Learn from production

• When ETCD Crashes, Check Your Disks First: A Pod CrashLoopBack Debugging Story

  Anastassios Nanos

  This case study shows how etcd CrashLoopBack pods on a Karmada/k3s demo cluster turned out to be a ZFS I/O latency problem, and how four ZFS tuning settings fixed it — including the exact etcd Prometheus metrics to watch.

• Zero-Downtime EKS Migration: Production-Grade Kubernetes at Scale

  Krishnakanth E

  This case study explains how an ECS workload was migrated to EKS across two AWS regions with zero production downtime.

  It covers KEDA autoscaling, HashiCorp Vault, IRSA, disaster recovery, and a coordinated production cutover.

• We’re a 3-person tech team running production Kubernetes — So we built an AI SRE

  Leo Blondel

  This case study shows how a 3-person team built a Claude-based AI SRE that triages SigNoz alerts, checks Kubernetes, GitLab, logs, traces, and Slack, then ignores noise, escalates, or runs safe fixes.

• How We Set Up One Private Container Registry for 6 AKS Clusters Across 3 Regions and What Broke Along the Way

  Alex

  This case study explains how one private container registry was shared across six AKS clusters in three regions.

  It covers ACR geo-replication, image pull reliability, network access, permissions, and operational breakages.

More case studies →

Matching jobs

1. • DevOps Engineer with Mark43

   • Salary: $155K to $170K a year

   • Location: remote from

   • Tech stack: Kubernetes, Docker, Terraform

2. • DevOps Engineer with RobCo

   • Salary: US$70.74K to US$440K a year

   • Location: based in the office in Munich, DE

   • Tech stack: Kubernetes, AWS, Go, Python, Terraform, Datadog, Grafana, Prometheus

3. • Site Reliability Engineer with MyFitnessPal

   • Salary: $120K to $165K a year

   • Location: remote from

   • Tech stack: Kubernetes, AWS, Docker, Go, Python, Typescript, Terraform, GitHub Actions, Datadog

4. • AI Enterprise Technical Program Manager with Redhorse Corporation

   • Salary: $37 to $485.65K a year

   • Location: based in the office in Arlington, VA, USA

   • Tech stack: Kubernetes, AWS, Azure, Docker, Spark

5. • Commercial Account Executive with Vantage

   • Salary: $100K to $200K a year

   • Location: remote from

   • Tech stack: Kubernetes, AWS, CircleCI, Datadog

Discover more Kubernetes jobs on Kube Careers →

Build something

• Deploying a Machine Learning model for inference on Kubernetes (GKE)

  Abasi-ifreke Uwem

  This tutorial shows how to deploy an ML inference app on GKE using FastAPI, Streamlit, GCS FUSE, Workload Identity, Jenkins CI/CD, and HPA.

• Building a PCI-DSS Compliant GKE Framework for Financial Institutions: Data Protection, Governance & Audit Logging

  Mohamed Rasvi

  This tutorial explains how to build a PCI-DSS focused GKE security framework using:

  • Workload Identity,
  • Secret Manager,
  • Binary Authorization,
  • NetworkPolicy,
  • VPC Service Controls,
  • Private Service Connect,
  • Istio mTLS,
  • and audit logging.
• Building a Bare-Metal Kubernetes Cluster on Hyper-V

  Aakash Deep

  This tutorial teaches how to build a production-like Kubernetes cluster on bare metal using Hyper-V VMs with MetalLB, Ingress NGINX, Longhorn storage, and HPA.

• Building a PCI-DSS compliant GKE framework for financial institutions

  Mohamed Rasvi

  This tutorial explains how to build a PCI-DSS focused GKE security framework using Workload Identity, Secret Manager, NetworkPolicy, zero trust networking, Binary Authorization, audit logging, and secure access patterns.

More tutorials →

Call for Papers closing soon

1. 1

   days

   Cloud Security Space 2026

   The Call For Paper is open until 15 August 2026 at GMT-4. More info →

   • Location: Buenos Aires, AR

   • In-person conference organized by Cloud Security Space.

   • The conference starts on the 9 October 2026.

   • Apply here

2. 2

   days

   Kubernetes Community Days Suisse Romande 2026

   The Call For Paper is open until 16 August 2026 at GMT-4. More info →

   • Location: Geneva, CH

   • In-person conference organized by KCD Suisse Romande.

   • The conference starts on the 9 December 2026.

   • Apply here

3. 9

   days

   Devopsdays Juiz de Fora

   The Call For Paper is open until 23 August 2026 at GMT-4. More info →

   • Location: Juiz de Fora, BR

   • In-person conference organized by Devopsdays.

   • The conference starts on the 17 October 2026.

   • Apply here

4. 10

   days

   ONE Summit Japan

   The Call For Paper is open until 24 August 2026 at GMT-4. More info →

   • Location: Tokyo, JP

   • In-person conference organized by CNCF.

   • The conference starts on the 11 December 2026.

   • Apply here

5. 14

   days

   Monster Scale Summit 2027

   The Call For Paper is open until 28 August 2026 at GMT-4. More info →

   • This is a virtual event

   • Online conference organized by ScyllaDB.

   • The conference starts on the 11 March 2027.

   • Apply here

6. 16

   days

   Devopsdays Warsaw

   The Call For Paper is open until 30 August 2026 at GMT-4. More info →

   • Location: Warsaw, PL

   • In-person conference organized by Devopsdays.

   • The conference starts on the 23 November 2026.

   • Apply here

7. 16

   days

   Devopsdays Recife

   The Call For Paper is open until 30 August 2026 at GMT-4. More info →

   • Location: Recife, BR

   • In-person conference organized by Devopsdays.

   • The conference starts on the 12 December 2026.

   • Apply here

More articles

• Cloud Computing Multi-Tenancy Isolation: a New Approach

  Braulio Dumba

  This article presents a three-layer tenant isolation design where each tenant gets its own control plane, VM nodes and isolated network via KubeFlex, KubeVirt and OVN-Kubernetes, with latency measurements.

• We Blamed CoreDNS for Weeks. The Real Culprit Was a Default We Never Questioned

  Akash Warkhade

  This article explains how Kubernetes pod DNS failures can come from the default ndots:5 setting and a Linux conntrack issue, and shows how ndots:2 plus single-request-reopen can reduce DNS noise and fix intermittent resolution errors.

• User namespaces in Kubernetes: the implementation

  Rodrigo Campos Catelin

  This article explains how Kubernetes user namespaces are implemented through pod UID/GID range allocation, idmap mounts, containerd, runc, and safeguards against privilege escalation.

• Why Falcon Shield Belongs in Every Mature CrowdStrike Deployment

  Lormenskyjean

  This article explains how Falcon Shield extends CrowdStrike security into SaaS applications through posture management, identity governance, OAuth visibility, permission drift detection, and identity threat response.

Even more articles →