Just landed: Learn Kubernetes weekly 195! My top picks: 🔒 Nodes/proxy Get: One Permission Too Many 🔑 Kubernetes AuthN the Hard Way 🐛 ArgoCD ServerSideDiff Vulnerability 🛠️ Okteto Dev Platform Read it here: https://kube.today/issues/195
Daniele Polencic
@danielepolencic.com
Teaching Kubernetes at @LearnKube.com
We’ve just confirmed 3 private Kubernetes training engagements for September alone Want to level up your team’s Kubernetes and platform engineering skills? Teams: https://learnkube.com/corporate-training Individuals: https://learnkube.com/training
Just landed: Learn Kubernetes weekly 194! My top picks: 🎮 Game Servers with Agones 🤝 Multi-Agent A2A on EKS ✍️ Docker Image Signing and Verification 🖥️ AI Cluster Runtime for K8s: NVIDIA AICR Read it here: https://kube.today/issues/194
One million output tokens per second. On Kubernetes KubeFM Season 9 starts with a bang! Federico Iezzi explains how he reached that milestone with Qwen 3.5, vLLM, GKE Autopilot and B200 GPUs 🎙Bart is back. KubeFM is back https://ku.bz/1xD9Md0mb
Just landed: Learn Kubernetes weekly 193! My top picks: 🚧 Kubernetes Gotchas Breaking Laravel Deploys 🕵️ Catching Helm Drift 🧩 Fixing 502 Bad Gateway in GKE and Istio 🛡️ Copy Fail Destroyer Read it here: https://kube.today/issues/193
Just landed: Learn Kubernetes weekly 192! My top picks: 🔑 EKS Pod Identity Session Policies 🛡️ Blocking Copy Fail with Tetragon 🌐 PodCIDR Pools with Cilium and vCluster 🗺️ k8scout Attack Path Mapper Read it here: https://kube.today/issues/192
Just landed: Learn Kubernetes weekly 191! My top picks: 🛡️ Secure AI Kubernetes Debugging ☁️ On-Prem Meets Cloud, Finally 📊 Local EKS Log Monitoring 🚫 Copy Fail Blocker Read it here: https://kube.today/issues/191
Just landed: Learn Kubernetes weekly 190! My top picks: 🔒 L7 Filtering with Cilium eBPF 🐛 Debugging Across Container Boundaries 🛡️ Automating Pod Disruption Budgets ⛵ Luxury Yacht: K8s Management App Read it here: https://kube.today/issues/190
Just landed: Learn Kubernetes weekly 189! My top picks: 🚀 GitOps at Enterprise Scale 🖥️ Generative AI at the Edge with EKS Hybrid Nodes 🪖 Deploying OpenClaw with Helm 🐘 OpenEverest Database Platform Read it here: https://kube.today/issues/189
Just landed: Learn Kubernetes weekly 188! My top picks: 🚀 Stateless ArgoCD for Bare-Metal 🔏 Signed, Sealed, and Admitted 🔐 Securing Inference with Authorino 🔍 xpdig: Explore Crossplane Traces Read it here: https://kube.today/issues/188
Just landed: Learn Kubernetes weekly 187! My top picks: 🔐 OAuth with Kindling 🔀 Sharded Multi-Cluster cert-manager 🏗️ Private EKS Cluster with OpenVPN and Grafana 🗃️ Chainloop SDLC Evidence Store Read it here: https://kube.today/issues/187
Just landed: Learn Kubernetes weekly 186! My top picks: 🔧 Fixing ISR Revalidation Across Replicas 🌐 GKE Multi-cluster Gateway 🚀 Migrating VPC CNI to EKS Managed Add-on 🗼 hanoi-cli Read it here: https://kube.today/issues/186
RBAC, OIDC, service accounts, IRSA, TokenReview. Kubernetes auth is usually presented as a bag of separate topics. The API server starts from a smaller question: Who is making this request?
Just landed: Learn Kubernetes weekly 185! My top picks: 🏥 Designing for Failure with CloudNativePG 🏠 Homelab Kubernetes Cluster with $0 Cloud Costs 🔐 From ACM to ALB on EKS Auto Mode ⚡ Zeropod: Scale to Zero Read it here: https://kube.today/issues/185
Just landed: Learn Kubernetes weekly 184! My top picks: 🔒 Securing Crossplane Dashboard 🔑 Leaked Secrets in Version Control 🍓 Production Kubernetes on Raspberry Pi 🩺 Node Healthcheck Operator Read it here: https://kube.today/issues/184
Most Kubernetes metrics tutorials stop just as the interesting part begins. They show Prometheus or Metrics Server, then skip kubelet, cAdvisor, CRI, containerd, and Linux cgroups. That's the part you need if you want to trust your dashboards.
