live wire
▸PLATFORM · Clang 23 bytecode interpreter cuts allocations and expands constant-expression supportRed Hat Developer▸PLATFORM · RHEL becomes first-party on OCI; OpenShift subscriptions reach Oracle MarketplaceRed Hat▸AI · vLLM-Omni merges native MOSS-Image serving with parallelism and offloadvLLM▸AI · vLLM adds System One endpoint for Decision 3.0 multimodal routing models (Oct. 15)vLLM▸SECURITY · Red Hat rates OpenShift AI 3.4.5 update Critical; advisory lists hundreds of CVEsRed Hat Product Security▸SECURITY · Red Hat’s first Security Signals report shifts focus from CVE counts to risk paths (Oct. 15)Red Hat▸PLATFORM · IBM adds non-destructive FlexVolume-to-CSI migration tool for OpenShift object storageIBM Cloud▸vLLM tests agent-built Kimi K3 decode path at up to 1.9× speedup; PR remains openvLLM▸AI · LeaderWorkerSet 1.0 changes rollout defaults for disaggregated AI workloadsKubernetes SIGs▸SECURITY · Red Hat flags active exploitation of kernel flaw affecting OpenShift CoreOS; no fix listedRed Hat Product Security▸AI · Red Hat sets Dec. 9 showcase for AI 3.6 agent governance and model servicesRed Hat▸vLLM 0.32.0 drops Python 3.10, restricts CORS defaults and adds security fixesvLLM▸SECURITY · Red Hat tracks Moderate Hono auth bypass across OpenShift AI, Dev Spaces and AnsibleRed Hat Product Security▸SECURITY · Red Hat Hardened Images fixes Moderate libpng denial-of-service flawRed Hat▸PLATFORM · Clang 23 bytecode interpreter cuts allocations and expands constant-expression supportRed Hat Developer▸PLATFORM · RHEL becomes first-party on OCI; OpenShift subscriptions reach Oracle MarketplaceRed Hat▸AI · vLLM-Omni merges native MOSS-Image serving with parallelism and offloadvLLM▸AI · vLLM adds System One endpoint for Decision 3.0 multimodal routing models (Oct. 15)vLLM▸SECURITY · Red Hat rates OpenShift AI 3.4.5 update Critical; advisory lists hundreds of CVEsRed Hat Product Security▸SECURITY · Red Hat’s first Security Signals report shifts focus from CVE counts to risk paths (Oct. 15)Red Hat▸PLATFORM · IBM adds non-destructive FlexVolume-to-CSI migration tool for OpenShift object storageIBM Cloud▸vLLM tests agent-built Kimi K3 decode path at up to 1.9× speedup; PR remains openvLLM▸AI · LeaderWorkerSet 1.0 changes rollout defaults for disaggregated AI workloadsKubernetes SIGs▸SECURITY · Red Hat flags active exploitation of kernel flaw affecting OpenShift CoreOS; no fix listedRed Hat Product Security▸AI · Red Hat sets Dec. 9 showcase for AI 3.6 agent governance and model servicesRed Hat▸vLLM 0.32.0 drops Python 3.10, restricts CORS defaults and adds security fixesvLLM▸SECURITY · Red Hat tracks Moderate Hono auth bypass across OpenShift AI, Dev Spaces and AnsibleRed Hat Product Security▸SECURITY · Red Hat Hardened Images fixes Moderate libpng denial-of-service flawRed Hat
upstreambeat.ai
analysisPLATFORM

OpenShift tests show where etcd sharding helps hosted control planes—and where it does not

A two-shard tech-preview configuration sharply reduced slow applies during event storms, but added memory cost and regressed under one quota-pressure workload.

Chart of sharded vs single etcd performance, showing gains, memory cost, and one regression.
Chart: figures from the story
By The News Desk· Oct 13, 2026the quick take — two AI hosts go live when you do

Red Hat's first published test results for etcd sharding in OpenShift hosted control planes show a substantial resilience gain under event-heavy workloads, alongside a memory tax and one unresolved regression. The feature is a technology preview in OpenShift 4.21 and splits resources by kind across multiple etcd instances.

The test compared the standard single-etcd topology with two shards: a main shard for cluster state and a dedicated shard for Events. Both arms ran on identical AWS infrastructure with HyperShift-managed control planes. Red Hat ran three samples per arm for each of four kube-burner workloads.

Event isolation produced the clearest win

During a synthetic storm of 200,000 Event objects, the main shard recorded a 96% reduction in slow applies: a mean of 11.5 versus 281 in the standard arm. The Events shard recorded none. Mean compaction on the main shard fell from 1.06 seconds to 597 milliseconds, while the two shards together completed 60% more WAL fsync operations and 90% more backend commits.

A second workload using 2,000 crashlooping pods produced a more realistic mix of event creates and updates. There, 99th-percentile backend commit latency on the main shard improved by about 24% and mean compaction time fell from 17.6 seconds to 5.64 seconds. Pod-ready latency and workload completion remained comparable between the two topologies.

Annotation churn also improved compaction by roughly 40% without introducing slow operations. These results support the design premise: short-lived diagnostic Events stop competing with durable cluster state for the same write-ahead log and compaction work.

The costs are not theoretical

Two etcd processes used materially more memory. Depending on the workload, combined container memory was about 1.8 to 2.3 times the single-instance result. Red Hat could not explain that increase from database-size metrics and cautioned that it should be treated as capacity-planning input.

The sharded topology also lost under the database-quota-pressure workload, which put about 3.5GB of large custom resources almost entirely on the main shard. Mean compaction took 2.50 minutes, 51.5% longer than the standard arm, and compaction growth was 85.4% higher. The article describes memory pressure as a working hypothesis, not a demonstrated cause.

What platform teams should do

The results justify testing the preview for hosted control planes exposed to event storms, build-farm churn or noisy controllers. They do not justify enabling it from headline percentages alone. The published numbers come from three runs per arm and display one representative run; Red Hat explicitly says they are not capacity guidance.

Evaluations should reproduce the open kube-burner workloads against the target hardware, measure combined etcd memory, and include large custom-resource tests. Event-shard quota exhaustion and more complex shard layouts remain on Red Hat's test list.

Filed by The News Desk. Corrections: desk@upstreambeat.ai · Our standards →

comments · 0

    Comments are moderated before they appear. Your email is used once to confirm it is you — never shown, never sold. Corrections and questions get an answer from the desk when we have one.