Newsletter
Subscribe our newsletter
Get new infrastructure guides, comparison reports, and migration notes in your inbox.
Tag
Kubernetes
57 articles tagged Kubernetes, newest first.
Kubernetes 1.37 Makes Rootless Kubelet Beta
Kubernetes 1.37 promotes KubeletInUserNamespace to beta, letting node components run as a non-root host user and reducing breakout impact.
AI Agents Are Moving onto Kubernetes: What kagent and OpenChoreo Tell Us About the Next Platform Stack
A pair of open source projects highlighted by the Cloud Native Sydney community this August captures an important shift in Kubernetes.
Building an AI Homelab with Proxmox, Kubernetes, 200Gb Networking and Ceph
A homelab shared on Reddit this August combines three Proxmox hosts, 36 physical CPU cores, 192 GB of DDR5 memory, four ASUS GX10 systems used as Kubern...
GPU Resource Pooling and Scheduling in Kubernetes
GPU resource pooling in Kubernetes means turning a set of physical accelerators into managed capacity that workloads can request through policy instead ...
How to Manage Multi Vendor GPUs and NPUs
The clean way to manage GPUs and NPUs from multiple vendors is to separate the problem into layers: physical discovery, health normalization, resource a...
Prometheus vs Zabbix in 2026: Which Monitoring Tool Should You Pick?
Prometheus vs Zabbix compared for 2026: pull vs push architecture, Kubernetes fit, alerting, and which one actually matches your infrastructure — cloud-native or traditional.
Is Terraform the Best Way to Manage Proxmox Infrastructure?
Terraform is one of the most effective tools for creating repeatable Proxmox infrastructure.
Portainer vs Proxmox Container Management: Which Gives You More Control?
Portainer and Proxmox both provide graphical interfaces for managing containers, but they control different layers of infrastructure.
Proxmox in Docker Sounds Wrong, Which Is Exactly Why Everyone Couldn’t Look Away
Some projects arrive with a clean pitch.
Proxmox Doesn’t Need a TrueNAS Killer. It Needs a Storage Story That Makes Sense.
Every popular platform eventually reaches the same awkward moment: users stop asking what it can do and start asking why the rest of their stack has to ...
This Tiny TMNT Homelab Is Cute Until You Realize It’s a Full Production Pipeline
A themed homelab can go wrong fast.
Proxmox 9.2 Is Here, and the Homelab Crowd Is Already Arguing About What “Better” Should Mean
Proxmox 9.2 didn’t arrive quietly.
Proxmox 9.2 Landed, and the Real Fight Is Over How Much Power the UI Should Have
Proxmox 9.2 didn’t just show up as another version number.
Nobody Trusts VMware Anymore, and That Might Be the Real Collapse No One Saw Coming
**Nobody Trusts VMware Anymore, and That Might Be the Real Collapse No One Saw Coming** ## The Product Isn’t the Problem There’s a strange tension run...
Kubernetes’ Quiet Security Revolution Is Here—and It Might Break Everything Before It Fixes Anything
Six years of development, testing, iteration, and probably a lot of second-guessing, and user namespaces in Kubernetes didn’t arrive with fireworks.
Kubernetes Wants You to Move On From Ingress, Yet Gateway API Feels Like a Puzzle Nobody Asked For
**“Kubernetes Wants You to Move On From Ingress, Yet Gateway API Feels Like a Puzzle Nobody Asked For”** ## A Better Idea Trapped Behind a Worse Experi...
Six Years of Silence Explodes Into One Feature That Could Quietly Rewrite Kubernetes Security Forever
**“Six Years of Silence Explodes Into One Feature That Could Quietly Rewrite Kubernetes Security Forever”** ## A Feature Years in the Making Finally Su...
CVE-2026-22039: How an admission controller vulnerability turned Kubernetes namespaces into a security illusion
Just saw this nasty Kyverno CVE that's a perfect example of why I'm skeptical of admission controllers with god-mode RBAC.
