Learn from production

• How we found 7 TiB of memory just sitting around

  This blog post tells how the Render team:

  • tracked down Kubernetes memory waste caused by many daemonset namespace watches,
  • fixed config issues,
  • and freed over 7 TiB of memory across clusters by reducing unnecessary listwatch overhead.
• Tracing large job failures to serial console bottlenecks from oom events

  Jack Lindamood

  This case study shows how OOM Killer terminated a critical network daemon on Kubernetes nodes, causing a network outage.

  It covers debugging via serial console and implementing memory reservations to prevent system-critical process termination.

• Three Weeks in the Trenches: Hunting a 4GB Native Memory Leak That .NET Couldn’t See

  Kalyan Josyula

  This case study shows how a team traced repeated pod OOM kills in ASP.NET Core to native memory growth from zombie SignalR connections, glibc fragmentation, and kernel socket buffers.

• Autoscaling Hid Our LLM Cost Regression (85% → 4% Cache Hit Rate)

  Nick Roan

  This case study shows how a single RAG chunk size change collapsed vLLM prefix-cache hit rate from 85% to 4%, triggering an 80% GPU replica increase while latency stayed flat.

  It also includes the fix: adding a two-phase cache replay gate in CI.

More case studies →

Matching jobs

1. • Data Engineer with System

   • Salary: $18K to $266.2K a year

   • Location: based in the office in New York, NY, USA

   • Tech stack: Kubernetes, AWS, Azure, GCP, Docker, Python, SQL, Airflow, Spark

2. • DevOps Engineer with Absorb

   • Salary: $90 to $484K a year

   • Location: remote from

   • Tech stack: Kubernetes, AWS, Docker, C#, Powershell, Cloudformation, Bamboo, Prometheus, Sumo Logic

3. • DevSecOps Engineer with David AI

   • Salary: $12.6K to $415.14K a year

   • Location: based in the office (and remote from home) in San Francisco, CA, USA

   • Tech stack: Kubernetes, AWS, Typescript, PostgreSQL, Terraform, Datadog, Grafana, Prometheus

4. • Platform Engineer with David AI

   • Salary: $108K to $385K a year

   • Location: based in the office in San Francisco, CA, USA

   • Tech stack: Kubernetes, AWS, Typescript, PostgreSQL, Terraform, Datadog, Grafana, Prometheus

5. • Platform Engineer with Normal Computing Corporation

   • Salary: $83.25K to $401.5K a year

   • Location: based in the office (and remote from home) in New York City, NY, USA

   • Tech stack: Kubernetes, Docker, Redis, Terraform

Discover more Kubernetes jobs on Kube Careers →

Build something

• Sharded multi-cluster cert-manager with multicluster-runtime

  Zach Smith

  This tutorial shows how to build a hub-style multi-cluster cert-manager control plane where a central hub cluster manages certificate issuance and distribution across multiple spoke clusters using cert-manager and trust-manager.

• Kubernetes for Pentesters: Breaking Orchestrated Infrastructure from Zero

  Ruben Santos

  This tutorial teaches Kubernetes security testing from an offensive perspective, covering:

  • pod compromise detection,
  • service account token exploitation,
  • RBAC privilege escalation,
  • and tools like kubeletctl and peirates.
• Beyond Ingress: GKE Multi-cluster Gateway and Multi-Cluster Services

  Blake Gillman

  This article explains how to build a highly available GKE architecture using Multi-Cluster Services and Multi-Cluster Gateway.

  It covers subnet naming requirement for cross-regional internal ALBs, cluster setup via Fleet, demo app with request routing.

• Zero-port setup: cloudflare tunnels on Kubernetes

  Ștefan Muraru

  This tutorial shows how to run Cloudflare Tunnels as a DaemonSet to expose services with zero open inbound ports, using liveness probes, Kubernetes Secrets, and GitOps with ArgoCD.

More tutorials →

Call for Papers closing soon

1. 2

   days

   DevSecOps Days Washington DC 2026

   The Call For Paper is open until 12 June 2026 at GMT-4. More info →

   • Location: Arlington, VA, USA

   • In-person conference organized by Carnegie Mellon University.

   • The conference starts on the 3 April 2026.

   • Apply here

2. 2

   days

   fwd:cloudsec Europe 2026

   The Call For Paper is open until 12 June 2026 at GMT-4. More info →

   • Location: London, GB

   • In-person conference organized by Forward CloudSec.

   • The conference starts on the 8 September 2026.

   • Apply here

3. 5

   days

   Update Conference Prague 2026

   The Call For Paper is open until 15 June 2026 at GMT-4. More info →

   • Location: Prague, CZ

   • In-person conference organized by Update Conference.

   • The conference starts on the 13 November 2026.

   • Apply here

4. 5

   days

   Kubernetes Community Days San Francisco Bay Area 2026

   The Call For Paper is open until 15 June 2026 at GMT-4. More info →

   • Location: San Francisco, US

   • In-person conference organized by KCD SF Bay Area.

   • The conference starts on the 1 September 2026.

   • Apply here

5. 5

   days

   Devopsdays Barcelona

   The Call For Paper is open until 15 June 2026 at GMT-4. More info →

   • Location: Barcelona, ES

   • In-person conference organized by Devopsdays.

   • The conference starts on the 13 November 2026.

   • Apply here

6. 5

   days

   Devopsdays Portland

   The Call For Paper is open until 15 June 2026 at GMT-4. More info →

   • Location: Portland, OR, USA

   • In-person conference organized by Devopsdays.

   • The conference starts on the 8 September 2026.

   • Apply here

7. 10

   days

   EuroBSDCon

   The Call For Paper is open until 20 June 2026 at GMT-4. More info →

   • Location: Brussels, BE

   • In-person conference organized by EuroBSDCon Foundation.

   • The conference starts on the 13 September 2026.

   • Apply here

More articles

• Why Your Grafana is Slow on Kubernetes (and 3 Replicas Won’t Fix It)

  Aslanov Javid

  This article shows why Grafana becomes slow on Kubernetes when multiple replicas share SQLite over EFS, and explains why a single replica on block storage or a real external database is the correct fix.

• Running Claude Code as a Kubernetes Job

  Daniel Hnyk

  This article shows how to run Claude Code as a CronJob using a custom Dockerfile, non-interactive mode flags, jq log filtering, and a timeout-based fallback that spawns a second Claude instance to recover partial results.

• How I Built Kernel: An AI-Powered IT Helpdesk That Deflects 80% of Support Tickets

  Inguva Dev

  This article explains how an internal AI helpdesk on GKE uses Slack, LangGraph, Okta, Confluence, and Jira to automate routine IT requests and reportedly deflect about 80% of support tickets.

• I setup Kubermatic SecureGuard before it even existed

  Daniel Ullrich

  This article reviews Kubermatic SecureGuard (KubeSG), a Kubernetes-native open source secrets manager built on OpenBao and the External Secrets Operator that automates secret rotation and delivery without app rewrites or proprietary SDKs.

Even more articles →