RepoJournal
Kubernetes @kubernetes
176 wires and counting

$ follow Kubernetes

Keep up with Kubernetes in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-10-06
stories 55
GitHub RSS Archive Reviews

© 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire · showcase

Storage gets RV-aware, VPA matching gets a baseline

By RepoJournal · Filed · About Kubernetes · Composed from the cited sources · methodology

serathius adrianmoisey Sascha Grunert kubernetes-prow[bot] Omer Aplatony dependabot Max Neverov
9 people shipped this
serathius @serathius 4 cited adrianmoisey @adrianmoisey 1 cited Sascha Grunert @saschagrunert 1 cited kubernetes-prow[bot] @kubernetes-prow[bot] Omer Aplatony @omerap12 dependabot @dependabot Max Neverov @mneverov jpbetz @jpbetz michaelasp @michaelasp

Today's Kubernetes work is almost entirely plumbing: the storage layer learns to carry resource versions end to end, the VPA updater gets benchmarks for a matching path its authors already suspect is O(n), and the release tooling migrates off deprecated SBOM APIs.

Store RV in the store and indexer kubernetes/kubernetes

by serathius

The store and indexer now hold the resource version alongside the object, which lets lower storage layers return a whole response and sets up waitForFresh as a separate step later. serathius flags it as /kind feature with a NONE release note, so nothing is exposed to users yet.

Fix differences in error returned between cacher and etcd3 storage kubernetes/kubernetes

by serathius

Two divergences between cacher and etcd3 get closed: for a Get on an invalid RV the cacher never returned a storage error, a gap left open when the etcd3 path was covered, and for a Get on a missing RV without IgnoreNotFound the cacher sets an RV in the error while etcd3 does not. The author calls it "first fruit" from the storage-consistency work and is unsure whether it was externally observa...

Add benchmarks for VPA updater pod-to-VPA matching kubernetes/autoscaler

by adrianmoisey

adrianmoisey added benchmarks for pod-to-VPA matching, landing them on master so the existing behavior is tracked before any optimization. The PR states the belief that matching is slow at O(n) and that follow-up PRs will speed up those code paths, which is worth watching if the updater's sync loop is a cost center in your cluster.

Validate Get requests with RV kubernetes/kubernetes

by serathius

Gets with a resource version are now validated, again marked /kind feature with no release note.

Migrate off deprecated bom APIs kubernetes/release

by Sascha Grunert

bom v0.8.0 deprecates spdx.DocBuilder and spdx.OpenDoc, so the release tooling now generates SBOMs with bom.Generate and reads them with bom.Open, converting through spdx.FromProtobom. The organization credit and license list version DocBuilder filled in are now set explicitly, and no-op options are dropped, which matters if you consume these SBOMs downstream.

Add watch delay measuring to load test so we can track node authorizer improvements kubernetes/perf-tests

by serathius

Load tests now measure watch delay, giving the node authorizer improvements something to be tracked against.

$ ls kubernetes/reviews/ # the step-back reads

the week in review Kubernetes release v0.23.0 adds trixie kube-cross variant the month in review node-problem-detector 1.37.0 patches three CVEs
Full archive → Weekly reviews →

Quick answers

What shipped in Kubernetes on October 6, 2026?
Today's Kubernetes work is almost entirely plumbing: the storage layer learns to carry resource versions end to end, the VPA updater gets benchmarks for a matching path its authors already suspect is O(n), and the release tooling migrates off deprecated SBOM APIs. In total, 34 commits and 21 pull requests landed.
Who contributed to Kubernetes on October 6, 2026?
9 developers shipped this update, including serathius, kubernetes-prow[bot], adrianmoisey, Omer Aplatony, dependabot, Sascha Grunert, Max Neverov, and jpbetz, and 1 more.
What were the notable Kubernetes updates?
Store RV in the store and indexer, Fix differences in error returned between cacher and etcd3 storage, and Add benchmarks for VPA updater pod-to-VPA matching.
♥

$ log @kubernetes --recent

Control plane cleanups: watchcache context prep, RecursiveReadOnlyMounts gate removed 90 shipped Consistent get backed out when etcd transforms are on 121 shipped Admission webhook metrics go beta; watch cache gets a minheap freshness waiter 103 shipped ML-DSA support for service account tokens 7 shipped

$ log --all # elsewhere on the wire

Agent Security Quiet day in agent security as guard coverage reaches four clients Alignment & Post-training verl defaults Ascend RL mode, open-instruct unblocks SFT packing

$ ls showcases/

Safety Evals AI Red Teaming Agent Security Interpretability Alignment & Post-training

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.