Daniele Polencic

@danielepolencic.com

Teaching Kubernetes at @LearnKube.com

RBAC, OIDC, service accounts, IRSA, TokenReview. Kubernetes auth is usually presented as a bag of separate topics. The API server starts from a smaller question: Who is making this request?

https://res.cloudinary.com/learnk8s/image/upload/v1779716247/authentication-kubernetes-identities-thread-2026/tweet-1-opening.png

Most Kubernetes metrics tutorials stop just as the interesting part begins. They show Prometheus or Metrics Server, then skip kubelet, cAdvisor, CRI, containerd, and Linux cgroups. That's the part you need if you want to trust your dashboards.

https://res.cloudinary.com/learnk8s/image/upload/v1779111521/learnkube-metrics-twitter-thread-2026/slide-1-v1.png

Delete a Pod from a Deployment and a new one appears. The API server didn't create it. The scheduler didn't schedule it yet. A controller inside the controller manager noticed the count was wrong and created a replacement before anything else happened.

https://res.cloudinary.com/learnk8s/image/upload/v1776067746/controller-manager-explained-2026/thread-slide-1.png