Spotlight
Blake Gillman
This tutorial shows how to secure east-west traffic in GKE using an Internal Regional Gateway with Envoy proxies, certificates, HTTP Routes with path rewriting, and a zero-trust architecture for service-to-service communication.
This blog post tells how the Render team:
Zach Smith
This tutorial shows how to build a hub-style multi-cluster cert-manager control plane where a central hub cluster manages certificate issuance and distribution across multiple spoke clusters using cert-manager and trust-manager.
Philip McClarence
This article covers running PostgreSQL on Kubernetes in production — comparing Zalando, Crunchy and CloudNativePG operators, storage class decisions, backup strategies, connection pooling, and a take on when Kubernetes is overkill for databases.
Tools and utilities
Luxury Yacht is a cross-platform desktop app for managing Kubernetes clusters, available for Linux, macOS, and Windows, built with Go and Wails.
Kube Binpacking Exporter exposes Prometheus metrics that show how efficiently your cluster packs requested CPU and memory across nodes, groups, and DaemonSet overhead so you can measure fragmentation over time.
Kogaro continuously validates Kubernetes config with 60+ checks across reference, resource, security, image, and network domains, catching silent failures before they impact production.
Hortator lets AI agents spawn sub-agents at runtime, with each agent running in its own pod with budget caps, network policies, PII redaction, and capability inheritance so children can never escalate beyond their parent's permissions.
This repo contains 20+ tools that auto-generate Kubernetes architecture diagrams from manifests, Helm charts, or cluster state.
Events starting soon
July 1, 2026
Location: Amsterdam, NL
This is a free event.
July 1, 2026
Location: Springfield, MI, USA
This is a free event.
July 2, 2026
Location: Mannheim, DE
This event requires an entrance fee
July 2, 2026
This is a virtual event
This is a free event.
July 2, 2026
Location: Bunnik, NL
This is a free event.
July 2, 2026
Location: San Francisco, CA, USA
This event requires an entrance fee
Learn from production
Kalyan Josyula
This case study shows how a team traced repeated pod OOM kills in ASP.NET Core to native memory growth from zombie SignalR connections, glibc fragmentation, and kernel socket buffers.
Aditya Suryawanshi
This is a war story about a 3-person startup that replaced a $14,850/month over-engineered Kubernetes setup on AWS with Fly.io for $680, cutting P99 latency from 320ms to 180ms and deploy time from 8 minutes to 45 seconds.
Ejiroghene Laurel Dafe
This case study shows how one engineer resolved two real Kubernetes production incidents involving an overly aggressive Ingress rate limit and Istio breaking non-HTTP socket traffic.
Maxim Nazarenko
This case study explains how to migrate bound Kubernetes volumes from deprecated in-tree Azure Disk provisioning to CSI with in-place PVC re-binding, minimal restarts, and no data loss across production disks.
Matching jobs
DevOps Engineer with Miratech
Salary: $81K to $297K a year
Location: remote from
Tech stack: Kubernetes, AWS, ArgoCD, Flux, Docker, Python, Cloudformation, Terraform, GitHub Actions, Jenkins
Engineering Manager with FIRY
Salary: $259K a year
Location: based in the office (and remote from home) in San Francisco, CA, USA
Tech stack: Kubernetes, AWS, Docker, Go, Java, Javascript, Python, Ruby
Head of Site Reliability Engineering with FIRY
Salary: $58.5K to $3.29L a year
Location: based in the office (and remote from home) in Bengaluru, IN
Tech stack: Kubernetes, AWS, ArgoCD, Go, Java, Python, GitHub Actions, Datadog, Prometheus, Jaeger
Head of Site Reliability Engineering with Kontakt.io
Salary: $196.2K to $357.5K a year
Location: based in the office in New York, NY, USA
Tech stack: Kubernetes, AWS, Docker, Terraform, Datadog, Grafana, Prometheus
Platform Engineer with Inversion
Salary: $139K to $201K a year
Location: based in the office in Playa Vista, CA, USA
Tech stack: Kubernetes, AWS, GCP, Docker, Python, Shell, Terraform, GitHub Actions, Jenkins, Grafana
Build something
Shanaka Jayasundera
This tutorial shows how to set up Kubernetes Gateway API on EKS using Istio Ambient Mesh exposed through AWS ALB, with Terraform, ArgoCD, and a layered architecture separating infra from app deployment.
Moeid Heidari
This tutorial teaches how to deploy Crossview on Kubernetes with Helm and secure it for enterprise use with session auth, SSO, proxy header auth, RBAC, TLS, and high-availability settings.
David Kornel
This tutorial shows how to test Kubernetes deployments and operators from Java on real clusters without heavy boilerplate by using kubetest4j on top of the Fabric8 client.
Shawrup K Suter
This tutorial shows how CRaC can cut Spring Boot startup time on Kubernetes from 23 seconds to 2.8 seconds and explains the real production issues around AWS SDK checkpointing and OpenTelemetry.
More articles
Josh Woolbright
This tutorial shows how to secure an ArgoCD based EKS GitOps workflow with External Secrets Operator, IRSA, and AWS SSM Parameter Store so secrets stay out of Git and sync safely into Kubernetes.
rammi-dev
This article explains how Spark Connect, CRIU, and ZeroPod can freeze idle Spark drivers to near-zero resources and restore full session state in about 300 milliseconds on Kubernetes.
Marco Piraccini
This article explains how Kubernetes skew protection routes traffic based on app version to prevent frontend and backend mismatches during deployments, and version-aware routing using the Gateway API.
Abhishek Gupta
This article explains how the DocumentDB Kubernetes Operator delivers high availability with automatic failover, replica promotion, and optional zone, region, and multi-cloud resilience.
