This week on the Learn Kubernetes Weekly: ⚖️ Avoiding System Failures with KEDA 🔐 Why DevOps should Sec 🌐 Optimizing Pod IP Allocation in EKS 🎮 GPU Starvation with Dynamic MIG 🔄 F5 NGINX Gateway Fabric Migration ⭐️ LearnKube Read it now: https://kube.today/issues/167

This tool continuously checks Kubernetes control plane signals like: - API availability, - leader election, - and controller health to detect early signs of cluster instability ➜ https://ku.bz/RLZsfDNbY

🗣️ John McBride, VP of Infrastructure and AI Engineering at The Linux Foundation, explains why Kubernetes is the ideal platform for deploying VLLM to run AI inference workloads at scale Watch: https://ku.bz/wP6bTlrFs

🗣️ Udi Hofesh explains how Komodor transformed their AI from simple assistant to autonomous cloud-native operations platform, focusing on contextual AI vs generic solutions Watch: https://ku.bz/kXz85_4CG Read: https://ku.bz/mYTj4l5HD

Shipwright Build is an open-source tool that builds container images inside Kubernetes using different build engines like Kaniko or Buildpacks ➤ https://ku.bz/g7TyQ46YX

This article shows how to reduce AKS NAT Gateway costs by redirecting Microsoft Container Registry pulls through Azure Container Registry using Kyverno policies ➜ https://ku.bz/jYCnT_TPy

🗣️ John Howard, Senior Software Engineer at Solo.io, explains what Mutual TLS (mTLS) is and its importance in Kubernetes environments Watch the full episode: https://ku.bz/sk-ZF1PG9

This case study explains how the team at Beekeeper by LumApps adopted Karpenter on their Amazon EKS clusters It shares real-world lessons around AMI drift, node disruption budgets and scaling flexibility ➤ https://ku.bz/yBdKD19V8

This article introduces ChaosRoom, a playful tool that helps engineers learn chaos engineering by running mini-games simulating faults and observing how systems respond ➤ https://ku.bz/2GlrYmTbT

E2E Framework is a Go framework for end-to-end testing of components running in Kubernetes clusters The primary goal is to use the native Go testing API to define end-to-end test suites that can be used to test Kubernetes components ➤ https://ku.bz/lsG7QTxpJ

This article explains how to prevent system failures caused by imbalanced scaling in Kubernetes using KEDA with proper trigger configurations and scaling strategies ➜ https://ku.bz/BYr3WgBhp

Kubernetes Resource Recommender is a CLI tool for optimizing resource allocation in Kubernetes clusters It gathers pod usage data from Prometheus and recommends requests and limits for CPU and memory This reduces costs and improves performance ➤ https://ku.bz/Mrsjt9m77

Tofu Controller is a controller for Flux to reconcile OpenTofu and Terraform resources in the GitOps way It allows you to GitOps-ify infrastructure and application resources in the Kubernetes and IAC universe at your own pace ➜ https://ku.bz/r9v4nDrkC

This article shares how the author moved workloads off the big managed Kubernetes clouds and onto cheaper VM providers like Hetzner, using a lighter control-plane setup ➤ https://ku.bz/mBlnW0Lhj

🗣️ A production networking issue in Cilium remained undetected for 8 months when CIDR allocations overlapped with Azure Firewall subnets with Isala Piyarisi Watch: https://ku.bz/kJjXQlmTw

This tutorial walks you through how to mimic S3-like object storage inside Kubernetes and automate static website deployments using that storage, letting you host static sites without relying on external S3 ➤ https://ku.bz/7RBFXxG0j

This tool acts as a proxy for Prometheus that tracks query costs and provides analytics on expensive queries to help optimize observability resource usage ➜ https://ku.bz/LZQlNcqZ7

This tutorial teaches how to build a fully self-hosted RAG system with embeddings and vector search on Kubernetes using open-source tools like Weaviate and local LLMs ➜ https://ku.bz/xg9lMF0ss

🗣️ Yue Yin discusses how her team enhanced the Kubernetes scheduler before developing Gödel Watch: https://ku.bz/lMpNng_33

This week on the Learn Kubernetes Weekly: 🚀 Moving 2M RPM WebSocket Service to EKS 🔒 Attacker Persistence in Kubernetes 📊 Standardizing CRD Metrics ⚡ Scaling Dagster on Kubernetes 🌐 Envoy AI Gateway ⭐️ LearnKube Read it now: https://kube.today/issues/166

Sealos is a production-ready Kubernetes distribution that includes instant cloud workspaces, a development pipeline and continuous delivery ➜ https://ku.bz/Svc3BYhpP

Setting up Prometheus and Grafana alone creates an incomplete observability solution, explains Artem Lajko Watch now: https://ku.bz/9sGxhmm8s

