Kube Builders

DPF is a Kubernetes-native framework for provisioning and orchestrating NVIDIA BlueField-3 DPUs. It abstracts DPU management and offloads networking and storage workloads from host servers to Linux-based arm64 DPUs using the DOCA software stack. More: https://ku.bz/yzQLfQ3N6

This article lays out an AI-assisted AWS DevSecOps pipeline on EKS, where Amazon Q reviews code, Inspector gates the image, DevOps Guru watches production and Step Functions decide when auto-remediation may run without a human. More: https://ku.bz/LL-lCFNc0

kubectl-config-doctor is a CLI plugin that detects broken, misconfigured, or unreachable kubeconfig setups—catching issues like duplicate contexts, invalid auth methods, missing files, or unreachable APIs. More: https://ku.bz/Whfwxjb38

"Point-in-time recovery is not a core database feature—it didn't make sense that we should experience downtime just to get it." Ziv Yatzik tested multiple backup solutions for Patroni. The problem: they all required local disks that could fill up and crash the database. Every tool they tried was either buggy or architecturally fragile. The lesson: your backup system shouldn't be a single point of failure. Watch the full episode: https://ku.bz/Rg_sQYSmw

This week on Learn Kubernetes Weekly 205: 🚨 How Kubernetes Health Checks Brought Down a Payment Service 🏗️ The cluster that runs on our own metal: rebuilding survey processing on hybrid Kubernetes ⚡ The Fastest Redis Call Is the One You Never Make 🌐 CNI Deep Dive 🤔 Why did CPUs never have this problem? Read it now: https://kube.today/issues/205 ⭐️ This newsletter is brought to you by LearnKube — understand how Kubernetes works, and what to do when it breaks. Live training with 60% hands-on labs https://ku.bz/hypSbyc-V

This article explains how CNI connects Kubernetes pods, how ADD, DEL, and CHECK work, and how Flannel, Calico, and Cilium move traffic differently. More: https://ku.bz/FDkSSqmvF

This article sketches how to build a shared-memory fabric with RoCE v2 in Kubernetes, bypassing the CNI overlay with RDMA for tightly coupled workloads. The author states upfront that it is untested design work, not benchmarked guidance. More: https://ku.bz/jwTMnqRTL

The missing piece for zero-touch Kubernetes upgrades isn't better tooling, but better signals. Jason Deal from AWS argues that pod ready checks and PDBs need to be strong enough for automation to trust them. If those signals are unreliable, human intervention steps in. When they're solid, automation can roll nodes without anyone watching. The next frontier: better primitives for stateful applications, which can't always be modeled by PDBs and need richer mechanisms to express what "healthy enough to evict" actually means. Watch the full interview: https://ku.bz/1_-DTgLsg

Slurm Bridge is a Kubernetes scheduler that converts Pod resource requests into Slurm jobs, enabling HPC and cloud workloads to share the same cluster hardware. More: https://ku.bz/VqsW5p3PN

This case study shows how a hidden iptables-legacy NAT rule added by Tailscale changed source IPs between Kubernetes hosts and broke etcd peer TLS, plus how the team found and removed it. More: https://ku.bz/MNNxsw45F

LearnKube Day includes ten five-minute lightning talks from Kubernetes practitioners sharing practical lessons with the community. Brandt Keller, Staff Software Engineer at Defense Unicorns, is one of the featured lightning-talk speakers at LearnKube Day Salt Lake City 2026. The event brings together a hands-on Kubernetes workshop, technical sessions, open Q&A, lightning talks, YAML Games, and a community reception. Learn more: https://learnkube.com/learnkube-day-salt-lake-city-2026

obleth is a multi-tenant AI gateway that fairly shares GPU capacity, routes OpenAI-compatible requests to the right model, starts Slurm jobs, and tracks cost and energy use. More: https://ku.bz/LYJ5D5wLh

This tutorial shows how to serve and scale large language models on Kubernetes with KServe, use KEDA for demand-based scaling, and run inference with vLLM. More: https://ku.bz/vQySxD1n9

This case study shows how Albert Heijn built a centralized LGTM-stack observability platform across 1800 engineers, replacing ELK, Nagios, Dynatrace and Azure Monitor setups. More: https://ku.bz/7PG1-ZNH3

"Every cloud provider has buffer capacity sitting idle. They sell it cheap — on the condition they can take it back." Varnit Goyal explains how Spot Instances work: cloud providers auction unused capacity at a fraction of regular prices. The catch is preemption — they can reclaim your machines when demand rises. Rackspace Spot takes this further by offering a managed Kubernetes cluster on top of Spot Instances. You don't manage the control plane — just connect your Spot workers. Watch the full episode: https://ku.bz/HpVyQMVv0

This week on Learn Kubernetes Weekly 204: 🧠 Workload-Aware Scheduling in Kubernetes 1.37 ⚙️ Automaxprocs Now Costs Your Go Binary a CPU 🔀 Your gRPC Service Only Talks to One Pod. Here’s Why. 🔐 Your Kubernetes OIDC Issuer Is Just Two Static Files 🧩 Why We Open-Sourced ZSvirt Read it now: https://kube.today/issues/204 ⭐️ This newsletter is brought to you by NeuBird — move beyond dashboards and runbooks with an AI agent that detects production issues, finds their root cause, and helps your team resolve them https://ku.bz/nh5ZFW_b9

selenosis is a stateless browser hub that creates one short-lived Kubernetes pod for each Selenium, Playwright, or MCP session and provides automatic cleanup when it ends. More: https://ku.bz/TH1S58-sJ

Why can a Go service be OOM-killed while its heap looks healthy? The heap is only part of the container's memory usage. Goroutine stacks, native allocations, and runtime overhead also count toward the container limit. In this new article from Gulcan, you will learn: - How CPU quotas affect Go's parallelism and why extra threads can increase throttling. - How to measure total container memory, including goroutine stacks and native allocations. - Why a tighter memory budget can increase garbage collection work and reduce throughput. Read: https://learnkube.com/go-kubernetes-requests-limits This article is also included in our book on Kubernetes rightsizing: https://learnkube.com/kubernetes-rightsizing

GoKubeDownscaler is the Go rewrite of py-kube-downscaler that scales Kubernetes workloads down outside working hours, so you stop paying for deployments nobody is using. More: https://ku.bz/J8PFK27L1

This tutorial teaches how to serve models with KServe through hands-on labs covering Standard and Knative modes, networking, autoscaling, security, canary releases, and LLM serving. More: https://ku.bz/2kX-hqsb4