Learn Kubernetes Weekly issue 185 · 27 May 2026

Kubernetes Fix That Saved 600 Hours, Why Kubernetes Has No Login, Durable Workflows, Missing Operator Layers, KServe Production Failures

This issue is brought to you by [Qodo, the AI code integrity platform helping teams review, test, and ship reliable infrastructure code faster] (https://ku.bz/NvLHsnl-6)

Articles

  1. A one-line Kubernetes fix that saved 600 hours a year

    blog.cloudflare.com

    This article explains how Cloudflare cut Atlantis restart time from 30 minutes to 30 seconds by changing Kubernetes fsGroupChangePolicy, avoiding expensive recursive volume permission updates on a huge persistent volume.

  2. Why Kubernetes Has No Login — And How We Solved It for AuditRadar

    blog.audit-radar.com

    This article explains why vanilla Kubernetes has no real login event and shows a practical session-tracking workaround using credential-id fingerprints from audit logs, with a side-by-side comparison against OpenShift OAuth behavior.

  3. Durable Workflows Beyond Vercel: Version-Safe Orchestration for Kubernetes

    blog.platformatic.dev

    This article explains how Platformatic ensures durable workflows in Kubernetes by pinning executions to the correct code version and routing messages safely across deployments.

  4. The Missing Layers in Your Kubernetes Operator

    sourcehawk.medium.com

    This article explains that Kubernetes operators become hard to maintain without explicit component and resource-primitive layers between the controller and raw objects.

  5. Why Your KServe InferenceService Won't Become Ready: Four Production Failures and Fixes

    sodiq-jimoh.hashnode.dev

    This article explains four KServe readiness failures on k3d, ArgoCD, Knative, and Kourier, with root causes, terminal output, and working patches for production debugging.

AI writes the YAML. Who catches the risk?

Engineers share how they govern AI-generated Kubernetes configs before they hit production.

See what platform teams are actually doing

AI writes the YAML. Who catches the risk?

Tutorials

  1. Designing for Failure with CloudNativePG

    dylanmarkdacosta.medium.com

    This tutorial explains how to design CloudNativePG for production failure by using plugin-based backups, WAL archiving, point-in-time recovery, snapshots, and PgBouncer so recovery is treated as the real operational priority.

  2. Building a Production-Grade HA Kubernetes Cluster on a Homelab with $0 in Cloud Costs

    thiago-marsal.medium.com

    This tutorial shows how to build a high-availability k3s homelab cluster on Proxmox using embedded etcd, kube-vip, Rancher, Traefik, and Ansible automation.

  3. From ACM to ALB: A Step-by-Step Guide to Managed TLS/SSL in EKS Auto Mode

    medium.com

    This tutorial shows how to set up TLS-terminated ingress on EKS Auto Mode using ACM and an ALB, skipping the traditional AWS Load Balancer Controller installation and OIDC setup.

  4. Build a Production-Ready vLLM Inference Server on Kubernetes with AMD Instinct GPUs

    medium.com

    This tutorial teaches how to run a production-ready vLLM inference server on Kubernetes with AMD Instinct GPUs using containerd, the AMD GPU Operator, persistent storage, and MetalLB.

Kubernetes jobs

    • Software Engineer with Referrals Only

    • Salary: $47.97K to $247.5K a year

    • Location: based in the office in Brazil, BR

    • Tech stack: Kubernetes, Kubernetes, AWS, Azure, Docker, DevSecOps, Continuous Delivery, continuous integration, Kafka, object-oriented programming

    • Software Engineer with Tech Holding

    • Salary: $47.97K to $264K a year

    • Location: remote from

    • Tech stack: Kubernetes, Kubernetes, Azure, Docker, monitoring, logging, CI/CD pipelines, compliance, Secrets, OAuth

    • DevOps Engineer with Udacity

    • Salary: $90 to $484K a year

    • Location: remote from

    • Tech stack: Kubernetes, Kubernetes, AWS EC2, AWS, Docker, Amazon CloudWatch, monitoring, logging, VPC, ingress controllers

    • Software Engineer with Tenable

    • Salary: US$101.77K to US$261.8K a year

    • Location: based in the office in Tel Aviv, IL

    • Tech stack: Kubernetes, Kubernetes, AWS, Azure, GCP, cybersecurity, Redis, Elasticsearch, Snowflake, Kafka

    • DevOps Engineer with Deutsche Telekom

    • Salary: €31.2K a year

    • Location: based in the office in Košice, SK

    • Tech stack: Kubernetes, Kubernetes, AWS, Azure, Docker, Jaeger, Grafana, ELK, Icinga, Prometheus

Discover more Kubernetes jobs on Kube Careers →

Code & tools

  1. Zeropod: scale to zero

    github.com/ctrox

    zeropod is a tool that automatically checkpoints containers to disk after a certain amount of time of the last TCP connection, allowing for fast and seamless scaling down to zero.

  2. SlimFaas: Function As A Service

    github.com/AxaFrance

    SlimFaas is a tool for creating functions as a service on Kubernetes.

