SIG Autoscaling Bi-Weekly Karpenter Working Group for 20250505

SIG Autoscaling Bi-Weekly Karpenter Working Group for 20250505

Source: YouTube · Kubernetes · published May 5, 2025 · 46:25

Cloud Security
No ratings yet Log in to rate
Transcript Available
Description

The meeting reviews AWS Carpenter issues and PRs, focusing on bug fixes, configuration improvements, and feature discussions. Key issues include garbage collection failures, node claim errors, dynamic volume sizing, and node cleanup problems. Decisions are made to investigate, assign, or defer actions based on feasibility and impact.

Key Takeaways:
• Garbage collection fails with high threshold in cubic config; needs investigation 1:30
• Node claim errors due to invalid domain "kubernetes.io" in 1.3.2 and 1.4.0; requires more deployment details 2:52
• Dynamic EBS volume sizing based on CPU count proposed; hesitant due to custom logic risks; recommends RFC for full use case 7:13
• Carpenter fails to delete empty nodes after pod removal; issue assigned for review due to production impact 20:22
• Drift and emptiness handling in node consolidation needs reordering; PR open to fix evaluation flow 17:54

Carpenter team will prioritize investigation and RFCs for critical issues, while deferring or closing less impactful items.

Sources:

  • 1:30 Discussion on garbage collection failure and need for reproduction steps
  • 2:52 Issue with invalid node claim domain and cluster configuration
  • 7:13 Proposal and hesitation around dynamic volume sizing
  • 20:22 Problem with empty node cleanup in production clusters
  • 17:54 Change to reorder drift and emptiness evaluation in node consolidation logic

Generate CPE Credits

Generate a professional CPE document from this video's transcript.

Estimated credit: 1 CPE hours

Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.

Topic: Cloud Security. Commonly maps to: Security Architecture and Engineering, Communication and Network Security. Exact CISSP domains are assigned during generation.

CISSP Domain Mapping
Learning Objectives
Self-Assessment Questions
PDF Export Ready

Free account. One generation at a time, with a daily limit.

CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.

Watch on YouTube

Transcript Preview

First 800 characters of the transcript

Okay, great. Yeah, like I said, this is uh May 5th's uh carpenter provider AWS triage meeting. We're going to go ahead and look through some issues and also PRs as well. figure it makes sense to start with the oldest. This one bottle rocket image garbage collection high threshold percent. We've observed certain configurations do appear in cubic config. What we also see is that the initial garbage collection always fails with image garbage collection failed once. Expected behavior is either passing user data is honored or some way for our defined volume to be evaluated. Included reproduction steps Okay. So, I think it just needs an investigation if they've included reproduction steps and also a help wanted label. Seems could work. Yeah. I mean, it seems like they're just saying it flat out …