Learn Kubernetes Weekly issue 204 · 7 Oct 2026
Workload-Aware Scheduling, Automaxprocs Uses One CPU, Why gRPC Routes to One Pod, Static Kubernetes OIDC Issuers, ZSvirt Open-Sourced
This newsletter is brought to you by NeuBird — move beyond dashboards and runbooks with an AI agent that detects production issues, finds their root cause, and helps your team resolve them.
Articles
Workload-Aware Scheduling in Kubernetes 1.37
helayoty.substack.com
This article explains how Kubernetes 1.37 gives controllers shared APIs and a Go library for workload-aware scheduling, including gang scheduling and grouped workloads.
automaxprocs now costs your Go binary a CPU
medium.com
This article explains why automaxprocs can reduce the CPU available to a container on Go 1.25 and later, now that Go handles cgroup CPU limits itself.
Your gRPC Service Only Talks to One Pod. Here’s Why.
medium.com
This article explains why gRPC traffic can stay pinned to one Kubernetes pod and how a headless Service or an L7 proxy can spread individual requests across replicas.
Your Kubernetes OIDC issuer is just two static files
medium.com
This case study shows how an AKS-based GitOps platform gave on-premises clusters workload identity by publishing static OIDC discovery and JWKS files, avoiding API server changes after provisioning.
zsvirt.medium.com
This article explains why ZStack open-sourced ZSvirt, a KVM virtualization platform used in large environments, to offer auditable code, a stable GPLv3 license, and vendor independence.
Join FLOCK ’26: The Autonomous Ops Summit
Join NeuBird and industry leaders at FLOCK '26, October 14 in SF, built for SREs, platform engineers, and reliability leaders exploring autonomous ops.
Expect keynotes from a NASA astronaut and MIT Media Lab, hands-on breakouts, and curated seating.
Tutorials
Real Client IP Behind Istio Ambient Gateway: Secure X-Forwarded-For in Go
bysabbir.medium.com
This tutorial teaches how to preserve the real client IP behind an Istio ambient gateway with externalTrafficPolicy: Local and safely read X-Forwarded-For in Go.
KServe from Zero to Production: A Hands-On Engineer’s Guide to Model Serving on Kubernetes
medium.com
This tutorial teaches how to serve models with KServe through hands-on labs covering Standard and Knative modes, networking, autoscaling, security, canary releases, and LLM serving.
What happens inside the Kubernetes API server?
learnkube.com
This tutorial explains what happens inside the Kubernetes API server, covering:
- OpenAPI validation,
- authentication, RBAC, admission controllers,
- CEL policies,
- etcd storage, CRDs, watches, and audit logs.
Exploiting RCE vulnerabilities in ollama on Kubernetes
ruzickap.github.io
This tutorial deploys a deliberately old, vulnerable Ollama on Kubernetes and walks the RCE attack end to end, then draws out the hardening lessons.
Kubernetes jobs
DevOps Engineer with Redwood Materials
Salary: $69.55K to $330K a year
Location: based in the office in McCarran, NV, USA
Tech stack: Kubernetes, Kubernetes, EKS, AWS, Docker, On-premise, alerting, monitoring, logging, VPC
Software Engineer with Reddit
Salary: $229K to $267.1K a year
Location: fully remote
Tech stack: Kubernetes, Kubernetes, AWS, Amazon ECS, Amazon CloudWatch, AWS X-Ray, metrics, logs, observability, request tracing
Solution Engineer with Everpure
Salary: $141.4K to $212.1K a year
Location: based in the office in Philadelphia, PA, USA
Tech stack: Kubernetes, K8s, On-Prem, Kubernetes, AWS, Azure, GCP, TCP/IP, Storage, Databases
Solution Architect with Pluribus Digital
Salary: $180K to $190K a year
Location: fully remote
Tech stack: Kubernetes, Kubernetes, EKS, AWS, pipeline automation, compliance, DevSecOps, security, Aurora, NoSQL
Engineering Manager with Qualia
Salary: $67.91K to $423.5K a year
Location: remote from
Tech stack: Kubernetes, Kubernetes, AWS, compliance, PCI, SOC 2, OFAC screening, AWS IAM, security, MongoDB
Discover more Kubernetes jobs on Kube Careers →
Code & tools
Falco Event Generator: Test Falco Detection Rules
github.com/falcosecurity
Falco Event Generator creates suspicious system and Kubernetes activity so teams can safely test and benchmark Falco detection rules.
