platformchangelog.dev
43 tools
tools43j k move f filter
‹ tools amazon-eksplatform

Amazon EKS

v1.37current · 2026-09-21

AWS's managed Kubernetes service.

governance vendor-owned·license commercial·vendor AWS
platformIDP & portals
release lines seen1.151.371.36
alternatives1

BTP's Kyma runtime is SAP-managed Kubernetes inside the SAP estate; EKS is general-purpose managed Kubernetes.

case notes and incidents
How athenahealth modernized healthcare workloads with Amazon EKS Hybrid Nodes (AWS Containers Blog, 2026-09-30)
A platform team that must keep latency-sensitive or data-resident workloads on premises can run them under the same EKS control plane, APIs and tooling as cloud nodes, instead of operating a second control plane. The team still owns the hardware, network, node OS and storage, and needs Direct Connect or VPN connectivity and a separate nodeadm upgrade path for hybrid nodes.
How Property Finder automated incident management with AWS DevOps Agent (AWS DevOps Blog, 2026-09-28)
Platform teams running ECS and Terraform can see a pattern for wiring an AI investigation agent to alerting, ticketing and paging, with a remediation agent restricted to a GitHub MCP server and always opening Draft PRs for human review. The source gives no independent measurements beyond the one incident and a vendor-attributed quote.
other coverage
Scaling Kubernetes Workloads with Node Swap (Kubernetes Blog, 2026-10-05)
releases10change lines typed from the source notes
release2026-10-14patchsharesource

Amazon CloudWatch announces log routing and chained log parsers

Amazon CloudWatch pipelines now supports conditional log routing, which sends each event to a different CloudWatch log group based on conditions evaluated against processed fields. It also supports chained parsers, where later parser processors consume fields produced by earlier ones, such as parsing a JSON envelope and then applying a Grok parser. The capabilities are available in all commercial AWS Regions where CloudWatch pipelines is generally available and can be configured through the console, CLI, or SDKs.

platform teams Platform teams can split mixed log streams into separate log groups and apply different retention and access controls per route within a single pipeline. Nested log formats can be parsed in sequence without a separate transformation stage.

written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules

No itemized notes. Read the source.
v1.15.02026-10-10minor++++++++++********sharesource

Karpenter v1.15.0

Karpenter v1.15.0 adds node repair as a voluntary disruption method, including reboot as a node action, terminate-first repair for capacity-constrained NodePools, and a --legacy-node-repair flag to run the previous controller. It also adds metrics such as karpenter_pods_disrupted_total and labels on disruption metrics, plus AWS feature gates and CEL expressions for kubelet settings. The release notes list 41 additions and 35 fixes, with 189 maintenance lines omitted.

platform teams Platform teams running Karpenter on EKS should review repair and disruption behavior, since node repair now runs as a voluntary disruption and default repair policies changed, and the --legacy-node-repair flag offers a fallback. The new disruption and reboot metrics give more detail for monitoring node churn.

