OKE 1.37 load balancers are flexible now. Minimum 100, maximum 100

From Kubernetes 1.37, OKE gives every unannotated LoadBalancer Service a flexible load balancer fixed at 100 Mbps, and rejects cross-namespace TLS secrets. We find the Services it touches, set the shape once in the Helm library chart, and fit the upgrade between two support deadlines.
OCI Functions deploy from a ZIP now. Decide who owns the runtime first

Code-only OCI Functions drop the container image and hand the runtime to Oracle. In Terraform that makes the runtime update mode the first setting to decide, and the deprecation date the one to watch.
Pod Certificates are GA, and the signer is now on your startup path

Kubernetes 1.37 made Pod Certificates and Cluster Trust Bundles stable, but core ships no signer, and the one you install decides whether your pods start at all.
Nodes can finally say they are leaving on purpose

Kubernetes 1.37 adds five node lifecycle conditions, so a node can finally state that it is leaving on purpose. What the conditions mean, the alerting they make possible, and the three limits to check before you plan around them.