This project provides a RESTful API interface over the Bitwarden Rust SDK to enable the External Secrets Operator to fetch vault secrets securely ➤ https://ku.bz/t-WF03pc3

🗣️ Tim Miller CEO and Co-founder at Kusari challenges the common belief that minimal container images automatically mean better security Watch: https://ku.bz/-2Sqn9Jb9

This article explains how a Security Context in Kubernetes works ➜ https://ku.bz/jgGTq6n99

Project Quay runs as a service inside or outside Kubernetes, storing images in S3 or local storage It scans images for vulnerabilities with Clair, supports image signing, and enforces repository access and security policies via webhooks and RBAC ➤ https://ku.bz/mXXL2JPl4

Kviklet provides a secure, self-hosted tool for engineering teams to request, review, and approve production database queries with a workflow inspired by code reviews ➜ https://ku.bz/blQ6ybFXN

This case study explains how BioCatch migrated their Vault environment from costly external storage to Raft, enabling high availability, easy disaster recovery, and lower operational costs in Kubernetes ➜ https://ku.bz/zPwwpmMyV

This week on the Learn Kubernetes Weekly: ⚙️ gRPC with ALB and Traefik 🧭 Prevent Failures with Topology Spread 📜 Demystifying Kubernetes YAML 🔗 Shared Socket with eBPF 🌐 Kubernetes Networking Guide ⭐️ Testkube Read it now: https://kube.today/issues/157

This open-source tool lets you analyze connectivity, inspect applied NetworkPolicies, and generate policy YAMLs, all with an interactive fuzzy-finder UI and JSON/table outputs ➜ https://ku.bz/HJpY-dbmG

🗣️ Festus walks through his project of building a lightweight version of Kubernetes from scratch in Go https://ku.bz/pf5kK9lQF 🌟 StormForge 🎙 🎙Bart

🤖 Nirmata brings policy-as-code to Booth 1340 at KubeCon Atlanta! See Kyverno demos + their new AI platform engineering agent Grab swag, enter raffles for Ray-Bans, and don't miss the first in-person KyvernoCon on Nov 10 https://ku.bz/NcwTKq1jh

This week on the Learn Kubernetes Weekly: 🔥 AI Infrastructure on K8s 🏠 HA Databases on K8s at Airbnb ⚡ Faster Node & Pod Startup 🎯 Pod Priority and Preemption ⚖️ Cost vs Resilience in Scheduling ⭐️ Testkube Read it now: https://kube.today/issues/156

🗣️ Oleksii Kolodiazhnyi, Senior Architect at Mirantis, shares his structured approach to Kubernetes workload assessment https://ku.bz/zDThxGQsP 🌟 Stormforge 🎙 🎙Bart

🤝 What does it take to become part of the Kubernetes community? We're releasing "Kubernetes World: Finding Your Path," a book that explores the journey into cloud native, beyond certifications and code contributions Read it now: ku.bz/k8s-world

This article explains how FQDN-Controller lets Kubernetes handle egress rules using domain names instead of fixed IPs It shows how this makes DNS-based network policies simple, flexible, and automatic ➜ https://ku.bz/zy6XXtmd1

This tool automates the issuance and renewal of TLS certificates inside Kubernetes by introducing custom resources like `Certificate` and `Issuer` ➜ https://ku.bz/dcDQCrkPn

🗣️ Harsha Koushik explores the complexities of securing containers within a multi-layered infrastructure He outlines essential practices, including choosing secure base images, conducting SCAs, creating SBOMs, and validating the supply chain Full episode: https://ku.bz/n_sJ04xMY

This tutorial walks you through running kube-bench for CIS compliance on Kubernetes, how to scan clusters using Jobs or CronJobs and understand which configurations pass or fail ➜ https://ku.bz/ZjVpsVqNR

This week on the Learn Kubernetes Weekly: ✅ Scale Real-Time Video ⚠️ 7 K8s Anti-Patterns in Prod 🧠 Leases & Leader Election ⚖️ Cost & Resilience in Scheduling 🚦 Pod Priority & Preemption ⭐️ @yaml.games Read it now: https://kube.today/issues/155

SOPS: Secrets OPerationS is an operator for managing Kubernetes Secret Resources created from user-defined SopsSecrets CRDs, inspired by Bitnami SealedSecrets and sops ➜ https://ku.bz/Hmfb28_s_

🗣️ Andrew Jeffree from SafetyCulture walks through their complete migration of 250+ microservices from a fragile Helm-based setup to GitOps with ArgoCD, all without any downtime https://ku.bz/Xvyp1_Qcv 🌟 Testkube 🎙 🎙Bart

This article shows why setting `hostUsers: false` in PodSecurityPolicies or PodSecurity admission helps prevent pods from sharing host user IDs, reducing privilege risks ➜ https://ku.bz/Cy4YDVjJ4

I designed two things for KubeCon Atlanta that I'm proud of: 👾 @yaml.games: 10-min quiz rounds. Same format as our Advanced K8s workshop yaml.games 🔨 Platform Engineering Challenge: Teams of 4 build a platform in 90 mins ku.bz/-Rz3DBccC