written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules

  • Dra prioritized alternatives support (#3142) #3142 (Ryan Mistretta)added
  • Metrics: add karpenter_pods_disrupted_total counter (#3015) #3015 (praveen9354)added
  • Metrics: add consolidation_policy and termination_mode labels to disruption metrics (#3179) #3179 (Derek Frank)added
  • Add VPA prediction controller and store (#3134) #3134 (Jigisha Patil)added
  • Default pod topology spread awareness (#3205) #3205 (Andrew Mitchell)added
  • Account for instance type volume limits when provisioning (#3202) #3202 (Eddie)added
  • Reduce allocations of Requirement and Requirements (#3211) #3211 (Bevan Arps)added
  • Metrics: document metric dimensions with built-in help and values (#3295) #3295 (Derek Frank)added
  • Metrics: split the disruption decision dimension into command vs approval decisions (#3322) #3322 (Derek Frank)added
  • Metrics: name and document the unknown cloudprovider error value (#3323) #3323 (Derek Frank)added
  • Disruption: Add pod disruption tracking to perf test reporting (#2892) #2892 (Nathaniel Jones)added
  • Node repair as voluntary disruption (#3311) #3311 (Derek Frank)added
78 more lines
  • Terminate first drift for capacity constrained nodepools (#3312) #3312 (Derek Frank)added
  • Publish pod event for insufficient capacity error (#3143) #3143 (Tsubasa Nagasawa)added
  • Terminate-first repair for capacity-constrained NodePools (#3342) #3342 (Derek Frank)added
  • Reboot as a node action (#3345) #3345 (Sarthak Umarani)added
  • Add feature-gated pod deletion cost management controller (#2894) #2894 (Nathaniel Jones)added
  • Integrate reason-aware matching with voluntary node repair (#3336) #3336 (Sebestien)added
  • Integrate node repair candidate resolution and escalation (#3367) #3367 (Sebestien)added
  • Wire reboot into repair (#3377) #3377 (Sarthak Umarani)added
  • Repair registered nodes that never initialize through the repair disruption method (#3393) #3393 (Derek Frank)added
  • Add --legacy-node-repair to run the legacy node repair controller in place of the repair disruption method (#3400) #3400 (Derek Frank)added
  • Add metric for terminate-first decisions labeled by why the replacement couldn't be staged first (#3404) #3404 (Derek Frank)added
  • Always run the reboot controller and fail terminal reboot errors immediately (#3405) #3405 (Sarthak Umarani)added
  • Add aws specific feature gates implementation with --aws-feature-gates flag (#9482) #9482 (Joshua Guo)added
  • CEL expression support for maxPodsExpression, kubeReserved, and systemReserved (#9326) #9326 (Zara)added
  • Extending KubeletConfiguration struct fields (#9461) #9461 (Zara)added
  • Expose security group refresh interval as configurable setting (#9526) #9526 (Derek Frank)added
  • Metrics: bump to the label-aware core and document provider metric dimensions (#9595) #9595 (Derek Frank)added
  • Add EC2NodeClass support for Nitro Enclaves #8165 (Sebestien Palmerio)added
  • Decouple reserved offering Available from ReservationCapacity (#9625) #9625 (Derek Frank)added
  • Add Helm values and docs for the PodDeletionCostManagement feature gate (#9653) #9653 (Derek Frank)added
  • Implement CloudProvider.Reboot via ec2:RebootInstances (#9676) #9676 (Sarthak Umarani)added
  • Reason-aware default repair policies with bounded termination grace periods (#9680) #9680 (Sebestien)added
  • Nvidia and efa driver dra support (#9550) #9550 (Joshua Guo)added
  • Bump karpenter to support --legacy-node-repair, add settings.legacyNodeRepair to the chart, and document it (#9709) #9709 (Derek Frank)added
  • Add the RebootForRepair AWS feature gate for reboot repair policies (#9716) #9716 (Sarthak Umarani)added
  • Cache virtual pod definitions to prevent re-computation (#3137) #3137 (Zachary Nixon)added
  • Rewrite Requirements.intersectKeys to avoid allocations (#3310) #3310 (Wiktor Kuropatwa)added
  • Repair: match repair policies on Node updates instead of every disruption pass (#3381) #3381 (Derek Frank)added
  • Precompute offering cache keys (#9411) #9411 (Ryan Mistretta)added
  • Fix capacity and overhead override semantic (#3151) #3151 (Jigisha Patil)fixed
  • Heal stranded unlaunched nodeclaim entries in cluster state (#3190) #3190 (Ryan Mistretta)fixed
  • Filter out incompatible Offerings in EstimatedSavings() (#3217) #3217 (Drew Sirenko)fixed
  • Propagate template labels to virtual buffer pods (#3174) #3174 (Jigisha Patil)fixed
  • Check for nodename and terminal pod for PodSchedulingUndecidedTimeSeconds gauge delete (#3120) #3120 (Joshua Guo)fixed
  • Relax minValues against narrowed NodeClaim requirements (#3170) #3170 (Karan V)fixed
  • Adding dynamic resources field to nodeoverlay apply (#3278) #3278 (Joshua Guo)fixed
