Chilling by Lake Balaton with great coffee (at The Rusty Box), while working on some new iximiuz Labs content.

🎉 Today's the day! 🎉 Come see myself and @sagikazarmark.com chatting about our experience with the oddities in Kubernetes that we've experienced over our careers. This is going to be a fun one! 11:45am Hall 7 - Room A kccnceu2026.sched.com/event/2CW2p/...

🚨 KUBERNETES THE VERY HARD WAY IS COMPLETE! The complete course is now available on iximiuz Labs: labs.iximiuz.com/courses/kub... If you want to learn how Kubernetes works under the hood, this course is for you.

Kubernetes networking is complex. But that doesn't mean it's impossible to understand. Break it down into smaller pieces and you'll see how it all connects. The next lesson of Kubernetes the Very Hard Way discusses this topic: labs.iximiuz.com/courses/kub... #Kubernetes

KubeCon is in less than two weeks. If this is your first time, I gathered a few thoughts on how to navigate the conference without getting completely lost (or tired) on day one: sagikazarmark.com/blog/posts/... #kubecon

When did installing prebuilt binaries using npm become the standard?

TLS bootstrapping is how worker nodes securely join a Kubernetes cluster without manually distributing certificates. The next lesson in "Kubernetes the Very Hard Way" covers the entire process of forming a functional cluster from control plane and worker components. labs.iximiuz.com/courses/kub...

You've got a control plane and a worker node. Now what? The next lesson in "Kubernetes the Very Hard Way" walks through joining a worker node to the cluster, including TLS bootstrapping and certificate management. Available on iximiuz Labs: labs.iximiuz.com/courses/kub...

The final control plane lesson in Kubernetes the Very Hard Way, introducing kube-controller-manager, is out: labs.iximiuz.com/courses/kub... Next stop: assembling a functional cluster!

Ever wondered how Kubernetes decides which node runs your pod? The next lesson in "Kubernetes the Very Hard Way" covers kube-scheduler, the component that handles pod placement decisions. Available on iximiuz Labs: labs.iximiuz.com/courses/kub...

Pods don't just randomly land on nodes. kube-scheduler evaluates every placement based on resource availability, constraints, and policies. The next lesson in "Kubernetes the Very Hard Way" breaks down how kube-scheduler operates under the hood. labs.iximiuz.com/courses/kub...

Have you ever used curl to interact with the Kubernetes API or observed what is stored in etcd after executing kubectl apply? The next lesson in Kubernetes the Very Hard Way explores how kube-apiserver integrates into Kubernetes and operates under the hood: labs.iximiuz.com/courses/kub...

If you've followed along with Kubernetes the Very Hard Way, it was worth it, because now the real fun begins: By adding kube-apiserver to the mix, you can learn how the component you interact with daily works under the hood. labs.iximiuz.com/courses/kub...

etcd is a highly available, strongly consistent key-value store that supports Kubernetes by storing all its state. The next lesson in "Kubernetes the Very Hard Way," discussing etcd, is available on iximiuz Labs: labs.iximiuz.com/courses/kub...

After discussing the worker node components, it's time to move on to the control plane. The next lesson in "Kubernetes the Very Hard Way" begins with a discussion on the control plane components, starting with etcd. labs.iximiuz.com/courses/kub...

Did you know you can run pods on a Kubernetes node without a control plane? Or that you can communicate directly with the kubelet via its API? Check out my "Kubernetes the Very Hard Way" course's next lesson that provides an in-depth view of kubelet: labs.iximiuz.com/courses/kub... #Kubernetes

Kubelet is the "hands and feet" of Kubernetes: it's the component sitting on every node making desired state a reality. The next lesson of "Kubernetes the Very Hard Way" provides an in-depth view of kubelet. Available on iximiuz Labs: labs.iximiuz.com/courses/kub... #Kubernetes

Containerd is the default container runtime for Kubernetes. However, we seldom interact with containerd directly or fully understand the components involved in effectively managing containers.

PagerDuty calls: your app hosted on Kubernetes is not available. What's the first thing you do / command you run? #Kubernetes

Ever wanted to peek under the hood of Kubernetes and discover what makes it tick? Now you can. After months of effort, my new course, "Kubernetes the Very Hard Way," is live on iximiuz Labs: labs.iximiuz.com/courses/kub....

Built a product in 2 days with AI. I'm a backend dev who avoids frontend. But I had a problem to solve, so I let Claude Code take the wheel. Result: talkpulse.app - simple audience feedback for speakers The honest truth: AI is amazing at writing code. Less amazing at not creating a mess.

I've spent the last two days coding exclusively with Claude Code. In the end, I haven't even looked at the code, just accepted it if it worked. I'm looking at the code now and trying to make manual changes: it's not complete crap, but it's close to it.

Sessionize says I've been an active speaker last year.

