Learn Kubernetes Weekly issue 200 · 9 Sept 2026
Benchmarking LLM Inference, I Shipped Two Headlamp Plugins, Migrating from ingress-NGINX, building high-availability PostgreSQL
This newsletter is brought to you by LearnKube — master Kubernetes with hands-on training designed for engineers who want to learn the smart way.
This is issue 200!
I can't believe we managed to publish 200 issues without ever missing one! 😱
I don't have much to say other than thank you!!!! for sticking around and reading them!
— Dan
Articles
Benchmarking LLM Inference with Production Agent Traces
medium.com
This article explains how to benchmark LLM inference by replaying production agent traces to capture realistic session-level metrics and dependencies using OpenTelemetry Trace Replay for Inference Perf.
I Shipped Two Headlamp Plugins: One Checks Your Cluster, One Makes the Dashboard Look Good
pixelrobots.co.uk
This article introduces two new Headlamp plugins: KubeBuddy for browser-side Kubernetes cluster auditing and Headlamp Theme Builder for creating custom dashboard themes.
Migrating from ingress-NGINX to Envoy gateway
mijndertstuij.nl
This case study walks through moving from ingress-NGINX to Envoy Gateway, including the mistakes made on the way, like nginx annotations that do not map one-to-one onto Gateway API policies.
When failover isn't safe: building high-availability PostgreSQL on Kubernetes
www.datadoghq.com
This case study shows how a Datadog gameday exposed unsafe PostgreSQL failover on Kubernetes and how they made it safe with synchronous replication and Patroni.
Rebuilding a HIPAA CI/CD pipeline: signed promotion, OPA admission, and audit-grade evidence
dev.to
This case study shows how to implement a HIPAA-compliant CI/CD pipeline using Cosign for artifact signing, OPA Gatekeeper for admission control on EKS, and long-term evidence storage in S3.
90% of teams miss at least one of these before going live.
Our Kubernetes production-readiness checklist walks through every critical check, with a downloadable PDF worksheet to run with your team.
Tutorials
Scanning Helm charts at scale with helmsniff
vahid-r.com
This tutorial shows how to use helmsniff to render thousands of Helm charts and report risky settings, like containers running as root, as a plain CSV you can analyse.
Local Platform Engineering on Your Laptop: vind, Sveltos and ArgoCD
medium.com
This tutorial builds a local multi-cluster lab with vind, then uses Sveltos and Argo CD to deploy to every cluster that carries the right label.
Migrating from AWS VPC CNI & Kube-Proxy to Cilium on EKS
medium.com
This tutorial teaches how to migrate EKS from AWS VPC CNI and kube-proxy to Cilium using blue/green nodes, WireGuard encryption, and Hubble for observability.
Building a Hybrid Kubernetes Lab: Solving the “Host-Only vs. Bridged” Network Dilemma with MetalLB
medium.com
This tutorial shows how to build a local Kubernetes lab in Vagrant where MetalLB actually works, by giving each VM both a host-only and a bridged network.
Kubernetes jobs
DevSecOps Engineer with SoFi
Salary: $54K to $440K a year
Location: based in the office in Seattle, WA, USA
Tech stack: Kubernetes, Cloud Platforms, microservice architectures, Kubernetes workloads, Kubernetes, cloud-native services, Containers, Kubernetes-based applications, alerting, monitoring
Support Engineer with Dragos, Inc.
Salary: $130K a year
Location: remote from
Tech stack: Kubernetes, Kubernetes, AWS EC2, EKS, AWS, Docker, alerting, alerts, monitoring, logging
DevOps Engineer with Meritis
Salary: $72K to $253K a year
Location: based in the office in Montpellier, FR
Tech stack: Kubernetes, Kubernetes, AWS, Azure, Docker, GCP, monitoring, Datadog, Grafana, ELK
Test Automation Engineer with Sporty Group
Salary: $162 to $275K a year
Location: remote from
Tech stack: Kubernetes, K8s, Kubernetes, AWS, Docker, GitHub Actions, Jenkins, Mongo DB, MongoDB, MySQL
DevSecOps Engineer with Firmus Technologies
Salary: USD 134.1K to USD 287.1K a year
Location: based in the office in Sydney, AU
Tech stack: Kubernetes, Kubernetes, on-premises, AWS, Azure, Cloud, GCP, Security monitoring, incident response, ArgoCD
Discover more Kubernetes jobs on Kube Careers →
Code & tools
Kubernetes production readiness checklist
github.com/learnk8s
Kubernetes production readiness checklist is a free, open checklist for taking applications to production on Kubernetes, covering app design, manifests, security, scaling and going live.