  • Pass ctx to disruption.NewController in terminatefirst_test (#3346) #3346 (Sarthak Umarani)fixed
  • Record terminate-first under the voluntary disruption decision label (#3348) #3348 (Derek Frank)fixed
  • Handle not found error for node lookup in eviction queue (#3335) #3335 (Cameron McAvoy)fixed
  • Guard ReleaseNodeCount against a dropped NodePool entry (#3347) #3347 (GaneshBannur)fixed
  • Add nodepool label to cloud provider errors (#3269) #3269 (Cindia-blue)fixed
  • Size repair replacements for pods whose eviction is blocked (#3358) #3358 (Derek Frank)fixed
  • Add nodepool label to Reboot error metrics and expect unknown error label in tests (#3359) #3359 (Sarthak Umarani)fixed
  • Don't record a reboot's terminal metrics twice on a stale reconcile (#3360) #3360 (Sarthak Umarani)fixed
  • Capacity buffer: fix trigger when cb is deleted (#3298) #3298 (Zachary Nixon)fixed
  • Disruption: emit DisruptionBlocked when static drift can't stage a replacement at the node limit (#3368) #3368 (Derek Frank)fixed
  • Keep the reboot watch predicate from writing conditions into the cached NodeClaim (#3372) #3372 (Derek Frank)fixed
  • Let residual pods ride a bounded reboot instead of deleting them (#3379) #3379 (Sarthak Umarani)fixed
  • Capacity buffer: watch scalableRef workloads so buffers resolve as soon as their workload exists (#3370) #3370 (Derek Frank)fixed
  • Correct go.tools.sum checksum for envoyproxy/go-control-plane/envoy v1.32.3 (#3388) #3388 (Sebestien)fixed
  • Only repair uninitialized nodes once they register (#3397) #3397 (Derek Frank)fixed
  • Terminate-first static repair and drift when capacity reservations are full (#3398) #3398 (Derek Frank)fixed
  • Skip a static NodePool whose instance types can't be resolved instead of aborting repair and drift (#3403) #3403 (Derek Frank)fixed
  • Bound the drain when a failed reboot escalates to replacement (#3407) #3407 (Sarthak Umarani)fixed
  • Use the same timestamp to score all repair candidates (#3406) #3406 (GaneshBannur)fixed
  • Evict stale instance cache entries in List() (#9242) #9242 (Ryan Mistretta)fixed
  • Classify SpotMaxPriceTooLow as an ICE error (#9501) #9501 (Sandeep Raju)fixed
  • Key offering cache on nestedVirtualizationEnabled (#9682) #9682 (Ryan Mistretta)fixed
  • Treat a reclaiming interruptible capacity reservation as unavailable capacity (#9703) #9703 (Ryan Mistretta)fixed
  • Credit a terminated instance's capacity reservation slot only once (#9704) #9704 (Ryan Mistretta)fixed
  • Raise Bottlerocket default root volume to 6Gi (#9700) #9700 (Ryan Mistretta)fixed
  • Use the pre-1.15 repair policies with --legacy-node-repair (#9717) #9717 (Derek Frank)fixed
  • Fix flaky should use same launch template (#9459) #9459 (Ryan Mistretta)fixed
  • Fix the website preview workflow (#9515) #9515 (Joshua Guo)fixed
  • Unit test and ci fix for dl1.24xlarge does not exist error (#9343) #9343 (Joshua Guo)other
  • Pin all release/CI build tooling to explicit versions (#9396) #9396 (Derek Frank)other
  • Fixing the broken fixed website preview workflow (#9530) #9530 (Joshua Guo)other
  • Harden website preview workflow's artifact handling (#9587) #9587 (GaneshBannur)other
  • Collapse per-suite periodic e2e Slack pings into one run summary (#9589) #9589 (Drew Sirenko)other
  • Install the go.mod Go version in the private cluster CodeBuild job (#9671) #9671 (Derek Frank)other
  • Keep the GitHub "Latest" release badge on the newest version (#9397) #9397 (Derek Frank)other
  • Run required checks in the merge queue (#9681) #9681 (Derek Frank)other
  • Deploy website previews on /karpenter preview instead of every PR push (#9686) #9686 (Derek Frank)other
  • Give the IPv6 vpc-cni addon a pod identity so eksctl v0.217.0 can create E2E clusters (#9688) #9688 (Derek Frank)other
  • Use IRSA for Karpenter on IPv6 E2E clusters so eksctl skips the vpc-cni pod identity (#9689) #9689 (Derek Frank)other
  • 90f724a: split scheduling test suite into two (Sagar Dhana)other
  • Update label naming for consistency (#9410) #9410 (ahreehong)other
  • 4a562f4: Add memory-manager-reserved-memory to BottlerocketKubernetes settings (#9427) (Tanvir Tatla)other
189 maintenance lines (dependency bumps, CI, tests, docs)
  • Reference rfc-template.md in designs README (#3173) #3173 (Andrew Mitchell)maintenance
  • Add drift-per-nodepool-backoff rfc (#3128) #3128 (Cameron McAvoy)maintenance
  • Fix typos in contributing-guidelines.md (#3161) #3161 (Mridula Madabhushanam)maintenance
  • Initial AGENTS.md (#3232) #3232 (Reed Schalo)maintenance
  • RFC for default pod topology spread awareness (#3183) #3183 (Andrew Mitchell)maintenance
  • Add community maintained upcloud providers (#3309) #3309 (Leonardo)maintenance
  • Add AI disclosure section to PR template (#3334) #3334 (Drew Sirenko)maintenance
