retired. What DACH Ops teams need to check before upgrading.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.cloudmagazin.com\/en\/2026\/04\/22\/kubernetes-1-36-arrives-user-namespaces-stable-ipvs-gone\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Kubernetes 1.36 arrives: User Namespaces stable, IPVS gone, Ingress\u2011NGINX retired - cloudmagazin\" \/>\n<meta property=\"og:description\" content=\"K8s 1.36 Release: User Namespaces stable, IPVS removed, Ingress-NGINX retired. What DACH Ops teams need to check before upgrading.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.cloudmagazin.com\/en\/2026\/04\/22\/kubernetes-1-36-arrives-user-namespaces-stable-ipvs-gone\/\" \/>\n<meta property=\"og:site_name\" content=\"cloudmagazin\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/cloudmagazincom\/\" \/>\n<meta property=\"article:published_time\" content=\"2026-04-22T21:41:19+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.cloudmagazin.com\/wp-content\/uploads\/2026\/04\/cm-21-04-news-k8s-136-release.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1880\" \/>\n\t<meta property=\"og:image:height\" content=\"1058\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Alec Chizhik\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@cloudmagazin\" \/>\n<meta name=\"twitter:site\" content=\"@cloudmagazin\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Alec Chizhik\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"NewsArticle\",\"@id\":\"https:\/\/www.cloudmagazin.com\/en\/2026\/04\/22\/kubernetes-1-36-arrives-user-namespaces-stable-ipvs-gone\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.cloudmagazin.com\/en\/2026\/04\/22\/kubernetes-1-36-arrives-user-namespaces-stable-ipvs-gone\/\"},\"author\":{\"name\":\"Alec Chizhik\",\"@id\":\"https:\/\/www.cloudmagazin.com\/en\/#\/schema\/person\/ce38baaa19a580268aedce096597eb3c\"},\"headline\":\"Kubernetes 1.36 arrives: User Namespaces stable, IPVS gone, Ingress\u2011NGINX retired\",\"datePublished\":\"2026-04-22T21:41:19+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.cloudmagazin.com\/en\/2026\/04\/22\/kubernetes-1-36-arrives-user-namespaces-stable-ipvs-gone\/\"},\"wordCount\":1044,\"publisher\":{\"@id\":\"https:\/\/www.cloudmagazin.com\/en\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.cloudmagazin.com\/en\/2026\/04\/22\/kubernetes-1-36-arrives-user-namespaces-stable-ipvs-gone\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.cloudmagazin.com\/wp-content\/uploads\/2026\/04\/cm-21-04-news-k8s-136-release.jpg\",\"articleSection\":[\"Artificial Intelligence\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.cloudmagazin.com\/en\/2026\/04\/22\/kubernetes-1-36-arrives-user-namespaces-stable-ipvs-gone\/\",\"url\":\"https:\/\/www.cloudmagazin.com\/en\/2026\/04\/22\/kubernetes-1-36-arrives-user-namespaces-stable-ipvs-gone\/\",\"name\":\"Kubernetes 1.36 arrives: User Namespaces stable, IPVS gone, Ingress\u2011NGINX retired - cloudmagazin\",\"isPartOf\":{\"@id\":\"https:\/\/www.cloudmagazin.com\/en\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.cloudmagazin.com\/en\/2026\/04\/22\/kubernetes-1-36-arrives-user-namespaces-stable-ipvs-gone\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.cloudmagazin.com\/en\/2026\/04\/22\/kubernetes-1-36-arrives-user-namespaces-stable-ipvs-gone\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.cloudmagazin.com\/wp-content\/uploads\/2026\/04\/cm-21-04-news-k8s-136-release.jpg\",\"datePublished\":\"2026-04-22T21:41:19+00:00\",\"description\":\"K8s 1.36 Release: User Namespaces stable, IPVS removed, Ingress-NGINX retired. What DACH Ops teams need to check before upgrading.