Learn from production

• How We Rebuilt Our Vault Architecture with Raft, Snapshots, and DR

  BioCatch Tech Blog

  This case study explains how BioCatch migrated their Vault environment from costly external storage to Raft, enabling high availability, easy disaster recovery, and lower operational costs in Kubernetes.

• We Broke Our EKS Cluster Autoscaler During Amazon AL2023 Migration (and Fixed It)— Here’s What We Learned

  Dilshan Wijesooriya

  This case study describes how the author’s EKS cluster autoscaler broke after migrating to Amazon’s AL2023 image and how they resolved it by switching to IRSA (IAM Roles for Service Accounts) and adjusting permissions.

• Overcoming the Challenges of Mutating Webhooks: Our Journey to an Alternative

  Narendrakumar NJ

  Learn how UiPath replaced mutating webhooks with a Helm library solution, enabling flexible cross-service configuration management in Kubernetes without cluster-wide permissions.

• The Frustrating Life Cycle of a Kyverno-Generated Resource

  angeloxx

  This article dissects how Kyverno's policy generation, combined with Helm's namespace management, leads to race conditions, deletions, and re-creations that break deterministic behaviour, especially when synchronisation and background are enabled.

More case studies →

Matching jobs

1. • DevSecOps Engineer with Built Technologies

   • Salary: $120K to $185K a year

   • Location: fully remote

   • Tech stack: Kubernetes, AWS, Python, Javascript, Typescript, Go, SQL, C++, C#, Snowflake

2. • Machine Learning Engineer with Grafana Labs

   • Salary: CA$186.37K to CA$223.64K a year

   • Location: remote from Canada

   • Tech stack: Kubernetes, AWS, GCP, Azure, Docker, Python, Javascript, Typescript, Go, Rust

3. • Platform Engineer with Geotab

   • Salary: $38.56K to $330K a year

   • Location: fully remote

   • Tech stack: Kubernetes, GCP, OpenShift, ArgoCD, Docker, Java, Python, Shell, Go, Terraform

4. • Platform Engineer with National Information Solutions Cooperative (NISC)

   • Salary: $24.75K to $484K a year

   • Location: based in the office (and remote from home) in Cedar Rapids, IA; Lake Saint Louis, MO; Mandan, ND, USA

   • Tech stack: Kubernetes, AWS, Docker, SQL, Python, Java, Typescript, Cassandra, Spark, Terraform

5. • Software Engineer with Forter

   • Salary: $67.5K to $660K a year

   • Location: based in the office (and remote from home) in NYC, NY, USA

   • Tech stack: Kubernetes, AWS, GCP, Azure, Docker, Python, Java, Kotlin, Rust, Go

Discover more Kubernetes jobs on Kube Careers →

Build something

• Secure your Kubernetes Cluster with Kong and Keycloak

  Armel de Marsac

  This article shows how to use the Kong OIDC plugin together with Keycloak to secure cluster services and HTTP routes at the API gateway level.

• Run and Observe IPv6 on Kubernetes with Cilium

  Isovalent

  This tutorial walks you through enabling, running, and monitoring IPv6 networking on Kubernetes clusters using Cilium

• SPIFFE & SPIRE: Your Kubernetes Workloads’ Secret Identity Agency

  Mohammed-Reda TARMIDI

  This tutorial walks you through deploying SPIFFE and SPIRE in Kubernetes to issue cryptographically secure, auto-rotating identities to workloads, enabling mTLS and zero-trust communication.

• kube-bench: The Posture Check That Time Forgot

  Matt Brown

  This tutorial walks you through running kube-bench for CIS compliance on Kubernetes, how to scan clusters using Jobs or CronJobs and understand which configurations pass or fail.

More tutorials →

More articles

• Stop Hardcoding Permissions in Your Microservices — Here’s How I Decoupled Authorization Logic from Code

  Muhammad Ateeb Aslam

  This article explains how to remove permission checks from microservices and build a centralized authorization layer with Kong OSS and OpenFGA.

• Breaking Boundaries: Kubernetes Namespaces and multi-tenancy

  AmberWolf

  This article explores why using Kubernetes namespaces alone is not a sufficient isolation or security boundary.

  It shows common pitfalls and many attack paths that let a tenant escape isolation even if you only gave them access to a single namespace.

• OPA with Kubernetes: How It Works & Benefits of Use

  Shahar Azulay

  This article explains how to enforce security and compliance by validating Kubernetes resource configs using Open Policy Agent (OPA) and Rego policies, with deployment tips for Gatekeeper and sidecars.

• Securing Kubernetes Layer by Layer: An OSI Approach

  This article explains how to secure Kubernetes at the transport (Layer 4) level, covering best practices around service mesh mTLS, network segmentation, access control, and encryption of in-cluster traffic.

Even more articles →