Daily Kubernetes news, events, jobs, podcast and more

Spotlight

When is a cluster really full? Unlocking hidden capacity with the k8s-overcommit Operator

Inditex Tech

This case study shows how Inditex reclaims idle node capacity with an open-source overcommit operator that rewrites pod requests through a mutating webhook, based on priority class.

Copy.Fail: When the Kernel Trusts Too Much
This article examines why Copy Fail (CVE-2026-31431) breaks container assumptions and provides a small, safe Python check to determine whether your nodes can reach the vulnerable kernel path.
Finding a Race Condition in Kuberenetes — Like a Detective
Tom Klinovsky
This case study walks through a production debugging session where orphaned Kubernetes pods kept blocking new deployments due to a race condition between the job controller, garbage collector, and an undocumented default propagation policy behavior.
Source Hydrated Infrastructure Models (SHIM)
Lian Yuanlin
This case study shows how to use Source Hydrated Infrastructure Models (SHIM), a GitOps pattern that commits fully rendered infrastructure manifests to Git for explicit auditing and reconciliation.

Tools and utilities

Hermes Agent Operator: run Hermes AI agents on Kubernetes
Hermes Agent Operator runs Hermes AI agents on Kubernetes as custom resources, so each agent's config, skills and workspace live in one manifest instead of drifting on someone's laptop.
System Upgrade Controller: declarative node upgrades
System Upgrade Controller upgrades your nodes from inside the cluster: you describe the change in a Plan resource and it runs the upgrade job on each node, cordoning and draining when you ask it to.
NineVigil - Governance and sandboxing for AI agents on Kubernetes
NineVigil is a Kubernetes operator that runs AI agents inside gVisor sandboxes, closes their network egress with Cilium and keeps a tamper-evident audit record of every run.
dtop: terminal dashboard for Docker containers
dtop is a fast terminal dashboard written in Rust that shows what all your Docker containers are doing right now, across several hosts at once.
k8s-overcommit Operator: Kubernetes pod resource overcommit manager
k8s-overcommit Operator is a Kubernetes operator that trims pod CPU and memory requests based on per-workload overcommit classes, so you can pack more onto a cluster without touching the limits.

More projects →

Events starting soon

Advanced Kubernetes course
September 10, 2026
- This is a virtual event
- This event requires an entrance fee
Java, Spring Boot, GitOps & Kubernetes: Your Path to the Cloud
September 10, 2026
- Location: Hamburg, DE
- This is a free event.
AWS with On-Prem: The Good, The Bad, The Ugly
September 11, 2026
- Location: Vilnius, LT
- This is a free event.
From Pilots to Production: Scaling GenAI Adoption Across 250+ Engineering Teams
September 12, 2026
- Location: Pune, IN
- This is a free event.
EuroBSDCon
September 12, 2026
- Location: Brussels, BE
- This event requires an entrance fee
Code Europe
September 14, 2026
- Location: Warsaw, PL
- This event requires an entrance fee

Discover more events onn Kube Events →

Learn from production

How We Migrated Microservices from Azure App Service to AKS and Cut Infrastructure Costs by 25%
Prabhav Gupta
This case study shows how a team migrated their Spring Boot microservices from Azure App Service to AKS, resulting in a 25% reduction in their infrastructure bill.
I Deleted Our Kubernetes Cluster. We Run On Three Servers Now.
Seb
This case study tells how a team deleted their EKS cluster and moved to three plain servers with Kamal, dropping the bill from $1,200 to $180 a month and deploying in about half a minute.
Migrating from ingress-NGINX to Envoy gateway
Mijndert Stuij
This case study walks through moving from ingress-NGINX to Envoy Gateway, including the mistakes made on the way, like nginx annotations that do not map one-to-one onto Gateway API policies.
How Netflix Simplified Batch Compute with Kueue
Netflix Technology Blog
This case study shows how Netflix moved millions of batch jobs from its homegrown queueing system to Kueue, without the people submitting those jobs noticing any change.

More case studies →

Matching jobs

- Data Engineer with Brave
- Salary: $272.72 a day
- Location: remote from
- Tech stack: Kubernetes, Docker, Javascript, C++, Python, Rust, Typescript
- Engineering Manager with Betsson Group
- Salary: US$86.4K to US$264K a year
- Location: based in the office in Malta, MT
- Tech stack: Kubernetes, AWS, Helm, C#, Go, Java, Javascript, Python, Shell, SQL
- Data Engineer with MariaDB plc
- Salary: RON 160K to RON 200K a year
- Location: remote from
- Tech stack: Kubernetes, Docker, Javascript, Python, SQL
- DevOps Engineer with Gabb Wireless
- Salary: $67.5K to $440K a year
- Location: based in the office in Lehi, UT, USA
- Tech stack: Kubernetes, AWS, Helm, Terraform
- DevOps Engineer with IONOS EN
- Salary: US$72K to US$220K a year
- Location: based in the office (and remote from home) in Berlin, DE
- Tech stack: Kubernetes, Python, Terraform, Ansible, Grafana, Prometheus

Discover more Kubernetes jobs on Kube Careers →

Build something

Automating SSL/TLS for Istio Ingress Gateway with Cert-Manager & Let’s Encrypt on GKE 🔐
Raajkumar Tutika
This tutorial walks through wiring cert-manager and Let's Encrypt into the Istio ingress gateway on GKE, so your HTTPS certificates just renew themselves.
A Production Pattern for Hybrid OpenTelemetry Collector Deployments on Kubernetes
Eresh Gorantla
This tutorial teaches how to deploy OpenTelemetry Collectors on Kubernetes using both DaemonSet agents and sidecar collectors together, with a tail-sampling gateway that merges telemetry from both topologies without breaking trace continuity.
Local Platform Engineering on Your Laptop: vind, Sveltos and ArgoCD
Markof
This tutorial builds a local multi-cluster lab with vind, then uses Sveltos and Argo CD to deploy to every cluster that carries the right label.
Building a Hybrid Kubernetes Lab: Solving the “Host-Only vs. Bridged” Network Dilemma with MetalLB
Abhi
This tutorial shows how to build a local Kubernetes lab in Vagrant where MetalLB actually works, by giving each VM both a host-only and a bridged network.