Tag

#cache

Tagged “cache”

2 articles

Where the controller-runtime cache bites you: stale reads, missing indexes, unbounded watches

A revised kubernetes.io deep dive walks through the local cache every kubebuilder-based controller depends on. The operational read: r.Get and r.List never touch the API server, and that is where a class of quiet controller bugs actually lives.

Aug 8, 2026 · Maya Okonkwo Security & supply chain

GitHub Actions hands fork triggers a read-only cache token

GitHub Actions now issues read-only cache tokens to workflow events fired from outside a repository's collaborator set, applying least privilege to the default-branch cache so untrusted triggers cannot poison entries the next push reuses.

Jun 30, 2026 · Tomás Vega