Just landed: Learn Kubernetes weekly 183! My top picks: 🎙️ Vibe Coding a K8s Media Server 🐘 CloudnativePG: Postgres on Kubernetes ⚡ CRaC: 88% Faster Spring Boot 👾 Kubeinvaders: Cluster Resilience Testing Read it here: https://kube.today/issues/183
Most Kubernetes production failures are contract failures between the app and Kubernetes. Gulcan and I made an interactive readiness checklist and PDF worksheet for the app behavior that Kubernetes will test before go-live. https://learnkube.com/production-best-practices
Just landed: Learn Kubernetes weekly 182! My top picks: 🤖 LLMs on Kubernetes the Easy Way 🌐 Kubernetes Gateway API on EKS via ALB 🔧 Elastic Kubernetes Platform on VMware vSphere 🔐 PII-Shield: Log Sanitizer Read it here: https://kube.today/issues/182
Just landed: Learn Kubernetes weekly 181! My top picks: 🐳 Docker Compose to Kubernetes on AWS 🔄 Automated GitOps: ECR to EKS 🍓 Kubernetes Cluster with Raspberry Pis 🔐 Audicia — RBAC from Audit Logs Read it here: https://kube.today/issues/181
Just landed: Learn Kubernetes weekly 180! My top picks: 🔐 Hardware-backed TLS with YubiHSM 2 📈 KEDA on GKE: Event-Driven Autoscaling 🔀 Migrate from NGINX to Traefik in Minutes 🧠 RootCause MCP Server Read it here: https://kube.today/issues/180
How teams manage node OSes in Kubernetes: - 47.1% replace nodes instead of patching - 55.1% check monitoring/logs first - 74.3% can patch within hours or days after a critical OS CVE Full report: https://kube.today/immutable-linux-kubernetes-2026
🚀 I created a map of the Kubernetes control plane. If you’ve ever wondered what happens after `kubectl apply`, this should help: https://learnkube.com/kubernetes-control-plane The map is sized for A4 paper, so you can print it out and put it on your wall if you like!
Become an expert in Kubernetes! LearnKube runs its iconic 4-day Advanced Kubernetes course next week! If you want to get your hands dirty with Kubernetes, join us for a workshop packed with hands-on labs! Sign up here: https://learnkube.com/training
Just landed: Learn Kubernetes weekly 179! My top picks: 🤔 cgroup v1 CPU Shares to v2 CPU Weight 💰 Kubernetes for Pentesters ⚙️ Observability in EKS 👨🔧 Prometheus SLO Generator Sloth Read it here: https://kube.today/issues/179
Delete a Pod from a Deployment and a new one appears. The API server didn't create it. The scheduler didn't schedule it yet. A controller inside the controller manager noticed the count was wrong and created a replacement before anything else happened.
Just landed: Learn Kubernetes weekly 178! My top picks: 🤖 Deploy LLM Models on OpenShift 🔧 Modernizing Jenkins: From Agents to Pods 🏗️ Building a Local Data Platform 🛡️ Netfence: eBPF Network Filter Daemon Read it here: https://kube.today/issues/178
Just landed: Learn Kubernetes weekly 177! My top picks: 🔧 Structured Matching, Patching and Diffing 📋 Kueue: Atomic Admission and Topology Awareness 🔑 Uniform API Server Access with clientcmd 🤖 KubeAttention Read it here: https://kube.today/issues/177
Just landed: Learn Kubernetes weekly 176! My top picks: 🔒 GlusterFS Unprivileged Containers 🚀 Startup CPU Boost with In-Place Pod Resize 🌐 Gateway API on AKS via Azure Application Gateway ✅ Helm CEL Validator Read it here: https://kube.today/issues/176
Just landed: Learn Kubernetes weekly 175! My top picks: 🤖 EKS Hybrid Nodes with KubeVirt 🏢 GKE Multi-Tenancy with RBAC 🔌 Extending Argo Workflows Controller 🔍 kimspect: Container Image Inspector Read it here: https://kube.today/issues/175