Learn Kubernetes Weekly issue 194 · 29 Jul 2026

3-Person Team Built an AI SRE, $40, 000 GPU Bill Mystery, PSS Restricted Did Not Block AF_ALG, One Registry for 6 AKS Clusters, GitOps with Terraform

This issue is brought to you by Isovalent — enterprise-grade Kubernetes networking and security, built by the creators of Cilium and eBPF.

We need your help!

The fine people at Isovalent are getting ready for the "2026 State of Kubernetes Networking" report.

Your input will help build the next community-driven report on Kubernetes networking trends.

The report takes only a few minutes, and it's here.

— Dan

Articles

  1. We’re a 3-person tech team running production Kubernetes — So we built an AI SRE

    medium.com

    This case study shows how a 3-person team built a Claude-based AI SRE that triages SigNoz alerts, checks Kubernetes, GitLab, logs, traces, and Slack, then ignores noise, escalates, or runs safe fixes.

  2. The GPU Bill Was $40,000. Nobody Knew Why.

    medium.com

    This article explains how to control runaway GPU spend in Kubernetes by adding taints, quotas, labels, Prometheus rules, and admission controls so teams can see who is using expensive GPU workloads and why.

  3. Copy Fail in Kubernetes: PSS Restricted and RuntimeDefault Did Not Block AF_ALG

    juliet.sh

    This article explains why Kubernetes PSS Restricted and RuntimeDefault seccomp did not block AF_ALG access during Copy Fail testing.

    It shows why kernel attack surface still matters even when pods follow strict runtime defaults.

  4. How We Set Up One Private Container Registry for 6 AKS Clusters Across 3 Regions and What Broke Along the Way

    dev.to

    This case study explains how one private container registry was shared across six AKS clusters in three regions.

    It covers ACR geo-replication, image pull reliability, network access, permissions, and operational breakages.

  5. GitOps with Terraform using tofu-controller: Grafana and Hashicorp Vault as Code

    medium.com

    This article shows how to use tofu-controller to manage Terraform resources with GitOps for external systems like Grafana dashboards and HashiCorp Vault policies with continuous reconciliation and automatic drift detection.

Help Us Map The State of Kubernetes Networking in 2026

Help shape the industry's biggest Kubernetes networking survey.

CNI, ingress, service mesh, network policy: your answers drive the 2026 report, plus a chance to win CNCF certification vouchers.

Take the survey

Help Us Map The State of Kubernetes Networking in 2026

Tutorials

  1. Making and scaling a game server in Kubernetes using agones

    noe-t.dev

    This tutorial builds a rock-paper-scissors game server in Go integrated with Agones SDK, deploys it as a Fleet on Kubernetes, creates a matchmaking service using Watermill Pub/Sub with GameServerAllocation, and sets up autoscaling with FleetAutoscaler.

  2. Multi-Agent A2A with the Agent Development Kit(ADK), Amazon EKS, and Gemini CLI

    dev.to

    This tutorial shows how to deploy a 5-agent ADK system on Amazon EKS and test Agent-to-Agent workflows with Gemini CLI.

  3. Docker Image Signing and Verification

    medium.com

    This tutorial explains how to sign and verify Docker images in Amazon ECR using Cosign and AWS KMS.

    It also shows how trusted image enforcement can fit into EKS and Kyverno-based supply chain security.

Kubernetes jobs

    • Site Reliability Engineer with MyFitnessPal

    • Salary: $120K to $165K a year

    • Location: remote from

    • Tech stack: Kubernetes, Kubernetes, AWS, Docker, metrics, logs, traces, observability, Datadog, Envoy

    • Software Engineer with Optimove

    • Salary: US$72K to US$297K a year

    • Location: based in the office in Tel Aviv, IL

    • Tech stack: Kubernetes, Kubernetes, Docker, Google Pub/Sub, GCP, alerting, monitoring, logging, tracing, CI/CD pipelines

    • Software Engineer with Pinterest

    • Salary: $177.19K to $364.8K a year

    • Location: remote from

    • Tech stack: Kubernetes, Kubernetes, EKS, AWS, logging, Envoy, Terraform, SCIM, DLP, OIDC

    • DevOps Engineer with RobCo

    • Salary: US$70.74K to US$440K a year

    • Location: based in the office in Munich, DE

    • Tech stack: Kubernetes, Kubernetes, AWS EC2, EKS, AWS, alerting, monitoring, Datadog, Grafana, Prometheus

    • Software Architect with IONOS EN

    • Salary: US$162 to US$303.6K a year

    • Location: based in the office (and remote from home) in Karlsruhe, DE

    • Tech stack: Kubernetes, Kubernetes, AWS, Azure, GCP, Vector Databases, distributed databases, AutoGen, RAG, CrewAI

Discover more Kubernetes jobs on Kube Careers →

Code & tools

  1. PIQC: vLLM inference fact collector for Kubernetes

    github.com/paralleliq

    PIQC scans Kubernetes clusters for vLLM and Ray Serve workloads, collects GPU, model, cost, utilization, KV cache, and waste facts, then prints an actionable inference cost report.