  • RFC for making node repair voluntary disruption (#3192) #3192 (Derek Frank)maintenance
  • RFC for Terminate-first Disruption for Capacity-Constrained Nodepools (#3203) #3203 (Derek Frank)maintenance
  • RFC for reboot as a node action in karpenter (#3259) #3259 (Sarthak Umarani)maintenance
  • RFC for Node Repair Veto (#3277) #3277 (GaneshBannur)maintenance
  • RFC for building a pod deletion cost controller to enable Karpenter to work better with the ReplicaSet Controller (#2935) #2935 (Nathaniel Jones)maintenance
  • Add reason-aware repair policy matching RFC (#3263) #3263 (Sebestien)maintenance
  • Document well known annotations as wellknown.Annotations (#3364) #3364 (Derek Frank)maintenance
  • Add node repair candidate resolution, admission, and escalation RFC (#3270) #3270 (Sebestien)maintenance
  • Document feature gates as options.FeatureGates (#3376) #3376 (Derek Frank)maintenance
  • Remove consolidationPolicy default sentence from NodePool API docs (#3378) #3378 (Drew Sirenko)maintenance
  • Update broken link to Node Repair heading on Disruption Concepts page (#8993) #8993 (Seth McCombs)maintenance
  • Add g6f fractional GPU NodeOverlay workaround example (#9395) #9395 (Zaid Ahmed Farooq)maintenance
  • Add conceptual documentation for NodeClaims (#9125) #9125 (Sergiy)maintenance
  • Add version support policy (#9313) #9313 (Sergiy)maintenance
  • RFC for CEL expressions in kubelet config fields (#9342) #9342 (Zara)maintenance
  • Fix invalid eksctl flag in Zonal Shift onboarding (#9495) #9495 (Sandipan Panda)maintenance
  • Consolidate status condition, NodeOverlay, and minValues fixes (#9500) #9500 (Ryan Mistretta)maintenance
  • Add status condition, NodeOverlay, and minValues fixes to /docs (#9502) #9502 (Ryan Mistretta)maintenance
  • CEL Expressions and Extended Kubelet Configuration feature site docs (#9508) #9508 (Zara)maintenance
  • Update for patch release v1.14.1 (#9533) #9533 (Ryan Mistretta)maintenance
  • Add task for monitoring API throttling (#9534) #9534 (Derek Frank)maintenance
  • Add ca rotation warning (#9522) #9522 (Joshua Guo)maintenance
  • Note the reason metric label casing change in the 1.15 upgrade guide (#9581) #9581 (Derek Frank)maintenance
  • Metrics: docs generator reads []opmetrics.Label and Stage; regenerate metrics.md (#9604) #9604 (Derek Frank)maintenance
  • Note the 1.15 breaking cloudprovider error label change ("" -> "unknown") (#9600) #9600 (Derek Frank)maintenance
  • Recommend MostAllocated (#9603) #9603 (Derek Frank)maintenance
  • Document node repair as a voluntary disruption method (#9635) #9635 (Derek Frank)maintenance
  • Add kubectl examples to inspect NodePools, EC2NodeClasses, and NodeClaims (#9588) #9588 (Daniel Bae)maintenance
  • Document terminate-first disruption for drift and repair (#9655) #9655 (Derek Frank)maintenance
  • Clarify DaemonSet overhead is used for sizing, not reserved (#9442) #9442 (Vincent Creusot)maintenance
  • Fix typos in concepts documentation (#9429) #9429 (Archong Liu)maintenance
  • Node Pool -> NodePool (#9651) #9651 (Ben Bodenmiller)maintenance
  • Note that metric dimensions can be empty depending on object state (#9657) #9657 (Derek Frank)maintenance
  • Add guidance for exposing instance configuration through offerings (#9640) #9640 (Jason Deal)maintenance
  • Generate a well known annotations reference from wellknown.Annotations (#9669) #9669 (Derek Frank)maintenance
  • Clarify NodeOverlay hourly price units (#9478) #9478 (Mia Miao)maintenance
  • Instance-family plus instance-size can collapse to one SKU (#9556) #9556 (Andrey Maltsev)maintenance
  • Restricted runtime labels do not trigger provisioning (#9555) #9555 (Andrey Maltsev)maintenance
  • Warn about consolidation candidate ordering change in 1.14 upgrade guide (#9695) #9695 (Derek Frank)maintenance
  • Regenerate the metrics reference for the reboot disruption decision #9691 (Sarthak Umarani)maintenance
  • Add 1.15 consolidation_type upgrade note, security group refresh interval, and consolidateAfter default (#9715) #9715 (Derek Frank)maintenance
  • Order the 1.15.0 upgrade guide by impact and document the ordering in AGENTS.md (#9712) #9712 (Derek Frank)maintenance
  • Document the do-not-repair DisruptionBlocked event (#9698) #9698 (GaneshBannur)maintenance
  • Add per-test-case performance threshold overrides (#3165) #3165 (Andrew Mitchell)maintenance
  • Add microbenchmarks for NewScheduler and NewTopology (#3299) #3299 (Ryan Mistretta)maintenance
  • Add catch for pod not found (#3315) #3315 (Ryan Mistretta)maintenance
  • Change foreground deletion to background (#3316) #3316 (Ryan Mistretta)maintenance
  • Add regression test for default pod tscs (#3274) #3274 (Andrew Mitchell)maintenance
  • Kwok: node repair + budgeted-breaker regression suite (#3357) #3357 (Derek Frank)maintenance
