Results for “kubernetes”

Kubernetes 1.36 formally deprecates Service externalIPs

The .spec.externalIPs field on Service objects is formally deprecated in Kubernetes v1.36, with kube-proxy implementation slated for removal in a future minor release. Driven by CV…

Kubernetes 1.36 splits Workload and PodGroup APIs for batch and AI scheduling

Kubernetes v1.36 introduces a new PodGroup API alongside the Workload API in scheduling.k8s.io/v1alpha2, separating static templates from runtime state and unlocking DRA for gang-s…

Kubernetes 1.36 graduates PSI metrics to GA

Pressure Stall Information metrics are now GA at node, pod, and container levels in Kubernetes v1.36, giving operators a kernel-grade signal for resource contention without out-of-…

Kubernetes Ships May Patch Wave Across 1.33–1.36, Fixes IPv6 ServiceCIDR Allocation Bug

Kubernetes 1.36.1, 1.35.5, 1.34.8, and 1.33.12 landed on the May 12 cherry-pick window. No CVEs, but a real correctness bug — services getting IPv6 addresses outside their allocate…

Kubernetes 1.36 Sneak Peek: DRA Goes GA, Ingress-NGINX Retires, HPA Scales to Zero

Kubernetes v1.36, releasing April 22, finalizes DRA to GA, graduates User Namespaces, enables HPA scale-to-zero by default, and formally retires Ingress-NGINX.

vLLM, SGLang, Kubernetes, Kueue, and Helm ship runtime fixes

vLLM and SGLang released AI serving updates, while Kubernetes, Kueue, and Helm shipped scheduler, queueing, and release-management fixes.

Kubernetes 1.36 graduates DRA prioritized list to GA and pushes five device-control features to beta

On the heels of DRA graduating to GA in v1.36, the May 7 follow-up details one new stable feature — prioritized list — and five betas covering partitionable devices, device taints,…

Kubernetes 1.36 lands server-side sharded list and watch in alpha

KEP-5866 ships in v1.36 with a new shardSelector field on ListOptions, moving event filtering from clients to the API server. Horizontally sharded controllers no longer pay for the…

Kubernetes 1.36 introduces pod-level CPU, memory, and topology managers in alpha

The kubelet's CPU, memory, and topology managers extend to pod scope behind the PodLevelResourceManagers and PodLevelResources feature gates. Performance-critical containers keep N…

llm-d Accepted as CNCF Sandbox Project — Kubernetes-Native Distributed LLM Inference Gets an Open Standard

The distributed LLM inference engine co-created by Red Hat, Google Cloud, IBM Research, CoreWeave, and NVIDIA joins the CNCF, establishing an open standard for inference workloads…

CVE-2026-33105: AKS Critical Privilege Escalation Hits CVSS 10.0

Microsoft disclosed a CVSS 10.0 privilege escalation vulnerability in Azure Kubernetes Service. Specific technical details are still sparse, but the confirmed characteristics make…

Kyverno Graduates from CNCF — Policy-as-Code Goes Mainstream

Kyverno reaches CNCF Graduated status with full CEL adoption, completing its journey from Kubernetes admission controller to a broader policy engine for the cloud native stack.

Kubernetes Security Scanning: The 4 Tools You Actually Need

Four tools for Kubernetes day-two security: kube-bench for CIS hygiene, kube-hunter for red-team probing, Sonobuoy for CNCF conformance, and Syft plus Grype for SBOMs and CVEs. Dem…

Kubernetes Security Lab

Rory McCune walks through a hands-on Kubernetes security lab built on kind, attacking five deliberately vulnerable clusters: insecure API server port, unauthenticated kubelet, unau…

Kubernetes Services

Anaïs Urlichs and Philipp Strube join David to break down Kubernetes Services: ClusterIP, NodePort, port versus targetPort, selectors and endpoints, DNS-based service discovery, an…

Kubernetes 1.19: Accentuate the Paw-sitive (RTFM with Rawkode)

Taylor Dolezal joins to walk through Kubernetes 1.19, including the extended 12-month support window, storage capacity tracking, CSI volume health, Ingress going GA, and live demos…

Kubernetes Cluster API for Equinix Metal (Formely Packet)

Jason DeTiberus joins to walk through declaratively defining Kubernetes clusters with Cluster API, installing the Packet infrastructure provider, generating a workload cluster conf…

Kubernetes Disaster Recovery

Back up a stateful Postgres workload with Velero, simulate a namespace disaster, and restore from S3 (SeaweedFS). Then scale the same pattern across a fleet with scheduled, RBAC-co…

Hands-on with Headlamp: The Kubernetes UI

Oleg and Will from Microsoft show how Headlamp's plugin model surfaces Flux, Argo CD, Cilium Hubble, and Prometheus inside a Kubernetes UI, plus the new AI assistant, OIDC auth, Ar…

Unboxing the ngrok Kubernetes Operator

Install the ngrok Kubernetes Operator with Helm, then expose a workload using an AgentEndpoint and TrafficPolicy. Add OIDC auth via Zitadel, rate limiting, and a custom 429 page, a…

Build a Production-Ready Kubernetes Cluster with Spectro Cloud Palette | No-Code Tutorial

Compose a reusable, production-ready Kubernetes cluster profile in the Spectro Cloud Palette UI, layering the OS, CNI, CSI, and add-ons like Prometheus and Grafana, then deploy it…