Well this is freaking exciting! 😁 I’ll be speaking at #KubeConCloudNativeCon for the first time next year! 🎉 Myself and @sagikazarmark.com are going to be telling you all about the oddities in Kubernetes! 😎 This is going to be a fun one! kccnceu2026.sched.com/event/2CW2p/... #KubeCon #KubeConEU

Iximiuz Labs subscription is now on sale with a 70% discount. It's essentially the price of a coffee per month. If you're looking to enhance your skills in containers or networking, you won't find a better investment than this.

@gitea.com is an excellent open-source alternative to GitHub if you need to self-host your Git repositories. For me, it's the ideal solution for demonstrations since it's just a single binary. Give it a try: labs.iximiuz.com/playgrounds... #git #opensource #iximiuz

Did you know that pods can become "invisible"? Test your Kubernetes knowledge by finding an invisible pod in this challenge: labs.iximiuz.com/challenges/.... No hints, no solutions. Prepare for a tough one. Thanks to the fantastic @averagemarcus.bsky.social for this gem. #kubernetes #iximiuz

These past couple days I've been working on a new side project: github.com/sagikazarma... It allows running slash commands from GitHub issues and pull requests. Feedback welcome! :)

I've been using devenv.sh in my Flake envs for a while (proof: github.com/search?q=ow...**%2Fflake.nix+devenv&type=code), but I initially avoided their CLI. However, I've realized that I don't use the advantages of Flakes, and their CLI offers a much better experience.

I've just deleted about 5,000 GitHub email notifications that piled up over the last two months. That's over 500 emails a week, more than 50 a day. Admittedly, not all demand my attention, but just sifting through them takes considerable time.

Git is central to modern software and platform engineering, making it and its ecosystem accessible to everyone is crucial. I’m glad to see GitHub alternatives like @gitea.com, as they help democratize the ecosystem. Try it out here: labs.iximiuz.com/playgrounds... #opensource #git #iximiuz

Played around with @golang iterators today: github.com/sagikazarma... I'm still undecided about how I feel about them. I like the concept, but I'm concerned it might hurt readability more than it helps. I'm also a bit disappointed to see how iterators are so much more powerful in other languages.

Testing mutating and validating admission policies can be challenging, especially when dealing with complex policies. Here's an online tool that can help: playcel.undistro.io/ #kubernetes

Kubernetes 1.34 brings Mutating Admission Policy to beta! To celebrate the occasion, I wrote a comprehensive tutorial on admission control: labs.iximiuz.com/tutorials/k... Check it out if you're interested in a deep dive into Kubernetes admission control. #kubernetes #iximiuz

Kubernetes 1.34 has just been released! If you're eager to explore the new features, my Kubernetes the Hard Way playground is already upgraded: labs.iximiuz.com/playgrounds... #kubernetes #iximiuz

Container runtime, OCI runtime, runtime handler, RuntimeClass What exactly do all these terms mean, and how are they connected? Dive into this tutorial to unravel the complexity of runtimes: labs.iximiuz.com/tutorials/k... #kubernetes #iximiuz

Mutating admission policies will graduate to beta in a few weeks: github.com/orgs/kubern... If you find mutating admission webhooks challenging, even for simple mutations, this will be a game changer for you. #kubernetes

Ever wanted to try Kelsey Hightower's "Kubernetes the Hard Way" tutorial but didn’t know where to begin? Explore this playground on iximiuz Labs, where you can experiment with a manually assembled cluster: labs.iximiuz.com/playgrounds.... #kubernetes #iximiuz

Another great Kubernetes tool I found recently: kaniuse.gerome.dev/ It allows you to track which features are in which stage and in which Kubernetes version. As a content author, I especially appreciate the historical information. #kubernetes

Although some ingress controllers can be set to use Service ClusterIP or NodePort, most resolve endpoints and route traffic directly to pods. This approach grants the ingress gateway greater control over traffic routing and enables advanced features. #kubernetes #kubequiz

I just found kubespec.dev/ and I love it! It's a great way to quickly look up the syntax for Kubernetes objects.

I needed a quick and dirty way to demonstrate Kubernetes admission webhooks: github.com/sagikazarma... #kubernetes #caddy

How well do you know your ingress controller? Is this how it works? If yes, why? If not, why not? #kubernetes #kubequiz

Kubernetes supports, in addition to admission webhooks: - Conversion webhooks for Custom Resources - Authorization webhooks to delegate authorization decisions to an external service #kubernetes #kubequiz

Admission webhooks are by far the most common webhooks that Kubernetes supports, but they are not the only ones. Can you guess what other types of webhooks it supports? #kubernetes #kubequiz

Although it's still HTTP-based, the Container Runtime Interface (CRI) uses gRPC as its communication protocol. #kubernetes #kubequiz

Ever wondered what happens behind the scenes when you run a kubectl command? Explore this playground to experiment with the kube-apiserver in isolation, without any of the controllers: labs.iximiuz.com/playgrounds... #kubernetes #iximiuz

Kubernetes has a lot of moving parts. Can you spot the misbehaving one? #kubernetes #kubequiz

During request processing in the Kubernetes API server, schema validation occurs before the validating admission controllers are called. #kubernetes #kubequiz

Can you identify what's wrong with this image? #kubernetes #kubequiz Bonus: What would you add to this diagram?