  • Disruption: cover terminate-first drift and repair (#3362) #3362 (Sebestien)maintenance
  • E2e: patch repair fault conditions so stale node reads can't drop do not repair (#3371) #3371 (Derek Frank)maintenance
  • Add reboot e2e specs (#3380) #3380 (Sarthak Umarani)maintenance
  • Compare snapshotted container restarts across sequential runs (#3339) #3339 (Ryan Mistretta)maintenance
  • Perf: gate Karpenter memory on Go live heap instead of RSS (#3382) #3382 (Sebestien)maintenance
  • Raise reboot escalation e2e timeout to 35m (#3396) #3396 (Ryan Mistretta)maintenance
  • Bump IODCR interruption notice period (#9543) #9543 (Ryan Mistretta)maintenance
  • Drop stale testing for unmanaged and managed instance profile (#9545) #9545 (Ryan Mistretta)maintenance
  • Adding E2E Tests for Zonal Shift provider. (#9221) #9221 (sagdhana)maintenance
  • Use g.Expect in ExpectInterruptibleAndSourceCapacityCanceled (#9609) #9609 (Ryan Mistretta)maintenance
  • Bump upgrade suite from_git_ref pin (#9607) #9607 (Drew Sirenko)maintenance
  • Fix IPv6 e2e by disabling vpc-cni subnet discovery (#9608) #9608 (Drew Sirenko)maintenance
  • Compare nodes by UID in e2e Monitor created/deleted node tracking (#9631) #9631 (Derek Frank)maintenance
  • Run core disruption and repair suites upstream and fix repair e2es for voluntary repair (#9647) #9647 (Derek Frank)maintenance
  • Cover terminate-first drift and repair on a full capacity reservation #9654 (Sebestien Palmerio)maintenance
  • Use the initialized node in repair condition e2es (#9675) #9675 (Sebestien)maintenance
  • Fit repair e2es inside their timeouts now that core clamps condition transition times to node creation (#9687) #9687 (Derek Frank)maintenance
  • Inject reason-matched repair faults so repair e2es hit the 10 minute XID policy #9692 (Derek Frank)maintenance
  • Run the reboot e2e specs on EC2 #9691 (Sarthak Umarani)maintenance
  • Move repair and reboot e2es into their own Repair suite and bump Go to 1.26.9 for vulncheck (#9699) #9699 (Derek Frank)maintenance
  • Use >1 vCPU instances and a 20m timeout for Windows kubelet e2e specs (#9701) #9701 (Ryan Mistretta)maintenance
  • E2es: enable DRA NVIDIA/EFA feature gates and stop ignoring DRA requests (#9708) #9708 (Ryan Mistretta)maintenance
  • Fall back across random instance types and zones when creating E2E capacity reservations (#9707) #9707 (Derek Frank)maintenance
  • Fix flaky zonal shift test #9710 (Ryan Mistretta)maintenance
  • Add back in legacy repair e2es (#9714) #9714 (Ryan Mistretta)maintenance
  • E2e for terminate-first static repair and drift with a full capacity reservation (#9706) #9706 (Derek Frank)maintenance
  • Add read perms to e2e-matrix-trigger (#9596) #9596 (Drew Sirenko)maintenance
  • Bump eksctl to v0.217.0 for E2E (#9672) #9672 (Derek Frank)maintenance
  • Upgrade from the latest release in the E2E Upgrade suite (#9677) #9677 (Derek Frank)maintenance
  • Fix private cluster e2e helm, prometheus webhook image, and zonal shift endpoint (#9679) #9679 (Derek Frank)maintenance
  • Complete operator enum validation for NodeSelectorRequirement (#2924) #2924 (Leo Ryu)maintenance
  • Default consolidateAfter instead of requiring it (#3220) #3220 (Ryan Mistretta)maintenance
  • Consolidate pod force-deletion into the eviction queue (#3063) #3063 (Ketankumar Jani)maintenance
  • Upgrade KWOK to v0.8.0 (#3140) #3140 (Kotaro Inoue)maintenance
  • Clean up agents.md (#3264) #3264 (Todd Neal)maintenance
  • Controllers: standardize Name() to a string literal (#3268) #3268 (Derek Frank)maintenance
  • Use c.Name() for deviceallocation controller (#3283) #3283 (Derek Frank)maintenance
  • Improve controller error context (#3280) #3280 (Sebestien)maintenance
  • Breaking: standardize the reason metric label to lowercase values (#3284) #3284 (Derek Frank)maintenance
  • Sync sig-autoscaling-leads aliases (#3293) #3293 (Daniel Kłobuszewski)maintenance
  • Breaking: set the queue_failures_total consolidation_type label to the command's consolidation type instead of its decision string (#3294) #3294 (Derek Frank)maintenance
  • Add dynamic_resources dimensions on pod metrics (#3286) #3286 (Ryan Mistretta)maintenance
  • Add stage field to metrics (#3321) #3321 (Ryan Mistretta)maintenance
  • Add ryan-mist as reviewer (#3324) #3324 (Ryan Mistretta)maintenance
  • Add jigish620 as karpenter reviewer (#3325) #3325 (Jigisha Patil)maintenance
  • Push to PR cancels PRs inflight runs (#3349) #3349 (Ryan Mistretta)maintenance
  • Replace avast/retry-go with k8s wait utility (#2968) #2968 (Mikel Olasagasti Uranga)maintenance
  • Remove unused compatibility.karpenter.sh/provider annotation (#3375) #3375 (Derek Frank)maintenance
  • Don't register the VPA prediction controller until predictions are wired in (#3383) #3383 (Jigisha Patil)maintenance