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.cloudmagazin.com\/en\/2026\/04\/22\/kubernetes-1-36-arrives-user-namespaces-stable-ipvs-gone\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.cloudmagazin.com\/en\/2026\/04\/22\/kubernetes-1-36-arrives-user-namespaces-stable-ipvs-gone\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.cloudmagazin.com\/en\/2026\/04\/22\/kubernetes-1-36-arrives-user-namespaces-stable-ipvs-gone\/#primaryimage\",\"url\":\"https:\/\/www.cloudmagazin.com\/wp-content\/uploads\/2026\/04\/cm-21-04-news-k8s-136-release.jpg\",\"contentUrl\":\"https:\/\/www.cloudmagazin.com\/wp-content\/uploads\/2026\/04\/cm-21-04-news-k8s-136-release.jpg\",\"width\":1880,\"height\":1058},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.cloudmagazin.com\/en\/2026\/04\/22\/kubernetes-1-36-arrives-user-namespaces-stable-ipvs-gone\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.cloudmagazin.com\/en\/home\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Kubernetes 1.36 arrives: User Namespaces stable, IPVS gone, Ingress\u2011NGINX retired\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.cloudmagazin.com\/en\/#website\",\"url\":\"https:\/\/www.cloudmagazin.com\/en\/\",\"name\":\"cloudmagazin\",\"description\":\"Inspiration f\u00fcr Businessentscheider\",\"publisher\":{\"@id\":\"https:\/\/www.cloudmagazin.com\/en\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.cloudmagazin.com\/en\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.cloudmagazin.com\/en\/#organization\",\"name\":\"cloudmagazin\",\"url\":\"https:\/\/www.cloudmagazin.com\/en\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.cloudmagazin.com\/en\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.cloudmagazin.com\/wp-content\/uploads\/2020\/04\/cloudmagazin-logo-klein_menu.jpg\",\"contentUrl\":\"https:\/\/www.cloudmagazin.com\/wp-content\/uploads\/2020\/04\/cloudmagazin-logo-klein_menu.jpg\",\"width\":150,\"height\":150,\"caption\":\"cloudmagazin\"},\"image\":{\"@id\":\"https:\/\/www.cloudmagazin.com\/en\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/cloudmagazincom\/\",\"https:\/\/x.com\/cloudmagazin\",\"https:\/\/www.linkedin.com\/showcase\/cloudmagazin\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.cloudmagazin.com\/en\/#\/schema\/person\/ce38baaa19a580268aedce096597eb3c\",\"name\":\"Alec Chizhik\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.cloudmagazin.com\/en\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/www.cloudmagazin.com\/wp-content\/uploads\/2026\/03\/alec-chizhik.jpg\",\"contentUrl\":\"https:\/\/www.cloudmagazin.com\/wp-content\/uploads\/2026\/03\/alec-chizhik.jpg\",\"caption\":\"Alec Chizhik\"},\"description\":\"Alec is the Chief Digital Officer at Evernine and writes about cloud architectures, IT security, and digital operations practices.\",\"sameAs\":[\"https:\/\/www.linkedin.com\/in\/alecchizhik\/\"],\"url\":\"https:\/\/www.cloudmagazin.com\/en\/author\/alec\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Kubernetes 1.36 arrives: User Namespaces stable, IPVS gone, Ingress\u2011NGINX retired - cloudmagazin","description":"K8s 1.36 Release: User Namespaces stable, IPVS removed, Ingress-NGINX retired. What DACH Ops teams need to check before upgrading.