  2. Kogaro – Kubernetes Configuration Hygiene Agent

    github.com/topiaruss

    Kogaro continuously validates Kubernetes config with 60+ checks across reference, resource, security, image, and network domains, catching silent failures before they impact production.

  3. Fulling: AI-Powered Full-Stack Development Platform

    github.com/FullAgent

    Fulling automatically sets up a complete development environment with Next.js, PostgreSQL, and Claude Code so you can build full-stack apps through natural language conversation.

  4. Grafana Beyla: auto-instrumentation

    github.com/grafana

    Grafana Beyla is an open source eBPF-based tool that auto-instruments HTTP/gRPC apps to collect essential traces and RED metrics and exports them in OpenTelemetry or Prometheus formats.

  5. NVIDIA AICR – AI Cluster Runtime for Kubernetes

    github.com/NVIDIA

    NVIDIA AICR provides optimized, validated, and reproducible GPU runtime tooling for Kubernetes, with recipes for deploying training and inference stacks on NVIDIA-accelerated clusters.

Other interesting projects:

Subscribe to Learn Kubernetes Weekly

Trusted by 77K engineers. Delivered 194 issues and counting.

or subscribe via

Upcoming Kubernetes events

  1. Jul

    30

    Kuber Community Day

    Online & in-person conference organized by Kuber Community Day.

    • Location: Moscow, RU and virtual

    • This is a free event.

  2. Jul

    30

    KubeCon + CloudNativeCon Japan 2026

    In-person conference organized by Linux Foundation.

    • Location: Yokohama, JP

    • This event requires an entrance fee

  3. Aug

    2

    Kubernetes and nano-vllm

    In-person meetup organized by Silicon Valley Hands On Programming Events.

    • Location: Mountain View, CA, USA

    • This is a free event.

  4. Aug

    4

    Kubernetes Community Days Melbourne 2026

    In-person conference organized by KCD Australia.

    • Location: Melbourne, AU

    • This event requires an entrance fee

  5. Aug

    5

    Building Telkomsel's Autonomous Kubernetes Right-Sizing with ML

    Online & in-person meetup organized by KSUG.AI Australia.

    • Location: Melbourne, AU and virtual

    • This is a free event.

  6. Sept

    10

    Advanced Kubernetes course

    Online workshop organized by LearnKube.

    • This is a virtual event

    • This event requires an entrance fee

Discover more Kubernetes events on Kube Events →

Thanks to our sponsors who make Kube Today possible

  • LearnKube
  • Akamai
  • Fairwinds
  • Densify
Find out more about being a sponsor →

Kubernetes call for papers

  1. 2

    days

    ContainerDays & AI Context Singapore

    The Call For Paper is open until 31 July 2026 at UTC. More info →
    • Location: Singapore, SG

    • In-person conference organized by ContainerDays.

    • The conference starts on the 28 October 2026.

    • Apply here
  2. 18

    days

    Kubernetes Community Days Suisse Romande 2026

    The Call For Paper is open until 16 August 2026 at UTC. More info →
    • Location: Geneva, CH

    • In-person conference organized by KCD Suisse Romande.

    • The conference starts on the 9 December 2026.

    • Apply here
  3. 2

    days

    Kubernetes Community Days Indonesia 2026

    The Call For Paper is open until 1 August 2026 at UTC. More info →
    • Location: Bandung, ID

    • In-person conference organized by Cloud Native Indonesia.

    • The conference starts on the 24 October 2026.

    • Apply here
  4. 33

    days

    OmniOpenCon 2026

    The Call For Paper is open until 31 August 2026 at UTC. More info →
    • Location: Bucharest, RO

    • In-person conference organized by OmniOpenCon.

    • The conference starts on the 18 October 2026.

    • Apply here
  5. 16

    days

    Cloud Native AI Summit Europe

    The Call For Paper is open until 14 August 2026 at UTC. More info →
    • Location: Paris, FR

    • In-person conference organized by mate.dev.

    • The conference starts on the 3 December 2026.

    • Apply here
  6. 17

    days

    Cloud Security Space 2026

    The Call For Paper is open until 15 August 2026 at UTC. More info →
    • Location: Buenos Aires, AR

    • In-person conference organized by Cloud Security Space.

    • The conference starts on the 9 October 2026.

    • Apply here
  7. 30

    days

    Monster Scale Summit 2027

    The Call For Paper is open until 28 August 2026 at UTC. More info →
    • This is a virtual event

    • Online conference organized by ScyllaDB.

    • The conference starts on the 11 March 2027.

    • Apply here
  8. 63

    days

    UbuCon India 2026

    The Call For Paper is open until 30 September 2026 at UTC. More info →
    • Location: Bengaluru, IN

    • In-person conference organized by Canonical.

    • The conference starts on the 15 November 2026.

    • Apply here
  9. 78

    days

    Global Summit on Data Science and Cloud Computing

    The Call For Paper is open until 15 October 2026 at UTC. More info →
    • Location: Rome, IT

    • In-person conference organized by Noveltics Group.

    • The conference starts on the 20 October 2026.

    • Apply here

That wraps things up.

Back next Wednesday.

— Gulcan

Subscribe to Learn Kubernetes Weekly

Trusted by 77K engineers. Delivered 194 issues and counting.

or subscribe via