Learn from production

• We Broke Our EKS Cluster Autoscaler During Amazon AL2023 Migration (and Fixed It)— Here’s What We Learned

  Dilshan Wijesooriya

  This case study describes how the author’s EKS cluster autoscaler broke after migrating to Amazon’s AL2023 image and how they resolved it by switching to IRSA (IAM Roles for Service Accounts) and adjusting permissions.

• Overcoming the Challenges of Mutating Webhooks: Our Journey to an Alternative

  Narendrakumar NJ

  Learn how UiPath replaced mutating webhooks with a Helm library solution, enabling flexible cross-service configuration management in Kubernetes without cluster-wide permissions.

• The Frustrating Life Cycle of a Kyverno-Generated Resource

  angeloxx

  This article dissects how Kyverno's policy generation, combined with Helm's namespace management, leads to race conditions, deletions, and re-creations that break deterministic behaviour, especially when synchronisation and background are enabled.

• OPA memory usage considerations and lessons from our transition to Kyverno

  Tanat Lokejaroenlarb

  Adevinta's SRE team replaced OPA's Gatekeeper with Kyverno to mitigate memory spikes caused by data.inventory syncing in high-churn clusters.

  Kyverno’s API-based dynamic context handling slashed Gatekeeper usage from 8GB to 2.7GB.

More case studies →

Matching jobs

1. • Data Engineer with NBC Universal

   • Salary: $100K to $130K a year

   • Location: based in the office (and remote from home) in New York, NY, USA

   • Tech stack: Kubernetes, AWS, GCP, Docker, SQL, Java, C++, Flink, Spark, Airflow

2. • DevOps Engineer with Booz Allen

   • Salary: $86.9K to $198K a year

   • Location: based in the office in Annapolis Junction, MD, USA

   • Tech stack: Kubernetes, Azure, Terraform, Cloudformation

3. • DevOps Engineer with Commerce

   • Salary: $99K to $172K a year

   • Location: remote from the United States of America

   • Tech stack: Kubernetes, AWS, Docker, Shell, Python, Scala, PHP, Ruby, Terraform, Ansible

4. • DevOps Engineer with Manulife

   • Salary: $110.53K to $205.27K a year

   • Location: based in the office (and remote from home) in Toronto, ON, CA

   • Tech stack: Kubernetes, Docker, Javascript, Java, Typescript, Terraform, Cloudformation, Jenkins, GitHub Actions

5. • DevOps Engineer with Shopmonkey

   • Salary: $165K to $185K a year

   • Location: based in the office (and remote from home) in Morgan Hill, CA, USA

   • Tech stack: Kubernetes, AWS, GCP, ArgoCD, Go, Shell, Typescript, Terraform, GitHub Actions, Gitlab

Discover more Kubernetes jobs on Kube Careers →

Build something

• Safeguarding OKE: Passwordless kubectl Access with OCI Instance Principals

  Ivan Delić

  This tutorial shows how to enable passwordless kubectl access to an Oracle Kubernetes Engine (OKE) cluster by using OCI Instance Principals, dynamic groups, scoped IAM policies, and the OCI CLI exec plugin.

• 🔐 Kubernetes Authentication & Authorization

  Sijo M Thomas

  This tutorial explains Kubernetes authentication (“who you are”) and authorization (“what you can do”) workflows.

  It shows how to issue user certificates, create a CertificateSigningRequest, approve it, and bind RBAC roles.

• No More Hardcoded Secrets: Automatic Database Credential Rotation with Vault, AKS and Postgres

  Poojan Mehta

  This tutorial sets up Vault's database secrets engine in AKS to generate short-lived Postgres credentials on demand, using ExternalSecrets and VaultDynamicSecret to sync them into native Kubernetes Secrets.

• Securing Kubernetes Resources Without a VPN

  Brian Sizemore

  This tutorial shows how to restrict access to Kubernetes services without a VPN using oauth2-proxy with ingress-nginx.

More tutorials →

More articles

• Post-Quantum Cryptography in Kubernetes

  This article explains how Kubernetes v1.33 enables hybrid post-quantum key exchange (X25519MLKEM768) by default via Go 1.24 and discusses implementation challenges.

• Enterprise Secret Management in MLOps: Kubernetes Security at Scale

  Jeffrey Taylor

  This article shows how to build enterprise-level secret management in an MLOps setup using tools like Sealed Secrets, Git encryption, and clear team boundaries for secure, scalable credential handling.

• AWS Config vs Kubernetes Native Policy Engines: Who Governs What?

  NURUDEEN KAMILU

  This article explains the governance differences between AWS Config and Kubernetes native policy engines and their complementary roles in cloud environments.

• Observing Egress Traffic with Istio

  Kai Burjack

  This article explains how to configure Istio to observe encrypted and unencrypted egress traffic in Kubernetes using TLS termination, origination, and certificate management.

Even more articles →