RepoJournal
Kubernetes @kubernetes
126 wires and counting

$ follow Kubernetes

Keep up with Kubernetes in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-09-10
stories 108
GitHub RSS Archive Reviews Topics

© 2026 RepoJournal Home Showcase Explore How it works Privacy

$ the-wire · showcase

Kubernetes resource quantities saturate instead of silently wrapping

By RepoJournal · Filed · About Kubernetes · Composed from the cited sources · methodology

stephenfin kubernetes-prow[bot] thc1006 Martin André lmktfy aojea tancheng33
12 people shipped this
stephenfin @stephenfin 3 cited kubernetes-prow[bot] @kubernetes-prow[bot] 3 cited thc1006 @thc1006 2 cited Martin André @mandre 1 cited lmktfy @lmktfy 1 cited aojea @aojea 1 cited tancheng33 @tancheng33 1 cited danwinship @danwinship 1 cited esotsal @esotsal liyuerich @liyuerich Mujib-Ahasan @Mujib-Ahasan opsmon @opsmon

Kubernetes added Quantity.AsScaledInt64 and AsMilliInt64 so overflow returns a clamped int64 with ok=false instead of a silently wrong number, while the cloud-provider-openstack chart release process moves to a -dev suffix on master.

The resource package now exposes Quantity.AsScaledInt64(scale) and AsMilliInt64, each returning ok=false when the value does not fit an int64 and saturating to math.MinInt64 or math.MaxInt64 on the sign-correct rail [1]. The existing Value, MilliValue and ScaledValue become wrappers that drop the bool, so their callers see a saturated value. The commit states the motivating bug plainly: "Value, MilliValue and ScaledValue wrap silently on overflow, so NewScaledQuantity(math.MaxInt64, 1).Value() returns -10 instead of a clamped result" [1]. A follow-up flipped the accessor baseline for the saturating wrappers, moving rows that carried saturatePos or saturateNeg to math.MaxInt64 or math.MinInt64 and dropping the two shared constants [2].

In cloud-provider-openstack, the chart release process changes: master charts now carry a '-dev' suffix, restricting releases from master to new major versions such as the forthcoming v1.37.0 [3]. The PR notes that 'appVersion' cannot follow, since images are only promoted on explicit release tags, so these -dev releases still use the .0 from the latest stable release, which the author describes as making them 'kind of useless' while still exercising the machinery regularly [3]. The same effort adds a make lint-charts target intended for a separate prow job, allowing the GitHub Actions workflow to be removed [4], and adds dependabot configuration for master plus the supported release-1.36 and release-1.34 branches, since release-1.33 and below are no longer supported [5]. A servicemonitor helm test was fixed after label reduction on the OCCM chart manifests removed managed-by, version, and chart labels from the Service selector [6].

On the docs side, kubernetes/website added an overview page for the Configuration concept [7] and updated the Service CIDR docs validation admission policy example [8]. The latter addresses the apiserver now being allowed to update the default ServiceCIDR during a single-to-dual-stack migration, which broke existing guardrails; the new ValidationAdmissionPolicy lets cluster admins enforce the previous behavior [8]. Two in-flight docs changes cover CEL cidr and isCIDR examples that currently render as run-on lines because the site does not enable hardWraps [9], and a switch from yum to dnf with an RHEL10 install command for kubeadm, tied to kubelet's iptables dependency becoming Recommended rather than Requires [10].

Routine dependency work continues across the release tooling: golang.org/x/mod moved 0.40.0 to 0.41.0 and golang.org/x/oauth2 0.36.0 to 0.37.0 in publishing-bot [11][12], and google.golang.org/api went 0.290.0 to 0.297.0 in kubernetes/release [13].

Action items

References

  1. [1] resource: add Quantity.AsScaledInt64 and AsMilliInt64 ↗ kubernetes/kubernetes
  2. [2] resource: flip the accessor baseline for the saturating wrappers ↗ kubernetes/kubernetes
  3. [3] Change Chart release process (#3195) ↗ kubernetes/cloud-provider-openstack
  4. [4] make: Add lint-charts target (#3208) ↗ kubernetes/cloud-provider-openstack
  5. [5] Add dependabot configuration ↗ kubernetes/cloud-provider-openstack
  6. [6] [occm] test: fix servicemonitor test after label reduction (#3200) ↗ kubernetes/cloud-provider-openstack
  7. [7] Add overview for Configuration concept ↗ kubernetes/website
  8. [8] update service cidr docs validation admission policy example ↗ kubernetes/website
  9. [9] Use tables for the cidr and isCIDR examples on the CEL page ↗ kubernetes/website
  10. [10] Change `yum` to `dnf` and update RHEL10 install command ↗ kubernetes/website
  11. [11] Merge pull request #570 from kubernetes/dependabot/go_modules/golang.org/x/mod-0.41.0 ↗ kubernetes/publishing-bot
  12. [12] Merge pull request #571 from kubernetes/dependabot/go_modules/golang.org/x/oauth2-0.37.0 ↗ kubernetes/publishing-bot
  13. [13] Merge pull request #4527 from kubernetes/dependabot/go_modules/google.golang.org/api-0.297.0 ↗ kubernetes/release

$ ls kubernetes/reviews/ # the step-back reads

the week in review Master drops containerd 1.7 over RuntimeConfig RPC the month in review August Ships Kubernetes 1.37 RC and kOps 1.37 Beta
Topics: Go Infrastructure Full archive → Weekly reviews →

Quick answers

What shipped in Kubernetes on September 10, 2026?
Kubernetes added Quantity.AsScaledInt64 and AsMilliInt64 so overflow returns a clamped int64 with ok=false instead of a silently wrong number, while the cloud-provider-openstack chart release process moves to a -dev suffix on master. In total, 62 commits and 46 pull requests landed.
Who contributed to Kubernetes on September 10, 2026?
12 developers shipped this update, including stephenfin, Martin André, esotsal, thc1006, liyuerich, Mujib-Ahasan, kubernetes-prow[bot], and lmktfy, and 4 more.
What were the notable Kubernetes updates?
resource: add Quantity.AsScaledInt64 and AsMilliInt64, resource: flip the accessor baseline for the saturating wrappers, and Change Chart release process (#3195).
♥

$ log @kubernetes --recent

Minikube drops pre-1.28 test fixtures, golang.org/x bumps land across the tree 87 shipped kubectl explain gains shell completion, kubelet threads real contexts 80 shipped Vultr autoscaling fixes, LimitRanger stops re-rejecting PVC updates 64 shipped DRA feature gate removed, code-generator learns multi-doc extensions files 69 shipped

$ log --all # elsewhere on the wire

@openclaw Cold-start Gateway diagnostics stop crying wolf, doctor repairs plugin drift Agentic Coding Cline desktop bundles shrink, goose unblocks its own clicks

$ ls showcases/

Rails Django Laravel Node.js Go Vercel Vue.js HashiCorp Arch Linux Linux Anthropic OpenAI

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.