Learn from production

• How We Set Up One Private Container Registry for 6 AKS Clusters Across 3 Regions and What Broke Along the Way

  Alex

  This case study explains how one private container registry was shared across six AKS clusters in three regions.

  It covers ACR geo-replication, image pull reliability, network access, permissions, and operational breakages.

• From Container Escape to Cloud Takeover: A Real-World Cloud Security Assessment

  Gleb Wam

  This case study explains how a privileged Kubernetes pod with host access can lead to container escape, control plane disruption, service account theft, and cloud resource takeover.

• ingress-nginx Is Archived: How We Migrated to kgateway (and Didn’t Break Prod)

  Nick Georgiou

  This case study explains how Plum migrated from ingress-nginx to kgateway and Gateway API in 12 weeks without production downtime.

  It covers inventory, staging validation, parallel running, mTLS decisions, and custom observability.

• Cost Optimization of Spark on Kubernetes Batch Workloads on Public Clouds

  Ankit Prakash Gupta

  This case study shows how Spark on Kubernetes batch workloads cut cloud costs by colocating executors with drivers, reducing inter-zone shuffle costs, and moving executors to Spot VMs safely.

More case studies →

Matching jobs

1. • Data Engineer with Beacon Biosignals

   • Salary: $150K to $170K a year

   • Location: remote from

   • Tech stack: Kubernetes, AWS, Helm, Javascript, Python, SQL, Typescript, PostgreSQL, RabbitMQ, Kafka

2. • Data Engineer with Dragos, Inc.

   • Salary: $54K to $275K a year

   • Location: remote from

   • Tech stack: Kubernetes, Docker, Go, Python, Rust

3. • Data Engineer with Dragos, Inc.

   • Salary: $153K to $253K a year

   • Location: remote from

   • Tech stack: Kubernetes, Docker, Go, Python

4. • DevOps Engineer with Arena Intelligence, Inc.

   • Salary: $90K to $261.91K a year

   • Location: based in the office in Bay Area, CA, USA

   • Tech stack: Kubernetes, AWS, GCP, Go, Rust, Redis, Terraform

5. • DevOps Engineer with DDN

   • Salary: $91.8K to $275K a year

   • Location: remote from

   • Tech stack: Kubernetes, GCP, On-premise, Helm, ArgoCD, Docker, Python, Terraform, GitHub Actions, Gitlab

Discover more Kubernetes jobs on Kube Careers →

Build something

• Multi-Agent A2A with the Agent Development Kit(ADK), Amazon EKS, and Gemini CLI

  xbill

  This tutorial shows how to deploy a 5-agent ADK system on Amazon EKS and test Agent-to-Agent workflows with Gemini CLI.

• Catching Helm Drift Before It Catches You

  Seralahthan

  This tutorial explains how to catch Helm drift in Kubernetes before manual kubectl changes break GitOps source-of-truth workflows.

• The Split-Brain Health Check: Fixing 502 Bad Gateway in GKE & Istio

  Kenrick Tandrian

  This tutorial explains why standard GKE Ingress breaks under Istio STRICT mTLS and shows how to replace it with an Istio Ingress Gateway, Gateway resource, and VirtualService.

• Kubernetes Operator for Synology Reverse Proxy Rules

  Julian Hassler

  This tutorial explains how to build a Kubernetes operator that automatically manages Synology DSM reverse proxy rules from annotated Services, Ingresses, and Argo CD Applications.

More tutorials →

Call for Papers closing soon

1. 2

   days

   ContainerDays & AI Context Singapore

   The Call For Paper is open until 31 July 2026 at GMT-4. More info →

   • Location: Singapore, SG

   • In-person conference organized by ContainerDays.

   • The conference starts on the 28 October 2026.

   • Apply here

2. 2

   days

   Cloud Native Summit APAC 2026

   The Call For Paper is open until 31 July 2026 at GMT-4. More info →

   • Location: Melbourne, AU

   • In-person conference organized by Cloud Native Summit.

   • The conference starts on the 29 October 2026.

   • Apply here

3. 2

   days

   ServerlessDays Cardiff 2026

   The Call For Paper is open until 31 July 2026 at GMT-4. More info →

   • Location: Cardiff, GB

   • In-person conference organized by ServerlessCWL.

   • The conference starts on the 3 October 2026.

   • Apply here

4. 2

   days

   Kubernetes Community Days Indonesia 2026

   The Call For Paper is open until 31 July 2026 at GMT-4. More info →

   • Location: Bandung, ID

   • In-person conference organized by Cloud Native Indonesia.

   • The conference starts on the 24 October 2026.

   • Apply here

5. 14

   days

   AI Coding Summit Berlin

   The Call For Paper is open until 12 August 2026 at GMT-4. More info →

   • Location: Berlin, DE and virtual

   • Online & in-person conference organized by GitNation.

   • The conference starts on the 4 December 2026.

   • Apply here

6. 16

   days

   Cloud Native AI Summit Europe

   The Call For Paper is open until 14 August 2026 at GMT-4. More info →

   • Location: Paris, FR

   • In-person conference organized by mate.dev.

   • The conference starts on the 3 December 2026.

   • Apply here

7. 17

   days

   Cloud Security Space 2026

   The Call For Paper is open until 15 August 2026 at GMT-4. More info →

   • Location: Buenos Aires, AR

   • In-person conference organized by Cloud Security Space.

   • The conference starts on the 9 October 2026.

   • Apply here

More articles

• Copy Fail in Kubernetes: PSS Restricted and RuntimeDefault Did Not Block AF_ALG

  Juliet Security Team

  This article explains why Kubernetes PSS Restricted and RuntimeDefault seccomp did not block AF_ALG access during Copy Fail testing.

  It shows why kernel attack surface still matters even when pods follow strict runtime defaults.

• The GPU Bill Was $40,000. Nobody Knew Why.

  Mateen Ali Anjum

  This article explains how to control runaway GPU spend in Kubernetes by adding taints, quotas, labels, Prometheus rules, and admission controls so teams can see who is using expensive GPU workloads and why.

• How Zero Trust Egress Policy Contains a Supply Chain Attack — The Axios npm Case

  Tracenyx Team

  This article explains how Kubernetes zero-trust egress policy can contain the Axios npm supply-chain attack by blocking C2 traffic, data exfiltration, and lateral movement from compromised pods.

• Using Kubernetes ConfigMaps as a Real-Time State Store

  Özcan Yarımdunya

  This article shows how to use Kubernetes ConfigMaps as a lightweight real-time state store by watching ConfigMap changes and faning events out with Python asyncio.

Even more articles →