Dependency update - Golang 1.27

[liggitt]

Tracking info

Link to any previous tracking issue:

Golang mailing list announcement:

SIG Release Slack thread:

Work items

• kube-cross, go-runner, releng-ci image updates:

  • kube-cross image promotion:
  • go-runner image promotion:
  • releng-ci image promotion:

After go-runner image promotion

• distroless-iptables image update:

  • image promotion:

After kube-cross and distroless-iptables image promotions

• kubernetes/kubernetes update (master):

  Ensure the following have been updated within the PR:

  • .go-version file
  • kube-cross image
  • go-runner image
  • distroless-iptables image

Note
This update may require an update to go.sum files, for example: kubernetes/kubernetes#118507
This will require an API Review approval.

After kubernetes/kubernetes (master) has been updated

• k8s-cloud-builder and k8s-ci-builder image updates:

• kubekins/krte image variants update:

Cherry picks

• Kubernetes 1.y-1:
• Kubernetes 1.y-2:
• Kubernetes 1.y-3:

Follow-up items

• Ensure the Golang issue template is updated with any new requirements

/assign
cc: @kubernetes/release-engineering

[liggitt]

Tracking PRs related to go1.27 that we would need to pick to release branches as part of an eventual update to go1.27:

• Tolerate json/v2 in unstructured and YAML tests kubernetes#139163
  • 1.36:
  • 1.35:
  • 1.34:
  • 1.33 and earlier: EOL before updating release branches to Go 1.27
• Update kube-openapi to isolate from stdlib json/v2 prerelease kubernetes#139867 (if release branches are on a version that includes Bump go-json-experiment to 9b1f9ea (post-split) kube-openapi#604, need to bump to at least Insulate go-json-experiment from stdlib kube-openapi#616)
  • 1.36:
  • 1.35:
  • 1.34:
  • 1.33 and earlier: EOL before updating release branches to Go 1.27
• Bump golang.org/x/net from v0.54.0 to v0.55.0 kubernetes#139258
  • 1.36:
  • 1.35:
  • 1.34:
  • 1.33 and earlier: EOL before updating release branches to Go 1.27

---

Tracking verification of conditions for bumping go1.26 on release branches:

• 2026-11: ~3 months after go 1.27 release (2026-08)
• 2027-01: 1 month after Kubernetes 1.38 release on go1.27 (2026-12)
• no regressions relative to go 1.27 known to impact Kubernetes
• pass unit and integration tests with both go 1.27 and the original go version for the release branch
  • 1.36:
  • 1.35:
  • 1.34:
  • 1.33 and earlier: EOL before updating release branches to Go 1.27
• any behavior changes in go 1.27 are mitigated to preserve existing behavior without requiring action by Kubernetes end-users

---

Tracking the PR that actually bumps to go1.27:

• 1.36:
• 1.35:
• 1.34:
• 1.33 and earlier: EOL before updating release branches to Go 1.27