  • Emit DisruptionBlocked when do-not-repair vetoes repair (#3390) #3390 (GaneshBannur)maintenance
  • Bump go to 1.26.9 and golang.org/x/net to v0.60.0 to fix vulncheck (#3392) #3392 (Derek Frank)maintenance
  • Release v1.14.0 (#9344) #9344 ([github-actions[bot]](maintenance
  • Deps: bump the go-deps group with 12 updates (#9365) #9365 ([dependabot[bot]](maintenance
  • Deps: consolidated dependabot dependency bump (#9389) #9389 (Andrew Mitchell)maintenance
  • Deps-dev: bump postcss from 8.5.18 to 8.5.19 in /website in the website-deps group across 1 directory (#9391) #9391 ([dependabot[bot]](maintenance
  • NodeClass status condition on misconfigured spec.instanceProfile (#9390) #9390 (Ryan Mistretta)maintenance
  • Use ec2 api to filter instances (#9408) #9408 (ahreehong)maintenance
  • Deps: bump actions/setup-go from 6.5.0 to 7.0.0 in /.github/actions/install-deps in the action-deps group (#9430) #9430 ([dependabot[bot]](maintenance
  • Deps: bump actions/setup-go from 6.5.0 to 7.0.0 in /.github/actions/e2e/cleanup in the action-deps group (#9432) #9432 ([dependabot[bot]](maintenance
  • Deps-dev: bump the website-deps group in /website with 2 updates (#9431) #9431 ([dependabot[bot]](maintenance
  • Deps: bump the actions-deps group with 4 updates (#9433) #9433 ([dependabot[bot]](maintenance
  • Update data from AWS APIs (#9435) #9435 ([github-actions[bot]](maintenance
  • Deps: bump the go-deps group with 12 updates (#9434) #9434 ([dependabot[bot]](maintenance
  • Deps: bump golang.org/x/text to v0.39.0 to fix GO-2026-5970 (#9439) #9439 (Derek Frank)maintenance
  • Deps-dev: bump tar from 7.5.16 to 7.5.20 in /website (#9436) #9436 ([dependabot[bot]](maintenance
  • Deps: bump the go-deps group with 15 updates (#9453) #9453 ([dependabot[bot]](maintenance
  • Deps: bump github.com/google/cel-go from 0.26.0 to 0.29.0 (#9458) #9458 ([dependabot[bot]](maintenance
  • Deps: bump docker/login-action from 4.4.0 to 4.5.1 in /.github/actions/e2e/run-tests-private-cluster in the action-deps group (#9451) #9451 ([dependabot[bot]](maintenance
  • Deps-dev: bump postcss from 8.5.20 to 8.5.23 in /website in the website-deps group (#9450) #9450 ([dependabot[bot]](maintenance
  • Deps: bump aws-actions/configure-aws-credentials from 6.2.2 to 6.2.3 in /.github/actions/e2e/dump-logs in the action-deps group (#9447) #9447 ([dependabot[bot]](maintenance
  • Deps: bump actions/checkout from 7.0.0 to 7.0.1 in /.github/actions/e2e/install-prometheus in the action-deps group (#9449) #9449 ([dependabot[bot]](maintenance
  • Deps: bump actions/checkout from 7.0.0 to 7.0.1 in /.github/actions/e2e/setup-cluster in the action-deps group (#9448) #9448 ([dependabot[bot]](maintenance
  • Deps: bump the action-deps group in /.github/actions/e2e/upgrade-crds with 2 updates (#9446) #9446 ([dependabot[bot]](maintenance
  • Deps: bump actions/checkout from 7.0.0 to 7.0.1 in /.github/actions/e2e/slack/notify in the action-deps group (#9444) #9444 ([dependabot[bot]](maintenance
  • Deps: bump actions/checkout from 7.0.0 to 7.0.1 in /.github/actions/e2e/cleanup in the action-deps group (#9443) #9443 ([dependabot[bot]](maintenance
  • Deps: bump the action-deps group in /.github/actions/e2e/install-karpenter with 2 updates (#9445) #9445 ([dependabot[bot]](maintenance
  • Deps: bump the actions-deps group with 6 updates (#9452) #9452 ([dependabot[bot]](maintenance
  • Deps: bump the actions-deps group with 5 updates (#9472) #9472 ([dependabot[bot]](maintenance
  • Deps: bump the go-deps group with 14 updates (#9473) #9473 ([dependabot[bot]](maintenance
  • Update data from AWS APIs (#9480) #9480 ([github-actions[bot]](maintenance
  • Deps-dev: bump postcss from 8.5.23 to 8.5.25 in /website in the website-deps group (#9469) #9469 ([dependabot[bot]](maintenance
  • Deps: bump docker/login-action from 4.5.1 to 4.6.0 in /.github/actions/e2e/install-karpenter in the action-deps group (#9470) #9470 ([dependabot[bot]](maintenance
  • Deps: bump docker/login-action from 4.5.1 to 4.6.0 in /.github/actions/e2e/run-tests-private-cluster in the action-deps group (#9471) #9471 ([dependabot[bot]](maintenance
  • Deps: bump the actions-deps group with 3 updates (#9493) #9493 ([dependabot[bot]](maintenance
  • Deps: bump the go-deps group with 16 updates (#9494) #9494 ([dependabot[bot]](maintenance
  • Deps-dev: bump postcss from 8.5.25 to 8.5.26 in /website in the website-deps group (#9491) #9491 ([dependabot[bot]](maintenance
  • Deps: bump the k8s-go-deps group across 1 directory with 7 updates (#9492) #9492 ([dependabot[bot]](maintenance
  • Bump go to 1.26.6 (#9506) #9506 (Ryan Mistretta)maintenance
  • Deps: bump the go-deps group with 17 updates (#9513) #9513 ([dependabot[bot]](maintenance
  • Deps-dev: bump ansi-regex from 6.2.2 to 6.3.0 in /website in the website-deps group (#9511) #9511 ([dependabot[bot]](maintenance
