OCI Functions deploy from a ZIP now. Decide who owns the runtime first

Code-only OCI Functions drop the container image and hand the runtime to Oracle. In Terraform that makes the runtime update mode the first setting to decide, and the deprecation date the one to watch.
Pod Certificates are GA, and the signer is now on your startup path

Kubernetes 1.37 made Pod Certificates and Cluster Trust Bundles stable, but core ships no signer, and the one you install decides whether your pods start at all.
Nodes can finally say they are leaving on purpose

Kubernetes 1.37 adds five node lifecycle conditions, so a node can finally state that it is leaving on purpose. What the conditions mean, the alerting they make possible, and the three limits to check before you plan around them.