Learn from production

• We’re a 3-person tech team running production Kubernetes — So we built an AI SRE

  Leo Blondel

  This case study shows how a 3-person team built a Claude-based AI SRE that triages SigNoz alerts, checks Kubernetes, GitLab, logs, traces, and Slack, then ignores noise, escalates, or runs safe fixes.

• How We Set Up One Private Container Registry for 6 AKS Clusters Across 3 Regions and What Broke Along the Way

  Alex

  This case study explains how one private container registry was shared across six AKS clusters in three regions.

  It covers ACR geo-replication, image pull reliability, network access, permissions, and operational breakages.

• From Container Escape to Cloud Takeover: A Real-World Cloud Security Assessment

  Gleb Wam

  This case study explains how a privileged Kubernetes pod with host access can lead to container escape, control plane disruption, service account theft, and cloud resource takeover.

• ingress-nginx Is Archived: How We Migrated to kgateway (and Didn’t Break Prod)

  Nick Georgiou

  This case study explains how Plum migrated from ingress-nginx to kgateway and Gateway API in 12 weeks without production downtime.

  It covers inventory, staging validation, parallel running, mTLS decisions, and custom observability.

More case studies →

Matching jobs

1. • DevOps Engineer with Mark43

   • Salary: $155K to $170K a year

   • Location: remote from

   • Tech stack: Kubernetes, Docker, Terraform

2. • DevOps Engineer with RobCo

   • Salary: US$70.74K to US$440K a year

   • Location: based in the office in Munich, DE

   • Tech stack: Kubernetes, AWS, Go, Python, Terraform, Datadog, Grafana, Prometheus

3. • Site Reliability Engineer with MyFitnessPal

   • Salary: $120K to $165K a year

   • Location: remote from

   • Tech stack: Kubernetes, AWS, Docker, Go, Python, Typescript, Terraform, GitHub Actions, Datadog

4. • AI Enterprise Technical Program Manager with Redhorse Corporation

   • Salary: $37 to $485.65K a year

   • Location: based in the office in Arlington, VA, USA

   • Tech stack: Kubernetes, AWS, Azure, Docker, Spark

5. • Commercial Account Executive with Vantage

   • Salary: $100K to $200K a year

   • Location: remote from

   • Tech stack: Kubernetes, AWS, CircleCI, Datadog

Discover more Kubernetes jobs on Kube Careers →

Build something

• Building a PCI-DSS Compliant GKE Framework for Financial Institutions: Data Protection, Governance & Audit Logging

  Mohamed Rasvi

  This tutorial explains how to build a PCI-DSS focused GKE security framework using:

  • Workload Identity,
  • Secret Manager,
  • Binary Authorization,
  • NetworkPolicy,
  • VPC Service Controls,
  • Private Service Connect,
  • Istio mTLS,
  • and audit logging.
• Building a Bare-Metal Kubernetes Cluster on Hyper-V

  Aakash Deep

  This tutorial teaches how to build a production-like Kubernetes cluster on bare metal using Hyper-V VMs with MetalLB, Ingress NGINX, Longhorn storage, and HPA.

• Building a PCI-DSS compliant GKE framework for financial institutions

  Mohamed Rasvi

  This tutorial explains how to build a PCI-DSS focused GKE security framework using Workload Identity, Secret Manager, NetworkPolicy, zero trust networking, Binary Authorization, audit logging, and secure access patterns.

• Kubernetes AuthN the Hard Way

  Jinalpatel

  This tutorial explains how to connect Kubernetes authentication to LDAP through Dex and OIDC.

  It covers certificates, OpenLDAP, Dex Helm setup, API server trust, token claims, and RBAC group mapping.

More tutorials →

Call for Papers closing soon

1. 0

   days

   AI Coding Summit Berlin

   The Call For Paper is open until 12 August 2026 at GMT-4. More info →

   • Location: Berlin, DE and virtual

   • Online & in-person conference organized by GitNation.

   • The conference starts on the 4 December 2026.

   • Apply here

2. 0

   days

   AI Coding Summit

   The Call For Paper is open until 12 August 2026 at GMT-4. More info →

   • Location: Berlin, DE

   • In-person conference organized by Sentry.

   • The conference starts on the 7 December 2026.

   • Apply here

3. 2

   days

   Cloud Native AI Summit Europe

   The Call For Paper is open until 14 August 2026 at GMT-4. More info →

   • Location: Paris, FR

   • In-person conference organized by mate.dev.

   • The conference starts on the 3 December 2026.

   • Apply here

4. 3

   days

   Cloud Security Space 2026

   The Call For Paper is open until 15 August 2026 at GMT-4. More info →

   • Location: Buenos Aires, AR

   • In-person conference organized by Cloud Security Space.

   • The conference starts on the 9 October 2026.

   • Apply here

5. 4

   days

   Kubernetes Community Days Suisse Romande 2026

   The Call For Paper is open until 16 August 2026 at GMT-4. More info →

   • Location: Geneva, CH

   • In-person conference organized by KCD Suisse Romande.

   • The conference starts on the 9 December 2026.

   • Apply here

6. 12

   days

   Devopsdays Juiz de Fora

   The Call For Paper is open until 23 August 2026 at GMT-4. More info →

   • Location: Juiz de Fora, BR

   • In-person conference organized by Devopsdays.

   • The conference starts on the 17 October 2026.

   • Apply here

7. 12

   days

   ONE Summit Japan

   The Call For Paper is open until 24 August 2026 at GMT-4. More info →

   • Location: Tokyo, JP

   • In-person conference organized by CNCF.

   • The conference starts on the 11 December 2026.

   • Apply here

More articles

• We Blamed CoreDNS for Weeks. The Real Culprit Was a Default We Never Questioned

  Akash Warkhade

  This article explains how Kubernetes pod DNS failures can come from the default ndots:5 setting and a Linux conntrack issue, and shows how ndots:2 plus single-request-reopen can reduce DNS noise and fix intermittent resolution errors.

• User namespaces in Kubernetes: the implementation

  Rodrigo Campos Catelin

  This article explains how Kubernetes user namespaces are implemented through pod UID/GID range allocation, idmap mounts, containerd, runc, and safeguards against privilege escalation.

• Why Falcon Shield Belongs in Every Mature CrowdStrike Deployment

  Lormenskyjean

  This article explains how Falcon Shield extends CrowdStrike security into SaaS applications through posture management, identity governance, OAuth visibility, permission drift detection, and identity threat response.

• Building an ML Platform on Kubernetes: What Nobody Tells You About Running GPU Workloads in Production

  Sri Ramanjaneyulu Lingala

  This article explains how to build an ML platform on AKS with GPU node pools, Argo Workflows, MLflow, KServe, GitOps, security controls, and practical lessons around GPU cost, scheduling, and serving.

Even more articles →