  • Deps: bump the actions-deps group with 3 updates (#9512) #9512 ([dependabot[bot]](maintenance
  • Update data from AWS APIs (#9514) #9514 ([github-actions[bot]](maintenance
  • Add nodeclass user data size metric and better user data size error handling (#9483) #9483 (Joshua Guo)maintenance
  • Deps: bump the action-deps group in /.github/actions/deploy-website with 2 updates (#9527) #9527 ([dependabot[bot]](maintenance
  • Deps: bump the actions-deps group with 2 updates (#9528) #9528 ([dependabot[bot]](maintenance
  • Deps: bump the go-deps group with 14 updates (#9529) #9529 ([dependabot[bot]](maintenance
  • Update data from AWS APIs (#9537) #9537 ([github-actions[bot]](maintenance
  • Deps: bump the go-deps group with 14 updates (#9541) #9541 ([dependabot[bot]](maintenance
  • Deps: bump the actions-deps group with 3 updates (#9540) #9540 ([dependabot[bot]](maintenance
  • Deps: bump the k8s-go-deps group with 6 updates (#9539) #9539 ([dependabot[bot]](maintenance
  • Bump sigs.k8s.io/karpenter and adapt to its API changes (#9544) #9544 (Andrew Mitchell)maintenance
  • Update data from AWS APIs (#9559) #9559 ([github-actions[bot]](maintenance
  • Deps: bump the go-deps group with 16 updates (#9565) #9565 ([dependabot[bot]](maintenance
  • Deps: bump the actions-deps group with 3 updates (#9564) #9564 ([dependabot[bot]](maintenance
  • Deps: bump the k8s-go-deps group across 1 directory with 6 updates (#9563) #9563 ([dependabot[bot]](maintenance
  • Deps-dev: bump browserslist from 4.28.6 to 4.28.8 in /website (#9566) #9566 ([dependabot[bot]](maintenance
  • Deps: bump the go-deps group with 13 updates (#9578) #9578 ([dependabot[bot]](maintenance
  • Deps: bump aws-actions/configure-aws-credentials from 6.2.3 to 6.2.4 in /.github/actions/deploy-website in the action-deps group (#9577) #9577 ([dependabot[bot]](maintenance
  • Deps: bump aws-actions/configure-aws-credentials from 6.2.3 to 6.2.4 in the actions-deps group (#9576) #9576 ([dependabot[bot]](maintenance
  • Deps: bump aws-actions/configure-aws-credentials from 6.2.3 to 6.2.4 in /.github/actions/e2e/dump-logs in the action-deps group (#9575) #9575 ([dependabot[bot]](maintenance
  • Deps-dev: bump the website-deps group in /website with 3 updates (#9574) #9574 ([dependabot[bot]](maintenance
  • Deps: bump aws-actions/configure-aws-credentials from 6.2.3 to 6.2.4 in /.github/actions/e2e/upgrade-crds in the action-deps group (#9572) #9572 ([dependabot[bot]](maintenance
  • Deps-dev: bump picomatch from 4.0.3 to 4.0.7 in /website (#9579) #9579 ([dependabot[bot]](maintenance
  • Let a Resolver exclude an instance type without failing List (#9546) #9546 (Andrew Mitchell)maintenance
  • Deps: bump the go-deps group with 15 updates (#9594) #9594 ([dependabot[bot]](maintenance
  • Deps: bump the actions-deps group with 4 updates (#9593) #9593 ([dependabot[bot]](maintenance
  • Deps-dev: bump the website-deps group in /website with 2 updates (#9592) #9592 ([dependabot[bot]](maintenance
  • Add stage field to metrics (#9601) #9601 (Ryan Mistretta)maintenance
  • Deps: bump the go-deps group with 8 updates (#9615) #9615 ([dependabot[bot]](maintenance
  • Deps: bump the actions-deps group with 4 updates (#9614) #9614 ([dependabot[bot]](maintenance
  • Deps: bump aws-actions/configure-aws-credentials from 6.2.4 to 6.3.0 in /.github/actions/deploy-website in the action-deps group (#9613) #9613 ([dependabot[bot]](maintenance
  • Deps: bump aws-actions/configure-aws-credentials from 6.2.4 to 6.3.0 in /.github/actions/e2e/dump-logs in the action-deps group (#9611) #9611 ([dependabot[bot]](maintenance
  • Deps: bump aws-actions/configure-aws-credentials from 6.2.4 to 6.3.0 in /.github/actions/e2e/upgrade-crds in the action-deps group (#9610) #9610 ([dependabot[bot]](maintenance
  • Deps-dev: bump autoprefixer from 10.5.6 to 10.6.1 in /website in the website-deps group (#9612) #9612 ([dependabot[bot]](maintenance
  • Add 5 minute jitter to ec2nodeclass validation cache TTL (#9624) #9624 (Joshua Guo)maintenance
  • Push to PR cancels PRs inflight runs (#9630) #9630 (Ryan Mistretta)maintenance
  • Don't report cancelled runs to slack (#9632) #9632 (Ryan Mistretta)maintenance
  • Deps: bump the go-deps group with 14 updates (#9639) #9639 ([dependabot[bot]](maintenance
  • Deps: bump the actions-deps group with 3 updates (#9638) #9638 ([dependabot[bot]](maintenance
  • Bump sigs.k8s.io/karpenter to f73cdcbf (#9634) #9634 (Derek Frank)maintenance
  • Drop karpenter.k8s.aws/nitro-sandbox label (#9642) #9642 (Jason Deal)maintenance
  • Remove eks.amazonaws.com/nitro-sandbox resource (#9668) #9668 (Jason Deal)maintenance
  • Bump max k8s version to 1.37 (#9684) #9684 (Ryan Mistretta)maintenance
279 lines41 added35 fixed14 other189 maintenancetyped from the source notes
v1.372026-09-21minorsharesource

