$ the-wire · showcase
kube-state-metrics exposes VolumeAttributesClass, kops adds Akamai firewall
By RepoJournal · Filed · About Kubernetes
kube-state-metrics ships three new experimental PVC metrics for VolumeAttributesClass and kops adds initial Akamai firewall support.
Kube-state-metrics now surfaces mutable storage attributes on PVCs. The PVC store gains three new EXPERIMENTAL metrics: `kube_persistentvolumeclaim_volume_attributes_class`, plus metrics for the CSI driver's current and desired VolumeAttributesClass state. This closes the gap for clusters using Kubernetes 1.34's GA `VolumeAttributesClass` API, which lets a PVC reference a mutable class of storage attributes and have the CSI driver report progress. Operators monitoring storage changes should start watching these metrics before relying on them in production dashboards [1].
kops added initial firewall support for the Akamai cloud. The change adds a firewall task and mock for Akamai within kops, covering inbound and outbound policies. This lays the groundwork for kops-managed Akamai clusters to enforce network boundaries declaratively, though it's still early-stage in the kops provider model [2].
Cloud provider OpenStack released updated Helm charts across the board: cinder-csi 2.36.5, manila-csi 2.36.3, and cloud-controller-manager 2.36.4. These are routine chart releases, but operators pinned to older charts should take the patch-level bumps to stay current with CSI driver fixes [3][4][5]. In parallel, the cloud-provider-openstack repo introduced a zizmor security scanner that runs on pushes to master and on pull requests touching workflow files, uploading results as SARIF to GitHub code scanning. GitHub Actions contributors should expect workflow changes to be scanned before merge [6].
Contributor tooling moved forward elsewhere. The contributor-site now uses the `path` field from `keps.json` to build KEP README URLs, which should make KEP links more stable and correct [7]. Node-problem-detector bumped `step-security/harden-runner` from 2.21.0 to 2.21.1 in its actions-all dependency group; no behavior change is expected beyond pipeline hardening [8].
Action items
- → Review the new experimental VolumeAttributesClass PVC metrics in kube-state-metrics before adding alerts or dashboards kubernetes/kube-state-metrics [plan]
- → Evaluate Akamai firewall task support if you manage kops clusters on Akamai kubernetes/kops [plan]
- → Update OpenStack CSI and cloud-controller-manager Helm charts to the latest patch releases kubernetes/cloud-provider-openstack [plan]
- → Expect zizmor security scanning on GitHub workflow changes in cloud-provider-openstack kubernetes/cloud-provider-openstack [monitor]
References
- [1] feat(pvc): add metrics for VolumeAttributesClass support ↗ kubernetes/kube-state-metrics
- [2] feat(akamai): Add firewall task and mock in Akamai cloud ↗ kubernetes/kops
- [3] openstack-cinder-csi-2.36.5 ↗ kubernetes/cloud-provider-openstack
- [4] openstack-manila-csi-2.36.3 ↗ kubernetes/cloud-provider-openstack
- [5] openstack-cloud-controller-manager-2.36.4 ↗ kubernetes/cloud-provider-openstack
- [6] Add zizmor security scanner (#3117) ↗ kubernetes/cloud-provider-openstack
- [7] Merge pull request #804 from TineoC/fix/kep-use-directory-field ↗ kubernetes/contributor-site
- [8] Merge pull request #1353 from kubernetes/dependabot/github_actions/actions-all-4c70b186bc ↗ kubernetes/node-problem-detector