Kube Builders

Kubesafe is a tool that prevents accidental execution of dangerous commands on the wrong Kubernetes cluster by providing a safety net for cluster management. More: https://ku.bz/3hC23K79L

KubeShark is a Kubernetes skill for Claude Code and Codex that feeds the agent official best practices, so generated manifests stop using deprecated APIs, wildcard RBAC or missing resource limits. More: https://ku.bz/m6GhSVL9W

Ben Poland, Senior Staff Platform Engineer @ Faire, breaks down the fundamental architectural differences between Jenkins and Buildkite when running CI workloads on Kubernetes. He explains how Jenkins controllers handle the control plane (UI, pipeline parsing, work distribution) and pod management through the Kubernetes plugin, creating a bottleneck that limits scalability to around 1,500-2,000 pods per controller. In contrast, Buildkite separates the control plane by hosting it themselves, while Faire runs only the agent stack component in their Kubernetes infrastructure. Watch the full episode: https://ku.bz/klBmzMY5-

Kubernetes problems often hide in controller timing, implicit defaults, and capacity assumptions. This week in Learn Kubernetes Weekly: 🔎 A production race condition left orphaned pods blocking new deployments. 📦 Source Hydrated Infrastructure Models commit rendered manifests for explicit GitOps audits. 🖥 Headlamp replaces the archived Kubernetes Dashboard and maps familiar workflows to a maintained UI. ⚙️ Kubernetes 1.36 adds pod-level CPU and memory management. 📊 The k8s-overcommit operator reclaims idle capacity according to priority classes. Read issue 201: https://kube.today/issues/201 This issue is brought to you by LearnKube — understand how Kubernetes works, and what to do when it breaks. Live training with 60% hands-on labs: https://ku.bz/hypSbyc-V

This article tells how a GPU passthrough on a k3s worker VM put a whole Proxmox host into a boot loop, and how masking the guest-start service at the GRUB prompt rescued it. More: https://ku.bz/79pRFd6Zm

A pizza order became a 15-container, 200-trace system. In Kube Signals episode two, Brian Teller and Mauricio (Salaboy) Salatino examine observability, state management, governance, and trust for non-deterministic agents. They discuss: - Why multi-agent runtimes can recreate monolith scaling - How OpenTelemetry exposes prompts, completions, and decisions - Why execution history turns agent trust into measurable evidence Watch: https://ku.bz/TlVjXdnb6 Kubernetes moves too fast to track everything. Learn Kubernetes Weekly filters out the noise to deliver one curated email with useful articles, tutorials, tools, jobs, events, and CFPs. Subscribe to Learn Kubernetes Weekly.

This article lays out a production EKS setup where Karpenter keeps a cheap On-Demand baseline and absorbs traffic spikes with Spot nodes that drain safely when AWS reclaims them. More: https://ku.bz/f-CnXzXxb

tfplanctx turns a Terraform plan into a short, grep-friendly summary so coding agents can review what will change without burning context on raw plan output. More: https://ku.bz/jm97DG4yh

The teams that upgrade Kubernetes without fear all share one thing: they've already been doing it in production — repeatedly. Jason Deal from AWS makes the case for treating nodes as cattle, not pets. When you build automation that reliably brings nodes up and down, and then pressure-test it under normal conditions, upgrades stop being special events. You've already done it a hundred times. Watch the full interview: https://ku.bz/1_-DTgLsg

This article explains why EKS sends most pod-to-pod traffic across availability zones and how the Kubernetes 1.35 trafficDistribution: PreferSameZone setting keeps it local and cuts the transfer bill. More: https://ku.bz/rTP8hwDVQ

NetObserv deploys an eBPF agent on every node to capture network flows, enrich them with Kubernetes metadata, and export to Loki, Prometheus, Kafka, or IPFIX — with a web console showing topology, raw flows, and traffic metrics. More: https://ku.bz/STLN1Tks5

This case study shows how Inditex reclaims idle node capacity with an open-source overcommit operator that rewrites pod requests through a mutating webhook, based on priority class. More: https://ku.bz/XV3rLBhJr

Kubernetes is easier to use than it was a decade ago, but that does not remove the quality burden. Andrew Block argues that the next era will be defined by better abstractions and better tooling, not by eliminating judgment. Teams still need time to learn what works, what fails, and which practices should become standard. Watch the full interview: https://ku.bz/-q_FYPGj8

This case study follows one engineer building a home data centre from scratch, running k3s on recycled hardware with NAS storage, Cloudflare Tunnels for public access and Argo CD for deployments. More: https://ku.bz/ZVqq7WZFk

200 issues. More than 77,000 Kubernetes engineers. Thank you to all of you reading it 🎉 In Learn Kubernetes Weekly 200: 🤖 Benchmarking LLM Inference with Production Agent Traces 🔌 Two New Headlamp Plugins 🌐 Migrating from ingress-NGINX to Envoy Gateway 🐘 Building High-Availability PostgreSQL on Kubernetes Read it: https://kube.today/issues/200

Hermes Agent Operator runs Hermes AI agents on Kubernetes as custom resources, so each agent's config, skills and workspace live in one manifest instead of drifting on someone's laptop. More: https://ku.bz/wHB1LNKGz

Kubernetes is ready for databases. Most teams are not. In KubeSelect episode two, Salman Iqbal and Bart Farrell test this claim with Kat Cosgrove of VillageSQL. Kat covers: - Modern Kubernetes storage - Operators and database expertise - Team readiness - Managed database tradeoffs Kat's verdict: this is now a people problem. Watch the episode: https://ku.bz/7yDWlP8T5 Kubernetes moves too fast to track everything. Learn Kubernetes Weekly filters out the noise to deliver one curated email with useful articles, tutorials, tools, jobs, events, and CFPs. Subscribe to Learn Kubernetes Weekly.

System Upgrade Controller upgrades your nodes from inside the cluster: you describe the change in a Plan resource and it runs the upgrade job on each node, cordoning and draining when you ask it to. More: https://ku.bz/GyCBX9mcG

This article digs into a bug in VPC CNI v1.21.0 in which a reused loop variable wrote network policy rules to the wrong eBPF map, silently dropping every packet to the pod. More: https://ku.bz/43PN-mTCS

Most teams prefer one Kubernetes platform, but real systems are rarely that tidy. Jordan Karapanagiotis describes how Aurea Imaging works across k3s on bare metal and GKE in the cloud, which means platform knowledge and operational context matter as much as the distro itself. Watch the full interview: https://ku.bz/5PD0t32XG