AegisBPF: eBPF runtime security agent for Linux
github.com/ErenAri
AegisBPF is an eBPF agent that actually blocks unwanted file and network access at the Linux kernel level, instead of only alerting you after something already happened.
dtop: terminal dashboard for Docker containers
github.com/amir20
dtop is a fast terminal dashboard written in Rust that shows what all your Docker containers are doing right now, across several hosts at once.
Polykube: portable workloads across many clusters
github.com/Kismet-Engineering
Polykube is a GitOps-native operator that runs the same workloads across clusters and clouds, with no central control plane and Cilium ClusterMesh carrying cross-cluster traffic.
NineVigil - Governance and sandboxing for AI agents on Kubernetes
github.com/Clawdlinux
NineVigil is a Kubernetes operator that runs AI agents inside gVisor sandboxes, closes their network egress with Cilium and keeps a tamper-evident audit record of every run.
Other interesting projects:
Upcoming Kubernetes events
Sept
10
Online workshop organized by LearnKube.
This is a virtual event
This event requires an entrance fee
Sept
13
In-person conference organized by EuroBSDCon Foundation.
Location: Brussels, BE
This event requires an entrance fee
Sept
15
In-person conference organized by ode Europe.
Location: Warsaw, PL
This event requires an entrance fee
Sept
15
Kubernetes Community Days Washington DC 2026
In-person conference organized by KCD Washington DC.
Location: Washington, DC, USA
This event requires an entrance fee
Sept
17
In-person conference organized by Devopsdays.
Location: London, UK
This event requires an entrance fee
Kubernetes call for papers
33
days
KubeCon + CloudNativeCon Europe 2027
The Call For Paper is open until 12 October 2026 at UTC. More info →
Location: Barcelona, ES
In-person conference organized by CNCF.
The conference starts on the 18 March 2027.
- Apply here
40
days
The Call For Paper is open until 19 October 2026 at UTC. More info →
Location: Los Angeles, CA, USA
In-person conference organized by SCaLE.
The conference starts on the 1 April 2027.
- Apply here
21
days
The Call For Paper is open until 30 September 2026 at UTC. More info →
Location: Bengaluru, IN
In-person conference organized by Canonical.
The conference starts on the 15 November 2026.
- Apply here
75
days
The Call For Paper is open until 23 November 2026 at UTC. More info →
Location: Vilnius, LT
In-person conference organized by DATA MINER.
The conference starts on the 27 November 2026.
- Apply here
12
days
The Call For Paper is open until 21 September 2026 at UTC. More info →
Location: Montreal, CA
In-person conference organized by ConFoo.
The conference starts on the 26 February 2027.
- Apply here
9
days
The Call For Paper is open until 18 September 2026 at UTC. More info →
Location: Santa Clara, CA, USA
In-person conference organized by DevNetwork.
The conference starts on the 11 February 2027.
- Apply here
40
days
Cloud Native AI + Inference Day Europe
The Call For Paper is open until 19 October 2026 at UTC. More info →
Location: Barcelona, ES
In-person conference organized by CNCF.
The conference starts on the 15 March 2027.
- Apply here
53
days
The Call For Paper is open until 1 November 2026 at UTC. More info →
Location: Los Angeles, CA, USA
In-person conference organized by DevopsDays.
The conference starts on the 2 April 2027.
- Apply here
36
days
Global Summit on Data Science and Cloud Computing
The Call For Paper is open until 15 October 2026 at UTC. More info →
Location: Rome, IT
In-person conference organized by Noveltics Group.
The conference starts on the 20 October 2026.
- Apply here
That's a wrap on issue 200.
See you next week!
— Gulcan