Spotlight
This article explains why three old Kubernetes CVEs will never get a code fix, and what to change in your cluster now that scanners are about to start flagging them again.
Daniel Carrasco Báez
This article lays out a production EKS setup where Karpenter keeps a cheap On-Demand baseline and absorbs traffic spikes with Spot nodes that drain safely when AWS reclaims them.
Ananya Gupta
This case study shows how a student team built a multi-tenant PostgreSQL DBaaS on Kubernetes with Patroni for failover and PgBouncer for pooling, and what they had to redo.
This article explains a new alpha feature in Kubernetes 1.36 that loads admission policies from files on disk at startup, so they are live before anything else and nobody can delete them.
Tools and utilities
kubectl tree is a kubectl plugin that follows ownerReferences and prints the whole object tree under a Deployment or custom resource, so you can see what created what.
tfplanctx turns a Terraform plan into a short, grep-friendly summary so coding agents can review what will change without burning context on raw plan output.
kpf is a terminal UI around kubectl port-forward that lets you pick a service from a list and reconnects automatically when a pod restarts or your laptop wakes up.
NetObserv deploys an eBPF agent on every node to capture network flows, enrich them with Kubernetes metadata, and export to Loki, Prometheus, Kafka, or IPFIX — with a web console showing topology, raw flows, and traffic metrics.
Hermes Agent Operator runs Hermes AI agents on Kubernetes as custom resources, so each agent's config, skills and workspace live in one manifest instead of drifting on someone's laptop.
Events starting soon
September 14, 2026
Location: Warsaw, PL
This event requires an entrance fee
September 15, 2026
Location: Washington, DC, USA
This event requires an entrance fee
September 15, 2026
Location: Zürich, CH
This is a free event.
September 15, 2026
This is a virtual event
This is a free event.
September 15, 2026
Location: Cambridge, MA, USA
This is a free event.
September 15, 2026
Location: Lehi, UT, USA
This is a free event.
KubeSelect is a new show that tests one bold Kubernetes hypothesis with one expert. Hosts Salman Iqbal and Bart Farrell examine the evidence and ask whether the claim holds up.
In episode two, Kat Cosgrove tackles a long-running question: should teams run databases on Kubernetes? StatefulSets, persistent volumes, CSI, and database operators changed the technical answer, but they did not remove the operational risk.
In this episode:
Learn from production
Ameypande
This case study shows how a team turned an old chat export into a searchable archive with OpenSearch, a Spring Boot app and a Kubernetes deployment behind HTTPS.
Inditex Tech
This case study shows how Inditex reclaims idle node capacity with an open-source overcommit operator that rewrites pod requests through a mutating webhook, based on priority class.
Tom Klinovsky
This case study walks through a production debugging session where orphaned Kubernetes pods kept blocking new deployments due to a race condition between the job controller, garbage collector, and an undocumented default propagation policy behavior.
Ryan Waite
This case study follows one engineer building a home data centre from scratch, running k3s on recycled hardware with NAS storage, Cloudflare Tunnels for public access and Argo CD for deployments.
Matching jobs
DevOps Engineer with Commvault
Salary: $18.23K to $2.75L a year
Location: based in the office in Bangalore, IN
Tech stack: Kubernetes, On-premise, OpenShift, Docker, C++, Python, GitHub Actions, Ansible
Platform Engineer with League
Salary: CA$150K to CA$206K a year
Location: remote from
Tech stack: Kubernetes, GCP, Go
Site Reliability Engineer with LayerZero Labs
Salary: CA$64.2K to CA$339.24K a year
Location: remote from
Tech stack: Kubernetes, AWS, Azure, GCP, Helm, Typescript
Software Engineer with Artefact
Salary: $85.65K to $364.1K a year
Location: based in the office in Paris, FR
Tech stack: Kubernetes, AWS, Azure, GCP, Docker, SQL, Go, Java, Javascript, Python
Solution Engineer with Teleport
Salary: $48.96K to $412.61K a year
Location: fully remote
Tech stack: Kubernetes, AWS, Azure, GCP, Docker, Terraform
Build something
This tutorial shows how to link three GKE clusters with Linkerd multicluster, mixing federation and mirroring so a service keeps answering even when a whole cluster disappears.
Raajkumar Tutika
This tutorial walks through wiring cert-manager and Let's Encrypt into the Istio ingress gateway on GKE, so your HTTPS certificates just renew themselves.
Eresh Gorantla
This tutorial teaches how to deploy OpenTelemetry Collectors on Kubernetes using both DaemonSet agents and sidecar collectors together, with a tail-sampling gateway that merges telemetry from both topologies without breaking trace continuity.
Markof
This tutorial builds a local multi-cluster lab with vind, then uses Sveltos and Argo CD to deploy to every cluster that carries the right label.
Call for Papers closing soon
1
days
Location: Dubai, AE
In-person conference organized by CognitionX.
The conference starts on the 15 October 2026.
4
days
Location: Santa Clara, CA, USA
In-person conference organized by DevNetwork.
The conference starts on the 11 February 2027.
6
days
Location: Montreal, CA
In-person conference organized by ConFoo.
The conference starts on the 26 February 2027.
7
days
Location: Tunja, CO
In-person conference organized by BoyaConf.
The conference starts on the 21 November 2026.
16
days
Location: Bengaluru, IN
In-person conference organized by Canonical.
The conference starts on the 15 November 2026.
17
days
Location: Amsterdam, NL
In-person conference organized by SREDay.
The conference starts on the 2 November 2026.
17
days
Location: Almaty, KZ
In-person conference organized by Devopsdays.
The conference starts on the 16 October 2026.
More articles
Abdullrahman Eissa
This article describes Silex, a homemade Kubernetes ingress controller with a Go control plane and a Rust data plane, and benchmarks it against the Nginx ingress controller.
Matias Coca
This article explains why EKS sends most pod-to-pod traffic across availability zones and how the Kubernetes 1.35 trafficDistribution: PreferSameZone setting keeps it local and cuts the transfer bill.
This article shows how a default AWS EKS setting lets any pod reach the node's metadata service and steal its IAM credentials, then walks through the simple fix.
This article examines why Copy Fail (CVE-2026-31431) breaks container assumptions and provides a small, safe Python check to determine whether your nodes can reach the vulnerable kernel path.