This tutorial shows how to enable passwordless kubectl access to an Oracle Kubernetes Engine (OKE) cluster by using OCI Instance Principals, dynamic groups, scoped IAM policies, and the OCI CLI exec plugin ➤ https://ku.bz/ZpCQLpM4V

argocd-vault-plugin is an Argo CD plugin that retrieves secrets from Secret Management tools and injects them into Kubernetes ➤ https://ku.bz/XbpB666ql

This project builds a low-code honeypot using LLMs behind the scenes to mimic realistic interactions while staying safe It supports SSH, HTTP, TCP, Prometheus metrics, Kubernetes deployment, and YAML config ➜ https://ku.bz/5665x_NRr

Sealed Secrets provides declarative Kubernetes Secret Management in a secure way Since the Sealed Secrets are encrypted, they can be safely stored in a code repository ➜ https://ku.bz/4ZQR0-Nf9

This article explains how Kubernetes v1.33 enables hybrid post-quantum key exchange (X25519MLKEM768) by default via Go 1.24 and discusses implementation challenges ➜ https://ku.bz/DzzV1cR4z

This week on the Learn Kubernetes Weekly: 🧩 Troubleshooting Packet Drops ⚙️ Breaking and Fixing the EKS Autoscaler 🌐 Multi-Cluster Kubernetes 🐝 kube-proxy to eBPF 🚧 API Server Log Issues ⭐️ Heroku Read it now: https://kube.today/issues/154

The kube-rbac-proxy is an HTTP proxy for a single upstream, that can perform RBAC authorization against the Kubernetes API using `SubjectAccessReview` ➜ https://ku.bz/pQqpkgLM7

Mai Nishitani, Director of Enterprise Architecture at NTT Data demonstrates how Model Context Protocol (MCP) enables Claude to directly interact with Kubernetes clusters through natural language commands https://ku.bz/3hWvQjXxp 🌟 Testkube 🎙 🎙Bart

This case study describes how the author’s EKS cluster autoscaler broke after migrating to Amazon’s AL2023 image and how they resolved it by switching to IRSA (IAM Roles for Service Accounts) and adjusting permissions ➜ https://ku.bz/PzHb6bP62

The Making of Flux Ep 4: The Platform Builders 🏗️ GitLab, Microsoft & Mirantis reveal why they're embedding Flux into their platforms, from Azure Arc's managed service to Cordant's multi-cluster vision https://ku.bz/tVqKwNYQH 🌟 ControlPlane 🎙 🎙Bart

This tutorial explains Kubernetes authentication (“who you are”) and authorization (“what you can do”) workflows It shows how to issue user certificates, create a CertificateSigningRequest, approve it, and bind RBAC roles ➤ https://ku.bz/mN0GKSR_c

Blixt is an early-stage, sandbox-only Layer 4 load balancer project written in Rust It integrates eBPF via Aya and manages routing logic via Kube-RS It supports Gateway API objects like TCPRoute and UDPRoute, with KIND-based local testing only ➤ https://ku.bz/1cZxMK7Ck

cnquery is a command-line tool that lets you inspect and query your cloud, Kubernetes, and servers from one place ➜ https://ku.bz/Jml2KcQ-N

KubeLinter is a static analysis tool that checks Kubernetes YAML files and Helm charts to ensure that applications adhere to best practices ➤ https://ku.bz/yCpPFTs73

This article explains the governance differences between AWS Config and Kubernetes native policy engines and their complementary roles in cloud environments ➤ https://ku.bz/ttgXTYdrZ

🗣️ Jim Bugwadia, Co-Founder & CEO @ Nirmata, explains how to transform security compliance from a boring obligation into an exciting part of engineering culture Watch: https://ku.bz/hYZXTmPV9

This article shows how to build enterprise-level secret management in an MLOps setup using tools like Sealed Secrets, Git encryption, and clear team boundaries for secure, scalable credential handling ➜ https://ku.bz/2Dlnrr0W7

kps-zeroexposure is a helm chart that fixes unhealthy or missing control-plane metrics targets in `kube-prometheus-stack` by deploying a secure Prometheus Agent as a DaemonSet ➤ https://ku.bz/jtT5DjB6h

This week on the Learn Kubernetes Weekly: 🌍 Envs vs Clusters 🧩 Image Compatibility 🔁 Terraform → Crossplane 📊 Kube-State-Metrics ⚙️ Local Dev on K8s ⭐️ Testkube Read it now: https://kube.today/issues/153

This project provides a RESTful API interface over the Bitwarden Rust SDK to enable the External Secrets Operator to fetch vault secrets securely ➜ https://ku.bz/t-WF03pc3

Project Quay runs as a service inside or outside Kubernetes, storing images in S3 or local storage It scans images for vulnerabilities with Clair, supports image signing, and enforces repository access and security policies via webhooks and RBAC ➜ https://ku.bz/mXXL2JPl4

🗣️ Niels Claeys shares how his team built a data platform processing up to 1.5 million core hours monthly and the specific optimizations they discovered: from scheduler changes to spot instance usage https://ku.bz/hGRfkzDJW 🌟 Testkube 🎙 🎙Bart

🍽️ Platform Engineering eating DevOps' lunch? We analyzed 509 Kubernetes jobs in Q3 2025: 💰 Avg salary: $177,983 (NA) / €92,113 (EU) 🏠 67% remote… but only 0.29% truly location-free Full report: https://kube.careers/state-of-kubernetes-jobs-2025-q3 ⭐️ LearnKube