Kube Builders

This article teaches how to build self-evolving AI systems using Kubernetes, Temporal workflows, and automated deployment pipelines, enabling AI agents to detect errors, fix code, and redeploy services without manual intervention. More: https://ku.bz/CqL64wJNt

This tutorial shows how to serve open source LLMs on Red Hat OpenShift AI with KServe, vLLM, Argo CD, and IBM Fusion using a fully declarative GitOps workflow. More: https://ku.bz/chQc0HG6n

New on LearnKube: Server-side apply: what happens when you run kubectl apply Server-side apply changes how Kubernetes handles field ownership. Kubernetes objects are shared state. Manifests, controllers, release tools, autoscalers, webhooks, and operators can all shape the same object. With client-side apply, stale intent can overwrite live changes. With server-side apply, ownership moves into the API server. Kubernetes tracks which manager owns each field and surfaces conflicts when ownership is contested. Chiara put serious work into this guide, and you can read it in full here: https://learnkube.com/server-side-apply-kubernetes

GPU optimization requires application-level thinking, not just hardware metrics. Amin reminds us that HPC fundamentals apply: golden signals like throughput and latency are critical for expensive hardware. Don't fixate on utilization alone - application performance metrics matter more. Watch the full interview: https://ku.bz/p1RNM5ldZ This interview is a reaction to Dave Masselink's episode https://ku.bz/zk2xM1lfW

Goldpinger is a monitoring tool that runs as a DaemonSet and makes calls between pod instances to test connectivity. It produces Prometheus metrics for visualization and alerting, while providing a web UI that displays network health and latency. More: https://ku.bz/WD6zf4B2h

This tutorial shows how to build a private EKS cluster with zero public API exposure using Terraform. It also covers self-hosted OpenVPN as a VPN gateway, NAT masquerade iptables setup, kube-prometheus-stack via internal load balancer, and Route 53. More: https://ku.bz/XZ-gvhGdK

Kube Binpacking Exporter exposes Prometheus metrics that show how efficiently your cluster packs requested CPU and memory across nodes, groups, and DaemonSet overhead so you can measure fragmentation over time. More: https://ku.bz/VpnFlkz-0

"Karpenter lets teams think in workloads, not nodes — and GKE Autopilot takes it further by removing nodes from the equation entirely." Ray Chen shares the three Kubernetes tools he's watching most closely: Karpenter for workload-level abstractions, GKE Autopilot for fully managed node provisioning, and StormForge for continuous resource optimization. The common thread? Each one removes a layer of operational toil, so platform teams can focus on what matters. Watch the full interview: https://ku.bz/w50VfwtYd

This case study explains how Groww built an internal chaos engineering platform on Kubernetes to run controlled failure drills like network faults, dependency outages, and traffic replay before real incidents hit production. More: https://ku.bz/vT3jsf-Yh

This tutorial shows how to expose a self-hosted Kubernetes cluster on Proxmox using a dual HAProxy setup one on the host as an edge gateway and one as an in-cluster ingress controller. More: https://ku.bz/w3M0Q7fKv

This week on Learn Kubernetes Weekly 189: 🔥 Zero-Downtime Kubernetes Ingress Controllers on GCP 🏗️ Architecting GPUaaS for Enterprise AI On-Prem 📋 Conditions, Phases, and Declarative Phase Rules in Kubernetes Operators ⚙️ Container-Aware GOMAXPROCS 💀 Why Your Kubernetes Pod Was OOM Killed and Who Really Killed It Read it now: https://kube.today/issues/189 ⭐️ This issue is brought to you by Solanica - replace RDS with a self-hosted DBaaS on your own Kubernetes clusters with automated Day 2 operations and zero vendor lock-in https://ku.bz/NTszfwH40

Zarf is a tool that simplifies software deployment to Kubernetes clusters in airgapped or disconnected environments. It packages applications and their dependencies into single compressed files that can be deployed without internet connectivity. More: https://ku.bz/gHNlqrZKW

Trusting AI with infrastructure is a different problem from trusting it with application code. Koray Oksay says AI is already useful as a reviewer, but production-bound infrastructure changes still carry too much risk to automate blindly. Databases, managed services, and platform changes need stronger human judgment. Watch the full interview: https://ku.bz/yrtRLM

In this blog post, the author tracks down persistent sandbox-cleanup errors in a Kubernetes cluster, finds that zero-length CNI cache files cause the problem, and shows how manually deleting those files cleared the error. More: https://ku.bz/clNvJQncV

zot is a production-ready vendor-neutral OCI image registry - images stored in OCI image format, distribution specification on-the-wire More: https://ku.bz/pGynn6_Nx

Zain Malik, Software @ Exostellar, shares a critical production incident his team faced as early adopters of Cluster API for AKS. He describes discovering a bug that only manifested during scale-down operations after migrating completely from Google Cloud to Azure. The bug in CAPZ (Cluster API Provider for Azure) caused provider IDs to be mixed between different node pools, resulting in 60% of their nodes being deleted without proper cordoning or draining. Despite the outage, Zain highlights how the Cluster API maintainers responded within minutes, identified the issue within 15 minutes, and created a fix within 30 minutes. This war story demonstrates both the risks of being early adopters and the value they provided to the broader community by helping identify and fix a zero-day issue. Watch the full episode: https://ku.bz/5PLksqVlk

This tutorial shows how to deploy OpenClaw on Kubernetes with a Helm chart and ArgoCD, using persistent storage, config modes, secrets handling, and network policies to reduce the blast radius of an AI agent. More: https://ku.bz/4-b9pCNFz

KubeVPN is a tool that seamlessly connects to your Kubernetes cluster network, allowing you to access cluster resources from your local machine. More: https://ku.bz/QRqdvRNrj

This week on Learn Kubernetes Weekly 188: 🔥 When ipBlock Breaks HTTPS in Kubernetes: Debugging NetworkPolicy, Traefik, and Hairpin Routing 🔧 How Nginx's New resolve Directive Finally Fixed Our Kubernetes 502s ⚡ Before You Implement KEDA, Do This First 🤝 Why Your CI/CD Pipeline Failures Still Need a Human — And How We're Changing That 📊 Your SLOs Should Be Kubernetes Resources, Not Grafana Dashboards Read it now: https://kube.today/issues/188 ⭐️ This newsletter is brought to you by LearnKube — master Kubernetes with hands-on training designed for engineers who want to learn the smart way https://ku.bz/7py0zX-ct

This tutorial teaches how to extend EKS with hybrid nodes using IAM Roles Anywhere and HashiCorp Vault for secure authentication of on-premises or edge workloads. More: https://ku.bz/s3DxFxdHf