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.cloudmagazin.com\/en\/2026\/04\/22\/kubernetes-1-36-arrives-user-namespaces-stable-ipvs-gone\/","og_locale":"en_US","og_type":"article","og_title":"Kubernetes 1.36 arrives: User Namespaces stable, IPVS gone, Ingress\u2011NGINX retired - cloudmagazin","og_description":"K8s 1.36 Release: User Namespaces stable, IPVS removed, Ingress-NGINX retired. What DACH Ops teams need to check before upgrading.","og_url":"https:\/\/www.cloudmagazin.com\/en\/2026\/04\/22\/kubernetes-1-36-arrives-user-namespaces-stable-ipvs-gone\/","og_site_name":"cloudmagazin","article_publisher":"https:\/\/www.facebook.com\/cloudmagazincom\/","article_published_time":"2026-04-22T21:41:19+00:00","og_image":[{"width":1880,"height":1058,"url":"https:\/\/www.cloudmagazin.com\/wp-content\/uploads\/2026\/04\/cm-21-04-news-k8s-136-release.jpg","type":"image\/jpeg"}],"author":"Alec Chizhik","twitter_card":"summary_large_image","twitter_creator":"@cloudmagazin","twitter_site":"@cloudmagazin","twitter_misc":{"Written by":"Alec Chizhik","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/www.cloudmagazin.com\/en\/2026\/04\/22\/kubernetes-1-36-arrives-user-namespaces-stable-ipvs-gone\/#article","isPartOf":{"@id":"https:\/\/www.cloudmagazin.com\/en\/2026\/04\/22\/kubernetes-1-36-arrives-user-namespaces-stable-ipvs-gone\/"},"author":{"name":"Alec Chizhik","@id":"https:\/\/www.cloudmagazin.com\/en\/#\/schema\/person\/ce38baaa19a580268aedce096597eb3c"},"headline":"Kubernetes 1.36 arrives: User Namespaces stable, IPVS gone, Ingress\u2011NGINX retired","datePublished":"2026-04-22T21:41:19+00:00","mainEntityOfPage":{"@id":"https:\/\/www.cloudmagazin.com\/en\/2026\/04\/22\/kubernetes-1-36-arrives-user-namespaces-stable-ipvs-gone\/"},"wordCount":1044,"publisher":{"@id":"https:\/\/www.cloudmagazin.com\/en\/#organization"},"image":{"@id":"https:\/\/www.cloudmagazin.com\/en\/2026\/04\/22\/kubernetes-1-36-arrives-user-namespaces-stable-ipvs-gone\/#primaryimage"},"thumbnailUrl":"https:\/\/www.cloudmagazin.com\/wp-content\/uploads\/2026\/04\/cm-21-04-news-k8s-136-release.jpg","articleSection":["Artificial Intelligence"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.cloudmagazin.com\/en\/2026\/04\/22\/kubernetes-1-36-arrives-user-namespaces-stable-ipvs-gone\/","url":"https:\/\/www.cloudmagazin.com\/en\/2026\/04\/22\/kubernetes-1-36-arrives-user-namespaces-stable-ipvs-gone\/","name":"Kubernetes 1.36 arrives: User Namespaces stable, IPVS gone, Ingress\u2011NGINX retired - cloudmagazin","isPartOf":{"@id":"https:\/\/www.cloudmagazin.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.cloudmagazin.com\/en\/2026\/04\/22\/kubernetes-1-36-arrives-user-namespaces-stable-ipvs-gone\/#primaryimage"},"image":{"@id":"https:\/\/www.cloudmagazin.com\/en\/2026\/04\/22\/kubernetes-1-36-arrives-user-namespaces-stable-ipvs-gone\/#primaryimage"},"thumbnailUrl":"https:\/\/www.cloudmagazin.com\/wp-content\/uploads\/2026\/04\/cm-21-04-news-k8s-136-release.jpg","datePublished":"2026-04-22T21:41:19+00:00","description":"K8s 1.36 Release: User Namespaces stable, IPVS removed, Ingress-NGINX retired. What DACH Ops teams need to check before