YubiHSM 2 + cert-manager. Hardware-signed TLS certificates on Kubernetes
I built a cert-manager external issuer that signs TLS certificates using a private key inside a YubiHSM 2.
Flux CD deep dive: architecture, CRDs, and mental models
Hey everyone!
New policy: Sharing new Kubernetes tools must be in the weekly thread
Hi all.
Why etcd breaks at scale in Kubernetes
This r/kubernetes discussion unpacked why etcd breaks at scale in kubernetes and the practical tradeoffs engineers surfaced around it, with the original post linking out to lear...
Can we get an AI megathread?
In the last couple of hours alone I’ve seen 3 threads advertising vibecoded slop.
It Works... But It Feels Wrong - The Real Way to Run a Java Monolith on Kubernetes Without Breaking Your Brain
A practical production guide to running a Java monolith on Kubernetes without fragile NodePort duct tape.
Kubernetes Isn’t Your Load Balancer — It’s the Puppet Master Pulling the Strings
Kubernetes orchestrates load balancers, but does not replace them; this post explains what actually handles production traffic.
MinIO repo archived - spent 2 days testing K8s S3-compatible alternatives (Helm/Docker)
Hey, MinIO repo got archived on Feb 13, been hunting a K8s-ready S3 object storage for two days.
Should You Use CPU Limits in Kubernetes Production?
A grounded take on when CPU limits help, when they hurt, and how to choose based on workload behavior.
We Have 2,000+ Service Accounts and No One Knows Who Owns Them - The Multi-Cloud IAM Crisis Nobody Wants to Admit
Why unmanaged machine identities across AWS, Azure, and GCP become a security and governance crisis at scale.
We Thought Kubernetes Would Save Us - The Production Failures No One Puts on the Conference Slides
A field report on real Kubernetes production failures and the human factors that trigger them.
Looking for a replacement for Minio? S3 made easy with Garage
**Update: garage-operator v0.1.x released — Kubernetes operator for Garage (self-hosted S3 storage)** About a month ago I shared a project I’ve been building: a Kubernetes opera...
The End of kubernetes/ingress-nginx: Your March 2026 Migration Playbook
Hey everyone, sharing an article I wrote about the upcoming End-of-Life for the community-maintained kubernetes/ingress-nginx controller happening in March 2026.
KubeDiagrams 0.7.0 is out!
[**KubeDiagrams**](https://github.com/philippemerle/KubeDiagrams) 0.7.0 is out!
Rancher Was the Perfect Kubernetes Dashboard — Until the Price Changed
Rancher gave platform teams calm — one login, twenty clusters, all understandable. Then the rancher price changed. Not by a little. Here's why there's still no obvious replacement.
What Actually Goes Wrong in Kubernetes Production?
Hey Kubernetes folks, I’m curious to hear about real-world production experiences with Kubernetes.
AI Didn't Kill DevOps — But It Made the Stakes Way Higher
AI hasn't replaced DevOps — it's made the consequences of bad decisions faster and bigger. Here's why velocity without understanding is a recipe for expensive lessons.
Real Stories from Kubernetes Admins Keeping Production Stable
Managing Kubernetes at scale is challenging. Real stories from admins navigating YAML complexity, vendor differences, and leadership pressure.
Why Kubernetes 1.35 Feels Like a Security-First Release
Kubernetes 1.35 isn't your typical incremental update. With cgroup v1 dropped, hardened certificate validation, constrained impersonation, and user namespaces enabled by default, this release reads like the security overhaul the platform has needed for years.
Broadcom's CNCF Donation: Community Reactions and Open-Source Trust
Broadcom donated a Kubernetes tool to CNCF, but community response remains mixed due to recent platform and licensing changes.
Zero-Downtime Deployments Without Kubernetes: Proven Approaches
Kubernetes is not the only way to achieve zero-downtime deployments. This article covers proven alternatives such as load balancers, blue-green rollout patterns, and graceful shutdown strategies.
From ECS to EKS: Practical Migration Lessons
Moving from ECS to EKS is a common progression with real complexity. This guide covers common migration issues and how teams handle them.
