Newsletter
Subscribe our newsletter
Get new infrastructure guides, comparison reports, and migration notes in your inbox.
Tag
Kubernetes
58 articles tagged Kubernetes, newest first.
Excessive Agency Is a Permissions Problem Wearing an AI Costume
OWASP LLM03 Excessive Agency has three causes: too much functionality, permission and autonomy. Only one is the model's fault, and here is how to fix each.
Kubernetes 1.37 Makes Rootless Kubelet Beta
Kubernetes 1.37 promotes KubeletInUserNamespace to beta, letting node components run as a non-root host user and reducing breakout impact.
AI Agents on Kubernetes: What kagent and OpenChoreo Tell Us
What kagent and OpenChoreo show about running AI agents on Kubernetes: agent permissions, platform abstractions, managed vs bare metal, narrow authority.
AI Homelab with Proxmox, Kubernetes, 200Gb Networking and Ceph
An AI homelab shared on Reddit: three Proxmox hosts, four ASUS GX10 Kubernetes nodes, 512 GB of VRAM, a 200Gb fabric, and lessons on Ceph and backup.
GPU Resource Pooling and Scheduling in Kubernetes
How Kubernetes schedules GPUs with device plugins and DRA, and how Kueue quotas, resource classes, topology and health checks turn them into a shared pool.
How to Manage Multi Vendor GPUs and NPUs in One Platform
Managing GPUs and NPUs from several vendors: a common inventory, Kubernetes device plugins and DRA, resource pools, health aware scheduling and quotas.
Zabbix vs Prometheus: Which Monitoring Tool Should You Pick?
Zabbix vs Prometheus compared: pull vs push, Kubernetes fit, alerting, dashboards and storage, plus which tool suits cloud-native or traditional setups.
Is Terraform the Best Way to Manage Proxmox Infrastructure?
Where Terraform fits in Proxmox: the BPG provider, supported versions, importing existing VMs, state risks, and how it works with Ansible and the UI.
Portainer vs Proxmox for Containers: Which Gives More Control?
Portainer vs Proxmox compared: LXC and VM infrastructure control against Docker and Kubernetes app management, with backups, access and deployment.
Proxmox in Docker Sounds Wrong, Which Is Why Everyone Watched
A project runs Proxmox VE inside a Docker container as a test playground. The homelab crowd reacted with memes, real worries about nesting, and curiosity.
Proxmox Needs a Coherent Storage Story More Than a TrueNAS Killer
Should Proxmox build a ZFS-first storage appliance for PVE? The case for filling the gap between local ZFS and Ceph, and why it could become a trap.
Tiny TMNT Homelab Is Cute, but It Runs a Full Production Pipeline
A two-node TMNT-themed homelab on HP EliteDesk minis running Proxmox, k3s, ArgoCD, Longhorn, Traefik and Cloudflare Tunnel, and what it teaches.
Proxmox 9.2 Lands, and Homelab Users Argue About Better
Proxmox 9.2 brings GUI UID and GID mapping for unprivileged LXCs, and the homelab community is debating 777 permissions and first-class OCI containers.
Proxmox 9.2 Makes UID Mapping Easier and Revives the OCI Debate
Proxmox 9.2 adds a UI for LXC UID and GID mapping. Here is how the community reacted, from 777 confessions to the push for first-class OCI containers.
VMware Is Losing Customer Trust, and That May Be the Real Collapse
After Broadcom's price hikes, engineers still praise VMware's software but no longer trust the vendor, and Proxmox, OpenShift and Kubernetes gain ground.
Kubernetes User Namespaces Are Here and Might Break Things First
Kubernetes user namespaces reached general availability after six years. What they do for container security, and the storage and kernel issues users hit.
Kubernetes Gateway API vs Ingress: Why It Feels Hard
Why Kubernetes Gateway API frustrates operators moving off Ingress: extra controllers and CRDs, version management, and the case for staying outside core.
Kubernetes User Namespaces Reach GA After Six Years of Work
User namespaces are now GA in Kubernetes after six years. What they change for container security, and the file mapping and storage issues early users hit.