upgrading.","breadcrumb":{"@id":"https:\/\/www.cloudmagazin.com\/en\/2026\/04\/22\/kubernetes-1-36-arrives-user-namespaces-stable-ipvs-gone\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.cloudmagazin.com\/en\/2026\/04\/22\/kubernetes-1-36-arrives-user-namespaces-stable-ipvs-gone\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.cloudmagazin.com\/en\/2026\/04\/22\/kubernetes-1-36-arrives-user-namespaces-stable-ipvs-gone\/#primaryimage","url":"https:\/\/www.cloudmagazin.com\/wp-content\/uploads\/2026\/04\/cm-21-04-news-k8s-136-release.jpg","contentUrl":"https:\/\/www.cloudmagazin.com\/wp-content\/uploads\/2026\/04\/cm-21-04-news-k8s-136-release.jpg","width":1880,"height":1058},{"@type":"BreadcrumbList","@id":"https:\/\/www.cloudmagazin.com\/en\/2026\/04\/22\/kubernetes-1-36-arrives-user-namespaces-stable-ipvs-gone\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.cloudmagazin.com\/en\/home\/"},{"@type":"ListItem","position":2,"name":"Kubernetes 1.36 arrives: User Namespaces stable, IPVS gone, Ingress\u2011NGINX retired"}]},{"@type":"WebSite","@id":"https:\/\/www.cloudmagazin.com\/en\/#website","url":"https:\/\/www.cloudmagazin.com\/en\/","name":"cloudmagazin","description":"Inspiration f\u00fcr Businessentscheider","publisher":{"@id":"https:\/\/www.cloudmagazin.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.cloudmagazin.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.cloudmagazin.com\/en\/#organization","name":"cloudmagazin","url":"https:\/\/www.cloudmagazin.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.cloudmagazin.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/www.cloudmagazin.com\/wp-content\/uploads\/2020\/04\/cloudmagazin-logo-klein_menu.jpg","contentUrl":"https:\/\/www.cloudmagazin.com\/wp-content\/uploads\/2020\/04\/cloudmagazin-logo-klein_menu.jpg","width":150,"height":150,"caption":"cloudmagazin"},"image":{"@id":"https:\/\/www.cloudmagazin.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/cloudmagazincom\/","https:\/\/x.com\/cloudmagazin","https:\/\/www.linkedin.com\/showcase\/cloudmagazin\/"]},{"@type":"Person","@id":"https:\/\/www.cloudmagazin.com\/en\/#\/schema\/person\/ce38baaa19a580268aedce096597eb3c","name":"Alec Chizhik","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.cloudmagazin.com\/en\/#\/schema\/person\/image\/","url":"https:\/\/www.cloudmagazin.com\/wp-content\/uploads\/2026\/03\/alec-chizhik.jpg","contentUrl":"https:\/\/www.cloudmagazin.com\/wp-content\/uploads\/2026\/03\/alec-chizhik.jpg","caption":"Alec Chizhik"},"description":"Alec is the Chief Digital Officer at Evernine and writes about cloud architectures, IT security, and digital operations practices.","sameAs":["https:\/\/www.linkedin.com\/in\/alecchizhik\/"],"url":"https:\/\/www.cloudmagazin.com\/en\/author\/alec\/"}]}},"_links":{"self":[{"href":"https:\/\/www.cloudmagazin.com\/en\/wp-json\/wp\/v2\/posts\/36354","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cloudmagazin.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cloudmagazin.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cloudmagazin.com\/en\/wp-json\/wp\/v2\/users\/31"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cloudmagazin.com\/en\/wp-json\/wp\/v2\/comments?post=36354"}],"version-history":[{"count":0,"href":"https:\/\/www.cloudmagazin.com\/en\/wp-json\/wp\/v2\/posts\/36354\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.cloudmagazin.com\/en\/wp-json\/wp\/v2\/media\/35971"}],"wp:attachment":[{"href":"https:\/\/www.cloudmagazin.com\/en\/wp-json\/wp\/v2\/media?parent=36354"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cloudmagazin.com\/en\/wp-json\/wp\/v2\/categories?post=36354"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cloudmagazin.com\/en\/wp-json\/wp\/v2\/tags?post=36354"},{"taxonomy":"industry","embeddable":true,"href":"https:\/\/www.cloudmagazin.com\/en\/wp-json\/wp\/v2\/industry?post=36354"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}