Kubecost vs. OpenCost: When Cost Monitoring Becomes More Painful Than the Bill
Teams adopt Kubecost or OpenCost hoping for clarity on K8s spending. Instead, they often face timeouts, scaling issues, and workarounds that make cost monitoring more painful than the actual bill.
Ingress-NGINX Is Retiring. The Kubernetes Crowd Already Has Favorites Lined Up.
Ingress-NGINX is retiring in March 2026, but the Kubernetes community isn't panicking. Operators have already shifted to alternatives like Traefik, Envoy Gateway, and Cilium—here's what's replacing the decade-old workhorse.
From Scripts to Simplicity: AWS Backup's Native Support for Amazon EKS
AWS Backup now natively supports Amazon EKS, eliminating the need for custom scripts and third-party tools. Here's why this changes everything for Kubernetes disaster recovery.
Goodbye VMware: How Kubernetes and KubeVirt Became the New Virtualization Power Duo
After Broadcom's aggressive licensing changes, enterprises are saying goodbye to VMware and embracing Kubernetes with KubeVirt—a migration story about freedom, control, and the future of virtualization.
Velero After Acquisition: Community Risk and Contingency Plans
When Broadcom acquired Velero, the Kubernetes community didn't panic—they prepared to fork. Here's why open-source backup tools are becoming trust exercises, and what engineers are doing about it.
Why MariaDB Operator 25.10 Is a Big Deal for Stateful Workloads on Kubernetes
MariaDB Operator 25.10 brings production-ready async replication, automated failover, and snapshot-based replica recovery to Kubernetes—making stateful workloads finally feel like first-class citizens.
Why Kubernetes Still Doesn't Natively Support Live Container Migration (And Why It Should)
Kubernetes has mastered orchestration, but still lacks native live container migration. Explore why this feature is missing, how CAST AI is changing the game with CRIU, and why it's time for K8s to catch up.
Ephemeral Kubernetes Namespaces: Smart Dev Environments or a Scaling Nightmare?
Exploring the benefits and challenges of using ephemeral Kubernetes namespaces for development environments, from automated cleanup to state management complexities.
When GitOps Meets Emergency Fixes: ArgoCD Operational Lessons
GitOps can be clean in theory but difficult under production pressure. A practical look at ArgoCD emergency-fix workflows and operational tradeoffs.
Editing in Prod: A Love Letter to Every SRE Who's Ever Broken Glass
GitOps promises pristine, repeatable deployments — until it's 2AM and your cluster is on fire. Here's why kubectl edit in prod isn't always a sin.
From Enterprise Bloat to OSS Brilliance: A Kubernetes Cost-Cutting Story
A team saved $100,000 by swapping an overpriced enterprise API gateway for Kong OSS. Here's why more teams should ask: do we actually still need this?
Open Source Is Free—Until It's Not: The CNCF and the Cost of 'Free' Infrastructure
The internet runs on open source tools maintained by volunteers who might burn out or walk away at any time. What happens when 'free' stops being free?
Who Needs Blue-Green? Tales from the Trench of Live Cluster Upgrades
Blue-green deployments are the gold standard — but in the real world, plenty of teams are upgrading clusters in-place and living to tell the tale. Here's what the trenches actually look like.
Kubernetes Docs: Surprisingly Good or Just the Best of a Bad Bunch?
In a world of cryptic PDFs and half-baked API references, Kubernetes documentation might just be... good? Or maybe it's just less bad than the rest.
Maintainers, Martyrs, and Myths: Inside the Labor Economy of Kubernetes
Kubernetes powers the modern internet, but peek under the hood and you'll find unpaid volunteers, burnout, and a labor model running on fumes. Time to rethink the deal.
CUE, Kyaml, and the Battle to Fix YAML: Devs Are Over It
YAML is everywhere in Kubernetes land, but engineers are over it. Enter CUE, Kyaml, Jsonnet, and a wave of tools trying to fix configuration without throwing it all out.
Setting Up a Kubernetes Cluster in Your Homelab
Learn how to deploy a production-grade K3s cluster on Proxmox with high availability.