Kyverno CVE-2026-22039 Exposes Data Across Kubernetes Namespaces
A Kyverno flaw let namespaced policy users read any namespace through the cluster-admin service account. Fixed in 1.16.3 and 1.15.3; r/kubernetes reacts.
YubiHSM 2 and cert-manager for Hardware-Signed TLS on Kubernetes
I built a cert-manager external issuer that signs TLS certificates using a private key inside a YubiHSM 2.
Flux CD Deep Dive: Architecture, CRDs and Mental Models
An r/kubernetes thread on how Flux CD controllers and CRDs map to manual commands, Flux Operator bootstrap, and how commenters compare Flux with ArgoCD.
New r/kubernetes Policy: Share New Tools in the Weekly Thread
The r/kubernetes moderators now require new tool announcements to go in a weekly thread. Members debate spam, AI slop and how new projects get seen.
Why etcd Breaks at Scale in Kubernetes Clusters
An r/kubernetes thread on etcd scaling limits: etcd sharding flags, a GKE engineer on 30k node clusters, and whether etcd is really the bottleneck.
Can We Get an AI Megathread for Vibecoded Kubernetes Projects?
An r/kubernetes user asks for a megathread for vibecoded AI projects, and commenters weigh an outright ban, flagging and the weekly new tool thread.
How to Run a Java Monolith on Kubernetes Without NodePort Hacks
A practical production guide to running a Java monolith on Kubernetes without fragile NodePort duct tape.
What Actually Load Balances Production Traffic in Kubernetes
How Kubernetes Services, Ingress controllers, MetalLB and service meshes split the work of load balancing, and where TLS terminates in production.
MinIO Repo Archived: 2 Days Testing K8s S3 Alternatives
After the MinIO repo was archived, an r/kubernetes user compared Garage, SeaweedFS, RustFS, Ceph and Minimus, and commenters challenged the Ceph claims.
Should You Use CPU Limits in Kubernetes Production?
A grounded take on when CPU limits help, when they hurt, and how to choose based on workload behavior.
2,000+ Service Accounts, No Owners: The Multi-Cloud IAM Problem
Why unmanaged machine identities across AWS, Azure, and GCP become a security and governance crisis at scale.
Real Kubernetes Production Failures From Control Plane to IPs
A field report on real Kubernetes production failures and the human factors that trigger them.
Replacing MinIO With Garage: Self-Hosted S3 on Kubernetes
Replacing MinIO with Garage on Kubernetes: what garage-operator v0.1.x automates, from bootstrap, buckets and S3 keys to COSI support and GitOps CRDs.
kubernetes/ingress-nginx Ends March 2026: Your Migration Playbook
kubernetes/ingress-nginx reaches end of life in March 2026. How to audit your clusters and weigh migration options such as Traefik or Gateway API.
KubeDiagrams 0.7.0: Kubernetes Architecture Diagrams
KubeDiagrams 0.7.0 generates Kubernetes architecture diagrams from manifests, Helm charts, helmfiles and live clusters, with CRD support and a web app.
Rancher Was the Best Kubernetes Dashboard Until Pricing
Rancher gave platform teams one calm login for twenty clusters. Then the Rancher price jumped after SUSE, and there's still no obvious replacement.
What Actually Goes Wrong in Kubernetes Production?
Kubernetes admins share real production failures: undersized subnets, an etcd collapse from a misassigned apiserver pool, DockerHub limits and Windows.
AI Didn't Kill DevOps, but It Made the Stakes Way Higher
AI speeds up DevOps work, including the mistakes. Where AI helps, where it adds risk in production, and why humans must stay in the loop.
Real Stories from Kubernetes Admins Keeping Production Stable
Kubernetes admins share war stories: SELinux mandates from the CEO, vendor add-ons, Vault and ESO without docs, and homelab crash loops.
Why Kubernetes 1.35 Feels Like a Security-First Release
Kubernetes 1.35 drops cgroup v1, hardens Kubelet certificate validation, adds constrained impersonation and turns on user namespaces by default.
