$ the-wire · showcase
VPA gains a startup observation window, OCI autoscaling reads real ephemeral storage
By RepoJournal · Filed · About Kubernetes · Composed from the cited sources · methodology
![kubernetes-prow[bot]](https://avatars.githubusercontent.com/in/992787?v=4)
A quiet day in the Kubernetes org, but two autoscaler changes move behavior: VPA learns a per-controller startup delay, and the OCI provider stops guessing at ephemeral-storage capacity.
AEP-9936: Per-VPA Observation Window kubernetes/autoscaler
An AEP proposes an optional initialDelaySeconds field on PodUpdatePolicy, named to match Pod probes. During that window the Updater and Admission Controller treat the VPA as if updateMode were Off: no evictions, no in-place resizes, no recommendation injection into pods created during it, while the Recommender keeps publishing to status.recommendation.
[OCI] Use registered node ephemeral-storage for template kubernetes/autoscaler
The OCI provider previously built template nodes' ResourceEphemeralStorage purely from the cluster-autoscaler/node-ephemeral-storage freeform tag, ignoring what kubelet already reports on registered nodes in the same pool. It now reads that registered capacity when constructing the template, which matters for pools whose tag understates real disk.
Trust SPO provenance of main at SLSA build level 3 kubernetes/k8s.io
The k8s.io infrastructure repo lets the Security Profiles Operator's provenance signer claim its level 3 GitHub Actions builder for main as well as v* release tags, since the operator attests profiles on every push to main via the isolated provenance workflow. Without it, the promoter rejects that provenance.
bump the kubernetes deps kubernetes/autoscaler
kubernetes/autoscaler bumped its Kubernetes dependencies with a hand-rolled PR after Dependabot struggled with the same upgrade. Routine, but it is the kind of version drift that surfaces later as build or vendoring conflicts.
Add a benchmark for FindParentControllerForPod kubernetes/autoscaler
A new benchmark for FindParentControllerForPod follows up on a small improvement in that function. The long tail is otherwise routine: image promotion for v1.38.0-alpha.2, a go-git bump to 5.19.3, harden-runner to 2.22.0, and Japanese, French, and Chinese documentation translations.