    It allows you to scale to zero, supports asynchronous and synchronous calls, the retry pattern, and more.

  3. Kubedock for Running Docker-Based Tests on Kubernetes

    github.com/joyrex2001

    Kubedock lets you run Docker API based test workloads on Kubernetes without Docker-in-Docker, which makes it useful for Testcontainers, CI pipelines, and ephemeral test environments.

  4. Kubeconform

    github.com/yannh

    Kubeconform is a Kubernetes manifests validation tool.

    Similar to Kubeval, but with the following improvements:

    1. High performance.
    2. Remote or local schema locations
    3. Up-to-date schemas for all recent versions of Kubernetes.
  5. Harbor

    github.com/goharbor

    Harbor is a CNCF-graduated open source container registry that stores, signs, and scans images, with built-in RBAC, LDAP/OIDC support, vulnerability scanning, policy-based replication, and a full REST API.

Other interesting projects:

Subscribe to Learn Kubernetes Weekly

Trusted by 77K engineers. Delivered 185 issues and counting.

or subscribe via

Upcoming Kubernetes events

  1. Jun

    1

    DevOpsCon San Diego 2026

    Online & in-person conference organized by S&S Media.

    • Location: San Diego, CA, USA and virtual

    • This event requires an entrance fee

  2. Jun

    2

    OW2Con

    In-person conference organized by OW2.

    • Location: Paris-Châtillon, France

    • This event requires an entrance fee

  3. Jun

    2

    AI Native DevCon London 2026

    In-person conference organized by AI Native Dev.

    • Location: London, GB

    • This event requires an entrance fee

  4. Jun

    2

    SREday NYC 2026

    In-person conference organized by SREday.

    • Location: New York, NY, USA

    • This event requires an entrance fee

  5. Jun

    4

    DevTalks

    In-person conference organized by DevTalks.

    • Location: Bucharest, RO

    • This event requires an entrance fee

  6. Jun

    11

    Advanced Kubernetes course

    Online workshop organized by LearnKube.

    • This is a virtual event

    • This event requires an entrance fee

Discover more Kubernetes events on Kube Events →

Thanks to our sponsors who make Kube Today possible

  • LearnKube
  • Akamai
  • Fairwinds
  • Densify
Find out more about being a sponsor →

Kubernetes call for papers

  1. 5

    days

    Cloud Native Days Norway

    The Call For Paper is open until 1 June 2026 at UTC. More info →
    • Location: Bergen, NO

    • In-person conference organized by CND Norway.

    • The conference starts on the 27 October 2026.

    • Apply here
  2. 5

    days

    KubeCon + CloudNativeCon North America 2026

    The Call For Paper is open until 1 June 2026 at UTC. More info →
    • Location: Los Angeles, CA, USA

    • In-person conference organized by Linux Foundation.

    • The conference starts on the 26 October 2026.

    • Apply here
  3. 26

    days

    Dutch Cloud Native Day

    The Call For Paper is open until 22 June 2026 at UTC. More info →
    • Location: Utrecht, NL

    • In-person conference organized by Dutch CND.

    • The conference starts on the 29 October 2026.

    • Apply here
  4. 19

    days

    Kubernetes Community Days San Francisco Bay Area 2026

    The Call For Paper is open until 15 June 2026 at UTC. More info →
    • Location: San Francisco, US

    • In-person conference organized by KCD SF Bay Area.

    • The conference starts on the 1 September 2026.

    • Apply here
  5. 40

    days

    Kubernetes Community Days São Paulo 2026

    The Call For Paper is open until 6 July 2026 at UTC. More info →
    • Location: São Paulo, BR

    • In-person conference organized by KCD Brasil.

    • The conference starts on the 26 September 2026.

    • Apply here
  6. 65

    days

    ContainerDays & AI Context Singapore

    The Call For Paper is open until 31 July 2026 at UTC. More info →
    • Location: Singapore, SG

    • In-person conference organized by ContainerDays.

    • The conference starts on the 28 October 2026.

    • Apply here
  7. 31

    days

    Kubernetes Community Days Washington DC 2026

    The Call For Paper is open until 27 June 2026 at UTC. More info →
    • Location: Washington, DC, USA

    • In-person conference organized by KCD Washington DC.

    • The conference starts on the 15 September 2026.

    • Apply here
  8. 5

    days

    Kubernetes Community Days Melbourne 2026

    The Call For Paper is open until 1 June 2026 at UTC. More info →
    • Location: Melbourne, AU

    • In-person conference organized by KCD Australia.

    • The conference starts on the 4 August 2026.

    • Apply here
  9. 13

    days

    Kubernetes Community Days UK - Edinburgh 2026

    The Call For Paper is open until 9 June 2026 at UTC. More info →
    • Location: London, GB

    • In-person conference organized by KCD UK.

    • The conference starts on the 19 October 2026.

    • Apply here

Thank you for reading.

See you next week!

— Gulcan

Subscribe to Learn Kubernetes Weekly

Trusted by 77K engineers. Delivered 185 issues and counting.

or subscribe via