Learn from production

• Investigating and fixing "stoppodsandbox from runtime service failed" kubelet errors

  In this blog post, the author tracks down persistent sandbox-cleanup errors in a Kubernetes cluster, finds that zero-length CNI cache files cause the problem, and shows how manually deleting those files cleared the error.

• Migrating legacy PHP monolith apps on Drupal 8 to Kubernetes

  Alexey Demyanov

  This case study shows how Palark migrated high-traffic Drupal 8 monoliths to Kubernetes to improve resilience, autoscaling, deployment automation, and DDoS handling while reducing infrastructure waste.

• How we found 7 TiB of memory just sitting around

  This blog post tells how the Render team:

  • tracked down Kubernetes memory waste caused by many daemonset namespace watches,
  • fixed config issues,
  • and freed over 7 TiB of memory across clusters by reducing unnecessary listwatch overhead.
• Tracing large job failures to serial console bottlenecks from oom events

  Jack Lindamood

  This case study shows how OOM Killer terminated a critical network daemon on Kubernetes nodes, causing a network outage.

  It covers debugging via serial console and implementing memory reservations to prevent system-critical process termination.

More case studies →

Matching jobs

1. • Data Engineer with IDnow

   • Salary: $88.2K to $220.22K a year

   • Location: based in the office in Rennes, FR

   • Tech stack: Kubernetes, Helm, ArgoCD, Docker, Python, Shell, SQL, PostgreSQL, Ceph, Ansible

2. • DevOps Engineer with American Institutes for Research

   • Salary: $149K to $176K a year

   • Location: based in the office (and remote from home) in Crystal City, VA, USA

   • Tech stack: Kubernetes, Azure, Powershell, Azure DevOps

3. • DevOps Engineer with IDnow

   • Salary: $120.15K to $241.68K a year

   • Location: based in the office in Rennes, FR

   • Tech stack: Kubernetes, AWS, On-premise, Terraform, Ansible

4. • DevSecOps Engineer with CHAOS Industries

   • Salary: $140K to $220K a year

   • Location: based in the office in El Segundo, CA, USA

   • Tech stack: Kubernetes, Azure, On-premise, Docker, C++, Go, Groovy, Java, Python, Rust

5. • DevSecOps Engineer with Tieto

   • Salary: $30 to $242K a year

   • Location: based in the office in Porto, PT

   • Tech stack: Kubernetes, Docker, Go, Java, Python

Discover more Kubernetes jobs on Kube Careers →

Build something

• Securing Kubernetes Microservices with Istio: mTLS, Gateways, and the Kubernetes Gateway API

  Matthieu Vlad

  This guide walks through deploying Istio via Terraform and Helm to secure service-to-service and external communication with mTLS, automatic sidecar injection, and encrypted ingress via Istio Gateway.

• Deploy production generative AI at the edge using Amazon EKS Hybrid Nodes with NVIDIA DGX

  Sheng Chen is a Sr. Specialist Solutions Architect at AWS Australia, bringing over 20 years of experience in IT infrastructure, cloud architecture, and multi-cloud networking. In his current role, Sheng helps customers accelerate cloud migrations and infrastructure modernization by leveraging cloud-native technologies. He specializes in Amazon EKS, AWS hybrid cloud services, platform engineering and AI infrastructure.

  This tutorial shows how to run production generative AI at the edge by attaching on-prem NVIDIA DGX systems to an Amazon EKS control plane with hybrid nodes, GPU Operator, and NVIDIA NIM.

• Deploying OpenClaw on Kubernetes with Helm

  Serhan Ekici

  This tutorial shows how to deploy OpenClaw on Kubernetes with a Helm chart and ArgoCD, using persistent storage, config modes, secrets handling, and network policies to reduce the blast radius of an AI agent.

• Extending EKS with Hybrid Nodes: IAM Roles Anywhere and HashiCorp Vault

  This tutorial teaches how to extend EKS with hybrid nodes using IAM Roles Anywhere and HashiCorp Vault for secure authentication of on-premises or edge workloads.

More tutorials →

Call for Papers closing soon

1. 0

   days

   Kubernetes Community Days Korea 2026

   The Call For Paper is open until 26 June 2026 at GMT-4. More info →

   • Location: Seoul, KR

   • In-person conference organized by KCD South Korea.

   • The conference starts on the 1 September 2026.

   • Apply here

2. 1

   days

   Kubernetes Community Days Washington DC 2026

   The Call For Paper is open until 27 June 2026 at GMT-4. More info →

   • Location: Washington, DC, USA

   • In-person conference organized by KCD Washington DC.

   • The conference starts on the 15 September 2026.

   • Apply here

3. 3

   days

   Kubernetes Community Days Nigeria 2026

   The Call For Paper is open until 29 June 2026 at GMT-4. More info →

   • Location: Lagos, NG

   • In-person conference organized by KCD Nigeria.

   • The conference starts on the 24 October 2026.

   • Apply here

4. 4

   days

   Nerdearla México 2026

   The Call For Paper is open until 30 June 2026 at GMT-4. More info →

   • Location: Mexico City, MX

   • In-person conference organized by Nerdearla.

   • The conference starts on the 20 November 2026.

   • Apply here

5. 4

   days

   Containerkonferansen 2026

   The Call For Paper is open until 30 June 2026 at GMT-4. More info →

   • Location: Trondheim, NO

   • In-person conference organized by Containerkonferansen.

   • The conference starts on the 15 October 2026.

   • Apply here

6. 4

   days

   Code Europe

   The Call For Paper is open until 30 June 2026 at GMT-4. More info →

   • Location: Warsaw, PL

   • In-person conference organized by ode Europe.

   • The conference starts on the 15 September 2026.

   • Apply here

7. 4

   days

   Xen Summit 2026

   The Call For Paper is open until 30 June 2026 at GMT-4. More info →

   • Location: Munich, DE

   • In-person conference organized by Xen Project.

   • The conference starts on the 17 September 2026.

   • Apply here

More articles

• Kubernetes security fundamentals: networking

  Rory McCune

  This article covers network security fundamentals in Kubernetes, explaining how clusters default to a flat pod network, how network policies enforce segmentation, and best practices like “default deny” and restricting host networking.

• Using Role-based Access Control in Kubernetes Engine - GSP493

  David Nguyen

  This article shows how to configure Role-Based Access Control (RBAC) in Kubernetes Engine (GKE), create roles, role bindings, and enforce least privilege across namespaces and cluster APIs.

• Conditions, Phases, and Declarative Phase Rules in Kubernetes Operators

  Debdut Chakraborty

  This article explains:

  • why Kubernetes operator status conditions should be the single source of truth,
  • how phase should be derived from conditions via declarative rules,
  • and introduces a Go library for doing this with an interactive browser demo.
• The Missing Layers in Your Kubernetes Operator

  Ægir Máni Hauksson

  This article explains that Kubernetes operators become hard to maintain without explicit component and resource-primitive layers between the controller and raw objects.

Even more articles →