NooBaa Operator: S3 Storage Across Clouds on Kubernetes
github.com/noobaa
NooBaa Operator manages an S3-compatible object service on Kubernetes and connects storage from private clusters and multiple cloud providers behind one API.
PigeonEye: Fast Native Kubernetes GUI
github.com/tackish
PigeonEye is a fast native Kubernetes GUI that loads large clusters through the Table API and gives you multi-cluster search, logs, safe edits, debugging tools, and automatic CRD support.
Understudy: High Availability for Single-Replica Workloads
github.com/mitis-cloud
Understudy is a Kubernetes operator that starts a temporary replacement for a single-replica workload before a planned node disruption, helping reduce downtime without running two pods all day.
WaaS: Kubernetes-Native Remote Workspaces
github.com/XoRHub
WaaS creates browser-accessible Linux and Windows desktops as Kubernetes resources, with GitOps workflows, secure remote access, quotas, and OIDC and RBAC controls.
Other interesting projects:
Upcoming Kubernetes events
Oct
9
Open Source Summit Europe 2026
In-person conference organized by Linux Foundation.
Location: Prague, CZ
This event requires an entrance fee
Oct
9
In-person conference organized by Cloud Security Space.
Location: Buenos Aires, AR
This event requires an entrance fee
Oct
14
FLOCK '26: The Autonomous Ops Summit
In-person conference organized by NeuBird.
Location: San Francisco, CA, USA
This is a free event.
Oct
15
In-person conference organized by Containerkonferansen.
Location: Trondheim, NO
This event requires an entrance fee
Oct
15
In-person conference organized by CognitionX.
Location: Dubai, AE
This event requires an entrance fee
Oct
22
Online workshop organized by LearnKube.
This is a virtual event
This event requires an entrance fee
Kubernetes call for papers
5
days
KubeCon + CloudNativeCon Europe 2027
The Call For Paper is open until 12 October 2026 at UTC. More info →
Location: Barcelona, ES
In-person conference organized by CNCF.
The conference starts on the 18 March 2027.
- Apply here
12
days
The Call For Paper is open until 19 October 2026 at UTC. More info →
Location: Los Angeles, CA, USA
In-person conference organized by SCaLE.
The conference starts on the 1 April 2027.
- Apply here
47
days
The Call For Paper is open until 23 November 2026 at UTC. More info →
Location: Vilnius, LT
In-person conference organized by DATA MINER.
The conference starts on the 27 November 2026.
- Apply here
12
days
Cloud Native AI + Inference Day Europe
The Call For Paper is open until 19 October 2026 at UTC. More info →
Location: Barcelona, ES
In-person conference organized by CNCF.
The conference starts on the 15 March 2027.
- Apply here
25
days
The Call For Paper is open until 1 November 2026 at UTC. More info →
Location: Los Angeles, CA, USA
In-person conference organized by DevopsDays.
The conference starts on the 2 April 2027.
- Apply here
8
days
Global Summit on Data Science and Cloud Computing
The Call For Paper is open until 15 October 2026 at UTC. More info →
Location: Rome, IT
In-person conference organized by Noveltics Group.
The conference starts on the 20 October 2026.
- Apply here
2
days
NextGen Intelligence Conference: Data, Cloud & AI
The Call For Paper is open until 9 October 2026 at UTC. More info →
Location: London, GB
In-person conference organized by TechAI.
The conference starts on the 17 November 2026.
- Apply here
66
days
The Call For Paper is open until 12 December 2026 at UTC. More info →
Location: Apenheul, NL
In-person conference organized by Stichting Meetups.
The conference starts on the 11 December 2026.
- Apply here
29
days
Open Source Conference Kolkata
The Call For Paper is open until 5 November 2026 at UTC. More info →
Location: Kolkata, IN
In-person conference organized by Open Source Con India.
The conference starts on the 5 December 2026.
- Apply here
Until next time!
— Gulcan