Kubernetes v1.37: Tracking When a PersistentVolumeClaim Was Last Used (Beta)

Kubernetes v1.37 promotes the PersistentVolumeClaimUnusedSinceTime feature gate to Beta and enables it by default. The PVC protection controller now sets an Unused condition on each PVC, with status True and reason NoPodsUsingPVC when no non-terminated pod references it. The condition's lastTransitionTime records when the PVC became idle.

platform teams Platform teams can list idle PVCs with kubectl and jq instead of cross-referencing pods and volumes with custom scripts, which helps find orphaned storage that drives cloud costs. The feature is on by default in v1.37, and the project intends to reach GA in a later release.

written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules

No itemized notes. Read the source.
v1.372026-09-15minorsharesource

Kubernetes v1.37: Pod-Level Resource Managers graduated to Beta

Kubernetes v1.37 graduates the Pod-Level Resource Managers feature to Beta, disabled by default and controlled by the PodLevelResourceManagers feature gate. The Topology Manager, CPU Manager and Memory Manager can now use pod-level resource declarations when making hardware placement decisions. The v1 PodResources gRPC service also adds top-level cpu_ids and memory fields for pod-level exclusive assignments.

platform teams Platform teams running latency-sensitive workloads can reserve exclusive NUMA-aligned CPU and memory for primary containers while placing non-Guaranteed sidecars in a pod-isolated shared pool. Teams that opt in should check monitoring and device plugins that read PodResources, since they can now query pod-level assignments without double-counting containers.

written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules

No itemized notes. Read the source.
v1.372026-09-10minorsharesource

Kubernetes v1.37: Scheduler Preemption for In-Place Pod Resize (Alpha)

Kubernetes v1.37 adds an Alpha feature behind the InPlacePodVerticalScalingSchedulerPreemption feature gate that lets the kube-scheduler preempt lower-priority Pods on the same node so that a running Pod's deferred in-place resize can be actuated. Previously a Deferred resize could remain pending indefinitely until node capacity freed up. The Kubelet delegates this preemption decision to the scheduler rather than evicting locally.

platform teams Platform teams bin-packing lower-priority batch workloads can allow higher-priority Pods to scale up in place without restarts, but must enable the gate across kube-apiserver, kube-scheduler and kubelet on v1.37 clusters. The feature is Alpha, and the new spec.podPreemptionPolicy node field lets controllers opt specific nodes out of resize preemption.

written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules

No itemized notes. Read the source.
v1.372026-09-09minorsharesource

Kubernetes v1.37: Introducing Node Lifecycle Conditions

Kubernetes v1.37 reserves five well-known Node condition types: DrainInProgress, Drained, MaintenancePlanned, MaintenanceInProgress, and GracefulNodeShutdownInProgress. It also adds an Alpha NodeLifecycleConditions feature gate, disabled by default, which the release describes as a no-op in v1.37 since no core component reads the conditions yet. Administrators or authorized controllers are responsible for setting and clearing them.

platform teams Platform teams can start publishing these conditions today from drain and maintenance automation to give dashboards, alerts and tooling a common status signal. No core controller changes behavior based on them in this release, so scheduling and eviction still rely on existing mechanisms.

written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules

No itemized notes. Read the source.
v1.372026-09-02minorsharesource

Kubernetes v1.37: Scale Workloads to Zero with HorizontalPodAutoscaler

Kubernetes v1.37 moves horizontal autoscaling to zero replicas to Beta and enables it by default. An HPA using an object or external metric can now scale a workload to zero and bring it back when the metric changes, a capability that previously required an add-on or the Alpha feature gate. The blog notes that Services do not buffer requests, so request-driven workloads need a separate buffering layer.

platform teams Platform teams can scale idle queue consumers and batch workers to zero to cut costs on expensive CPU or GPU Pods, but must accept cold-start latency and make sure the external metrics adapter is reliable. Before upgrading, control plane components must both have the feature enabled, and HPAs with minReplicas 0 need an object or external metric.

written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules

No itemized notes. Read the source.
v1.362026-05-15minorsharesource

Kubernetes v1.36: New Metric for Route Sync in the Cloud Controller Manager

Kubernetes v1.36 adds an alpha counter metric, route_controller_route_sync_total, to the Cloud Controller Manager route controller. The metric increments each time routes are synced with the cloud provider. It is intended to help operators A/B test the CloudControllerManagerWatchBasedRoutesReconciliation feature gate, introduced in v1.35, which reconciles routes only when nodes change instead of on a fixed interval.

platform teams Platform teams can compare sync counts with the feature gate on and off to measure reduced calls to the infrastructure provider API. The source expects a significant drop in sync rate in clusters where nodes change infrequently, but gives no measured figures.

written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules

No itemized notes. Read the source.
1.362026-05-07minorsharesource

Kubernetes v1.36: More Drivers, New Features, and the Next Era of DRA

The Kubernetes v1.36 blog post describes DRA changes in that release, including Prioritized list and Partitionable devices graduating, plus new alpha features such as node allocatable resources via DRA and a resource pool status request object. Device taints, binding conditions, and resource health status moved to beta. The post states that the new alpha features sit behind feature gates disabled by default.

platform teams Platform teams running GPU or other accelerator workloads can use fallback device preferences, device taints, and pool status queries for scheduling and capacity planning. Alpha features like node CPU and memory via DRA should be evaluated only in test clusters for now.

written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules

No itemized notes. Read the source.
v1.362026-05-06minorsharesource

Kubernetes v1.36: Server-Side Sharded List and Watch

Kubernetes v1.36 adds server-side sharded list and watch as an alpha feature (KEP-5866). The API server filters objects by hash range using a new shardSelector field on ListOptions, so each controller replica receives only the objects it owns. The feature requires the ShardedListAndWatch feature gate and echoes applied selectors in a shardInfo field when honored.

platform teams Platform teams running horizontally scaled controllers on very large clusters could cut per-replica deserialization, CPU and network cost, since replicas no longer receive the full event stream. Because the feature is alpha and gated, clients must fall back to client-side filtering when shardInfo is absent.

written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules

No itemized notes. Read the source.