Project
Open-source container orchestration platform that automates deployment, scaling, and management of containerized applications across clusters of machines.
Mercari keeps one idle replica of every Elasticsearch shard on a PVC, so scale-out no longer waits on a shard copy that took 10 minutes or more. That let the team raise an HPA CPU threshold held near 65%. Raising it exposed an HPA tolerance problem.
Reality
Cilium committers deprecated SPIRE-based Mutual Authentication as of v1.20 and will most likely remove it in v1.21, per the project's deprecation issue. Anyone who adopted it has to plan a move to ztunnel, the feature that replaces it.
Reality
Operators of a European automaker's internal Kubernetes platform say a stale informer-cache read can overwrite a status condition set 49ms earlier. Their fix reads the object straight from the API server on every status update.
Reality
DepthFirst published a working Ubuntu 26.04 exploit for CVE-2026-80521 on 2026-09-22, before distribution kernels carried a fix, according to a dev.to post. The flaw sits in AF_UNIX, which default Docker and Kubernetes seccomp profiles permit.
Reality
In a post on aminrj.com, an OWASP working-group member says CVEs fit only two of six places where AI agent and MCP flaws live. Over-broad permissions, shared service accounts and confused-deputy designs sit in the other four, where a scanner has nothing to flag.
Reality
NVIDIA's DCGM exporter gives every pod sharing a GPU the same reading, so three pods sum to 300% of one card, The New Stack reports. Platform teams sharing GPUs must build their own per-pod metrics and cost-split rules.
Reality
Akuity added Fleet Management to Kargo Enterprise in private beta, to promote one change across hundreds of Kubernetes clusters. Teams set rollout order and a failure threshold once, and a rollout halts only when failures pass it.
Reality
Kubernetes v1.35 sets failCgroupV1 to true by default, so the kubelet will not start on a node still running cgroup v1. Teams below v1.35 now decide before upgrading between migrating every Linux node and carrying a temporary override the project plans to remove.
Reality
Kubernetes' project blog says NVMe-backed node swap, generally available since v1.34, packed up to 3x more pods onto memory-bound nodes in benchmarks. The gain comes from paging out memory that agent sandboxes hold idle between prompts, so swap-based budgets depend on how much of each pod is truly dormant.
Reality
KEDA merged fix #8226 so its Metrics Server reports NotReady when its gRPC link to the keda-operator is down. Before the change, the pod could stay Ready while the HPA behind it stopped getting any scale signal.
Reality
CircleCI made Machine Runner Orchestrator 1.0.0 generally available, scaling self-hosted CPU, GPU and ARM runner VMs with CI demand at no additional cost. Preview users cannot upgrade in place and have to uninstall the old deployment before installing the new package.
Reality
Linux Foundation Europe's Thierry Carrez said at the Open Source Summit in Prague that switching to open source alone will not end Europe's dependence. European groups supply 15% of governance participation, The Stack reported, so teams that switch adopt projects governed mostly from outside Europe.
Reality
Google has moved its Docsy documentation theme to the Linux Foundation and added experimental features that serve pages to AI agents. For teams on the theme, feeding docs to agents is now a setting, so the work moves to keeping the pages agents act on current.
Reality
Microsoft Research Asia open-sourced Agent Lightning v1.0, a 3,500-line framework whose recipe lifted a 9B model's SWE-bench Verified score by 14.6 points. It runs reinforcement learning on the agent a team already deploys, sitting as a proxy between that agent and its model.
Reality
Mercari's DBRE team overrides its TiDB autoscaling rules by time of day and campaign, and a cluster with a 50% CPU target now averages 44%. Extending the same controller to TiKV storage meant designing around a TiDB Cloud lock that refuses a second scale operation while one is running.
Reality
Kubernetes creators Craig McLuckie and Joe Beda's startup Stacklok is building Mecatl, a coding-agent harness designed to run in the cloud. It pulls tool calls, session state and memory out of the agent loop so each can be put into systems an operator can manage.
Reality
CNCF's oversight committee voted Meshery, a Kubernetes management plane with over 7,000 contributors, into incubation. For platform teams eyeing one plane for every mesh, the vote adds foundation oversight, though the evidence measures contributors more than production use.
Reality
Google's Docsy theme, on about 2,200 projects by the end of 2024, is moving to the Linux Foundation while it adds output built for AI agents. Teams on the theme now decide, site by site, whether their docs also get published for machine readers.
Reality
Kubernetes 1.34 loses upstream patches on October 27, but AKS stops patching it on November 30 and EKS starts billing it at six times the rate on December 2. Teams need an upgrade plan for each provider, because the managed dates decide what a 1.34 cluster costs and whether it still gets fixes.
Reality
agentgateway v1.6.0 priced a Claude Sonnet 5 request at $0.000156 from its built-in catalog, with no hand-kept modelCatalog in the config. The test covered one Anthropic model, so retiring rate tables is safe only for models the catalog provably knows.
Reality
Security · October 2, 2026 · Confirmed3 publishers
Invest · September 29, 2026 · Confirmed2 publishers
Product · September 30, 2026 · Confirmed3 publishers
Build · September 30, 2026 · Confirmed2 publishers
Build · September 28, 2026 · One report1 publisher
Security · September 23, 2026 · Confirmed2 publishers