This is issue 200!
I can't believe we managed to publish 200 issues without ever missing one! π±
I don't have much to say other than thank you!!!! for sticking around and reading them!
β Dan
π Articles
π₯ Benchmarking LLM Inference with Production Agent Traces](https://ku.bz/Lr41DRrlf)
This article explains how to benchmark LLM inference by replaying production agent traces to capture realistic session-level metrics and dependencies using OpenTelemetry Trace Replay for Inference Perf.
π₯ I Shipped Two Headlamp Plugins: One Checks Your Cluster, One Makes the Dashboard Look Good](https://ku.bz/tK4YdwtgW)
This article introduces two new Headlamp plugins: KubeBuddy for browser-side Kubernetes cluster auditing and Headlamp Theme Builder for creating custom dashboard themes.
Migrating from ingress-NGINX to Envoy gateway](https://ku.bz/mG7jhf-Q7)
This case study walks through moving from ingress-NGINX to Envoy Gateway, including the mistakes made on the way, like nginx annotations that do not map one-to-one onto Gateway API policies.
When failover isn't safe: building high-availability PostgreSQL on Kubernetes](https://ku.bz/lgDrfcM52)
This case study shows how a Datadog gameday exposed unsafe PostgreSQL failover on Kubernetes and how they made it safe with synchronous replication and Patroni.
Rebuilding a HIPAA CI/CD pipeline: signed promotion, OPA admission, and audit-grade evidence](https://ku.bz/TYS0yf264)
This case study shows how to implement a HIPAA-compliant CI/CD pipeline using Cosign for artifact signing, OPA Gatekeeper for admission control on EKS, and long-term evidence storage in S3.
π 90% of teams miss at least one of these before going live.
Our Kubernetes production-readiness checklist walks through every critical check, with a downloadable PDF worksheet to run with your team.
π Tutorials
π₯ Scanning Helm charts at scale with helmsniff](https://ku.bz/_K-S8Fv5M)
This tutorial shows how to use helmsniff to render thousands of Helm charts and report risky settings, like containers running as root, as a plain CSV you can analyse.
Local Platform Engineering on Your Laptop: vind, Sveltos and ArgoCD](https://ku.bz/bQmmMLsMk)
This tutorial builds a local multi-cluster lab with vind, then uses Sveltos and Argo CD to deploy to every cluster that carries the right label.
Migrating from AWS VPC CNI & Kube-Proxy to Cilium on EKS](https://ku.bz/sYGLb0l37)
This tutorial teaches how to migrate EKS from AWS VPC CNI and kube-proxy to Cilium using blue/green nodes, WireGuard encryption, and Hubble for observability.
Building a Hybrid Kubernetes Lab: Solving the βHost-Only vs. Bridgedβ Network Dilemma with MetalLB](https://ku.bz/lynZc_9xt)
This tutorial shows how to build a local Kubernetes lab in Vagrant where MetalLB actually works, by giving each VM both a host-only and a bridged network.
πΌ Kubernetes jobs
DevSecOps Engineer π° $54K to $440K a year Β· π’ based in the office in Seattle, WA, USA
Support Engineer π° $130K a year Β· π remote from
DevOps Engineer π° $72K to $253K a year Β· π’ based in the office in Montpellier, FR
Test Automation Engineer π° $162 to $275K a year Β· π remote from
DevSecOps Engineer π° USDΒ 134.1K to USDΒ 287.1K a year Β· π’ based in the office in Sydney, AU
π Discover more opportunities on Kube Careers.
π Tools and libraries
π₯ Kubernetes production readiness checklist](https://ku.bz/9zSG4sjDP)
Kubernetes production readiness checklist is a free, open checklist for taking applications to production on Kubernetes, covering app design, manifests, security, scaling and going live.
π₯ AegisBPF: eBPF runtime security agent for Linux](https://ku.bz/wd7SCHC3l)
AegisBPF is an eBPF agent that actually blocks unwanted file and network access at the Linux kernel level, instead of only alerting you after something already happened.
dtop: terminal dashboard for Docker containers](https://ku.bz/WBkFhLRSP)
dtop is a fast terminal dashboard written in Rust that shows what all your Docker containers are doing right now, across several hosts at once.
Polykube: portable workloads across many clusters](https://ku.bz/0WrtnwJND)
Polykube is a GitOps-native operator that runs the same workloads across clusters and clouds, with no central control plane and Cilium ClusterMesh carrying cross-cluster traffic.
NineVigil - Governance and sandboxing for AI agents on Kubernetes](https://ku.bz/CKghZJGt1)
NineVigil is a Kubernetes operator that runs AI agents inside gVisor sandboxes, closes their network egress with Cilium and keeps a tamper-evident audit record of every run.
More projects
π Upcoming Kubernetes events
π Advanced Kubernetes course π Sep 10
EuroBSDCon π Sep 13
π Code Europe π Sep 15
π Kubernetes Community Days Washington DC 2026 π Sep 15
Devopsdays London π Sep 17
π You can find more events on Kube Events.
π’ Call for papers closing soon
π₯ KubeCon + CloudNativeCon Europe 2027 β³ closes Oct 12
π₯ Cloud Native Days LA β³ closes Oct 19
π₯ UbuCon India 2026 β³ closes Sep 30
π Big Data Europe β³ closes Nov 23
π₯ Confoo 2027 β³ closes Sep 21
π₯ AI DevWorld 2027 β³ closes Sep 18
π₯ Cloud Native AI + Inference Day Europe β³ closes Oct 19
π₯ Devopsdays Los Angeles β³ closes Nov 1
Global Summit on Data Science and Cloud Computing β³ closes Oct 15
π You can find more Call for Papers on Kube Events.
That's a wrap on issue 200.
See you next week!
β Gulcan
]]>