Simplifying Kubernetes Adoption Challenges

Koray Oksay (Kubermatic, CNCF Ambassador) joins David to discuss why Kubernetes adoption still trips up teams: skipping container fundamentals, picking between managed services and…

Navigating Kubernetes: Insights, Challenges, and the Release Cycle with Kat Cosgrove

Kat Cosgrove joins David and Laura to unpack how SIG Release ships Kubernetes: team structure, CI signal, bug triage, press embargoes, maintainer burnout, and why a Kubernetes 2.0…

From Kubernetes to Cloud Run: Chainguard's Journey

Jason Hall walks through Chainguard's migration of its image-serving infrastructure from Kubernetes and Knative to Google Cloud Run, covering multi-region Terraform modules, least-…

Seccomp for Kubernetes workloads: from RuntimeDefault to application profiles

Record, review, and roll out application seccomp profiles for Kubernetes, with errno compatibility, logging, distroless verification, and new-node handling.

Your Guide to Kubernetes DRA

Dynamic Resource Allocation lets Kubernetes match device claims to GPU properties. Here is what DRA changes for AI training and inference, and where it still falls short.

Building Kubernetes Operators in Rust with kube-rs: Why Your Next Controller Shouldn't Be Written in Go

A practical guide to building production-grade Kubernetes operators in Rust using kube-rs. Learn why Rust's memory safety, performance, and type system make it an excellent choice…

KEP-2831: Kubelet Tracing Finally Brings Node-Level Observability to Kubernetes

Kubernetes 1.34 will deliver distributed tracing in the kubelet, providing unprecedented visibility into node-level operations that have been a debugging black box until now.

QuestDB on Kubernetes

I was first introduced to QuestDB by my former colleague, David Simmons, who now runs their Developer...

Introduction to WebAssembly on Kubernetes with Krustlet

Welcome! 👋 This article will aim to introduce you to something wild and wonderful - running WebAssem...

cgroups: From Chaos to Control

Learn Linux cgroups v2 through Docker and Kubernetes examples: memory.max, pids.max, cgroup.subtree_control, OOM kills, and resource-limit debugging.

FluxCD: Why the GitOps Pioneer Remains Its Future

A definitive look at FluxCD's controller-first design and why its architectural alignment with Kubernetes offers superior security, efficiency, and operational maturity over ArgoCD…

Klustered Winter 2026 starts Wednesday 18 November

Klustered returns on Wednesday, 18 November 2026 with a pre-season, then the Solo bracket in January, every Wednesday at 17:30 GMT.

Introducing the Technology Matrix

Your new compass for the Cloud Native landscape. Explore, filter, and learn about the technologies that power modern platforms.

News Digest for August 4th, 2025

A dispatch from the cloud-native world, where the height of innovation is apparently pointlessly reinventing YAML while shaking down the community for container images like a commo…

Lazyjournal: A Log Viewer for Cloud Native Environments

Lazyjournal is a TUI log viewer that aggregates logs from various sources, providing a unified interface for developers and system administrators.

Teleport for Kubernetes

Learn to deploy, configure, and operate Teleport as the access layer for your Kubernetes clusters. From zero to a fully working setup with identity-based access, role-based control…

Zitadel Tutorial: Self-Host Auth with Docker & K8s (2026)

Self-host Zitadel for auth: Docker Compose, Kubernetes, OIDC, social login, multi-tenancy. Free, hands-on tutorial with copy-paste configs.

Build Your First Kubernetes Developer Platform

Move from GUI-driven cluster management to platform APIs, golden-path deployments, and automated operations. This path assembles modern tools that let you offer a polished develope…

Kubernetes Security Blueprint: Posture to Policy

Track, enforce, and extend Kubernetes security from baseline scans to policy-driven automation. This path combines posture management with Kyverno enforcement, policy observability…

GitOps Landscape

Build a GitOps-first operating model. This path layers modern packaging, reconciliation, and developer experience tooling—Timoni, Kluctl, FluxCD, Gimlet, and Sveltos—so you can run…

Klustered: Advanced Cluster Triage

Master the craft of rescuing broken clusters. This path walks through real war‑room incidents so you can debug the control plane, container runtime, and host OS when kubectl alone…

Kubernetes

Learn Kubernetes with practical tutorials, production patterns, and troubleshooting guides for platform engineers and developers.

Kubernetes Resource Recommender (KRR)

KRR (Kubernetes Resource Recommender) right-sizes container requests and limits from Prometheus data. How it works and trade-offs vs VPA.

OVN-Kubernetes

k3s

Build and operate lightweight Kubernetes clusters with k3s using practical setup, networking, and day-2 operations tutorials.

mogenius

Explore mogenius for Kubernetes developer self-service, with workspace, deployment and platform evaluation guidance.

Plural

Explore Plural for Kubernetes fleet management, GitOps and infrastructure workflows, with licensing and evaluation guidance.

Flatcar Container Linux

KubeClipper

Kueue

vCluster

Cilium

Learn Cilium networking, security policies, and observability with practical guides for high-performance Kubernetes clusters.

containerd

Understand containerd internals, image management, and runtime operations with hands-on guides for modern Kubernetes platforms.

Cloud Native Compass

The podcast that helps you navigate your way through Kubernetes and Cloud Native trends.

Klustered

Klustered is a live gameshow where contestants race against the clock to diagnose and fix deliberately broken Kubernetes clusters. Community members sabotage the clusters, and our…