🗣️ Dilshan discusses a real incident where migrating EKS nodes to AL2023 caused the cluster autoscaler to lose AWS permissions silently https://ku.bz/T_YPfTfDb 🌟 LearnKube 🎙 🎙Bart

JuiceFS is a high-performance POSIX file system designed for the cloud-native environment The data is persisted in object storage (e.g. AWS S3), and the corresponding metadata can be persisted in various database engines such as Redis, MySQL, and TiKV ➜ https://ku.bz/dl4-wxwvP

Kubetail is a bash script that enables you to aggregate (tail/follow) logs from multiple pods into one stream This is equivalent to running `kubectl logs -f`, but for multiple pods ➤ https://ku.bz/H7wWyTLwv

This article discusses scaling Dagster to 50+ code locations on Kubernetes and covers architectural considerations for resource isolation, deployment strategies, and managing large-scale data pipeline orchestration ➜ https://ku.bz/-Kgs1qSF0

83% of Kubernetes teams use network policies. 60% struggle to understand what they're actually doing I surveyed 530 practitioners and here is what I found: https://kube.today/kubernetes-network-policies-2025

This article explains that with Kubernetes v1.34, Dynamic Resource Allocation (DRA) adds consumable capacity, which lets devices share things like GPU memory or bandwidth in smaller, flexible chunks instead of giving everything to one pod ➤ https://ku.bz/w0LjJtHPQ

Kine is an etcdshim that translates etcd API to SQLite, Postgres, Mysql, and dqlite ➤ https://ku.bz/XdlgdBQmp

Kargo is a continuous delivery and application lifecycle orchestration platform for Kubernetes It builds upon GitOps principles and integrates with Argo CD to streamline and automate the progressive rollout of changes across an application's lifecycle ➜ https://ku.bz/r4xwJqyRw

This article explains how to run AI/ML and large-language-model inference in production by using MLflow for experiment tracking/versioning, KServe for model serving, and vLLM for LLM inference on a Kubernetes cluster ➤ https://ku.bz/0YrLFC47h

zot is a production-ready vendor-neutral OCI image registry - images stored in OCI image format, distribution specification on-the-wire ➜ https://ku.bz/fwXd6-TN9

🗣️ Stephan Schwarz shares how he was thrust into performance testing Kubernetes workloads and emphasizes defining what performance means before diving into testing Watch the full episode: https://ku.bz/yY-FnmGfH

Coroot is an open-source eBPF-based observability tool that turns telemetry data into actionable insights, helping you quickly identify and resolve application issues ➤ https://ku.bz/c1H0D354D

This article explains the lack of standard Prometheus metrics for CRD status conditions in Kubernetes operators and introduces a small Go library that turns CRD `status.conditions` into Prometheus metrics ➜ https://ku.bz/dHtWH5qx3

🗣️ Andrew Hillier, Co-founder CTO @ Densify, discusses three key Kubernetes technologies reshaping resource optimization: in-place resizing, AI-driven optimization, and Karpenter for consolidation benefits Watch the full interview: https://ku.bz/-0wmZX03V

Kide is an observability platform that ingests and indexes logs and metrics in real time so you can search, analyze, and alert on cluster and application data without waiting ➜ https://ku.bz/zpsL842PB

This week on the Learn Kubernetes Weekly: 🔥 GPU Containers as a Service 🚀 Nginx to Envoy: Rate Limiting 🤖 Multi-Agent Systems on K8s 🔒 K8s Security: Networking 🐛 Pinterest's K8s Migration Debug ⭐️ LearnKube Read it now: https://kube.today/issues/165

This article explains how to build a multi-tenant Kubernetes platform for GPU workloads using Kata Containers, custom CDI plugins, and NVLink fabric isolation to run containerized GPU jobs securely in virtual machines ➜ https://ku.bz/gvmky__4m

🗣️ Stefan Roman discusses building Labs4Grabs, a Kubernetes learning platform that provides users with root access Watch: https://ku.bz/Xz-TrmX2F

This article explains how Kubernetes user namespaces work for container isolation and covers the security benefits of mapping container root users to unprivileged host users, thereby reducing privilege escalation risks ➜ https://ku.bz/1kmpsFXbB

This article reveals hard-earned lessons on using Kubernetes Informers in large clusters, explaining informer fundamentals, handler design pitfalls, caching, memory optimization, and workqueue best practices for scalable controller code ➤ https://ku.bz/CxjFsDzdy

This tool exposes Kubernetes cluster operations through the Model Context Protocol, allowing AI agents and tools to safely read cluster state and execute controlled actions like kubectl commands ➜ https://ku.bz/y_J4wlWXR