Broadcom's CNCF Donation: Community Reactions and Open-Source Trust
Broadcom donated a Kubernetes tool to CNCF, but community response remains mixed due to recent platform and licensing changes.
Zero-Downtime Deployments Without Kubernetes
Zero-downtime deploys without Kubernetes: load balancers, blue-green, symlink releases, SIGTERM draining, Docker setups and safe database migrations.
From ECS to EKS: Practical Migration Lessons
Moving from ECS to EKS is a common progression with real complexity. This guide covers common migration issues and how teams handle them.
Kubecost vs OpenCost: When Cost Monitoring Hurts More Than the Bill
Kubecost vs OpenCost in real clusters: OpenCost UI timeouts at scale, Kubecost's 15-day free tier and IBM ownership, and why teams build their own tools.
Ingress-NGINX Is Retiring, and Kubernetes Already Has Favorites
Ingress-NGINX retires in March 2026. Where Kubernetes operators are moving: Traefik, Envoy Gateway, Cilium, Istio, Contour, HAProxy and cloud balancers.
AWS Backup Adds Native Amazon EKS Support: No More Backup Scripts
AWS Backup now supports Amazon EKS natively, backing up cluster state and persistent volumes without custom scripts or Velero. What users think so far.
Goodbye VMware: Why Teams Are Moving to Kubernetes and KubeVirt
After Broadcom's licensing changes, engineers share why they left VMware for Kubernetes with KubeVirt, what it cost, and what they gained in control.
Velero After Acquisition: Community Risk and Contingency Plans
Broadcom now owns Velero, and Kubernetes users are weighing a fork. What the community fears, the alternatives it is testing, and how to prepare.
MariaDB Operator 25.10 and Stateful Workloads on Kubernetes
MariaDB Operator 25.10 brings GA async replication, automated failover and snapshot-based replica recovery to stateful database workloads on Kubernetes.
Why Kubernetes Still Lacks Native Live Container Migration
Why Kubernetes still can't live migrate containers, what CAST AI's CRIU-based migration for EKS does, and the case for making it a native feature.
Ephemeral Kubernetes Namespaces for Dev: Smart or Scaling Nightmare?
Per-PR ephemeral Kubernetes namespaces for dev and test: cleanup with TTLs and CronJobs, shared vs fresh databases, vClusters and other tradeoffs.
When GitOps Meets Emergency Fixes: ArgoCD Operational Lessons
GitOps can be clean in theory but difficult under production pressure. A practical look at ArgoCD emergency-fix workflows and operational tradeoffs.
Editing in Prod: A Love Letter to SREs Who Broke Glass
GitOps promises pristine, repeatable deployments until your cluster is on fire at 2AM. Why kubectl edit in prod isn't always a sin.
From Enterprise Bloat to OSS: A Kubernetes Cost-Cutting Story
A team saved $100,000 by swapping an overpriced enterprise API gateway for Kong OSS, then kept finding the same kind of bloat in other stacks.
Open Source Is Free Until It's Not: CNCF and the Cost of Free
The internet runs on open source tools maintained by volunteers who might burn out or walk away at any time. What happens when 'free' stops being free?
Who Needs Blue-Green? Tales From Live Kubernetes Cluster Upgrades
Blue-green is the gold standard, yet plenty of teams upgrade Kubernetes clusters in place and live to tell the tale. How that goes in practice.
Kubernetes Docs: Surprisingly Good or Just the Best of a Bad Bunch?
Why engineers praise the official Kubernetes docs and cheat sheet, where they fall short under pressure, and how they compare with AWS, Cisco and Oracle.
Maintainers, Martyrs and Myths: The Labor Economy of Kubernetes
Kubernetes and the libraries under it run on unpaid volunteers, thin corporate funding and burnout. A look at that labor model and how to fund it fairly.
CUE, Kyaml, and the Battle to Fix YAML: Devs Are Over It
Engineers are tired of brittle YAML. How CUE, Kyaml, Jsonnet, Dhall and KDL try to add validation, structure and modularity to configuration.
Setting Up a Kubernetes Cluster in Your Homelab
Learn how to deploy a production-grade K3s cluster on Proxmox with high availability.