Kube Builders

🗣️ Niels Claeys, Lead data engineer & partner at Dataminded, explains proven strategies for managing AWS spot instances in production batch workloads Watch the full episode: https://ku.bz/hGRfkzDJW

"It's really expensive in people." Molly Sheets joins Daniele and Bart on the staffing cost of seven Kubernetes provisioning models https://ku.bz/Db3VnC3nl Sponsored by LearnKube

kube-mdns watches Kubernetes Ingress resources and auto-publishes `.local` DNS records via mDNS, enabling zero-config LAN service discovery without modifying DNS ➜ https://ku.bz/m9YBT7_R4

This case study finds a 100x KV cache transfer slowdown in vLLM on GKE, shows how NixlPushConnector restores about 49 GB/s, and measures the latency tradeoff of disaggregated LLM serving ➜ https://ku.bz/J5cY_rtDv

🗣️ Vitalii Horbachov explains how their macOS VZ Kubelet enables hybrid runtime pods that run macOS VMs alongside Docker containers within the same Kubernetes pod Watch the full episode: https://ku.bz/q_JS76SvM

This case study explains how Modelplane was built entirely as a Crossplane configuration, with no custom controllers, to turn GPUs spread across clouds into one fleet behind a stable inference API ➤ https://ku.bz/Qk7c12L-R

This repo is a GitOps-driven homelab blueprint where all infrastructure and apps are declaratively managed with tools like Talos, OpenTofu, ArgoCD, Cilium, Longhorn, Authentik, cert-manager, and more ➤ https://ku.bz/P-LYq2tV1

This case study shows how one Fluentd DaemonSet kept losing logs during restarts, and how splitting collection (Fluent Bit) from aggregation (Fluentd) removed the gaps ➤ https://ku.bz/9q5nqwSW1

This tutorial teaches how to migrate EKS from AWS VPC CNI and kube-proxy to Cilium using blue/green nodes, WireGuard encryption, and Hubble for observability ➜ https://ku.bz/sYGLb0l37

Reloader is a Kubernetes controller that watches Secrets and ConfigMaps and triggers rolling updates on Deployments, StatefulSets, and more when changes are detected ➤ https://ku.bz/sPP_XdTc0

Keel runs as a Kubernetes controller and automates deployment updates by monitoring image tags or Helm charts It triggers rolling updates in response to new images, using admission checks and configurable policies to enforce safe, continuous delivery ➜ https://ku.bz/3G6GZk0t8

"Kubernetes is helping me on two fronts: my own incompetence, because I'm not an SRE, and hardware failure, because my server is in my living room." Thibault Martin on rethinking Kubernetes for home labs 📺: https://ku.bz/Xk5S7VqXz

This article explains how running ZooKeeper on Google Cloud Z4D nodes with local SSDs removes the disk latency that slows consensus writes, plus the GKE anti-affinity, volume binding and JVM tuning it needs ➤ https://ku.bz/7WK7w0zK6

KubeClaw is a production-grade Helm chart for running OpenClaw AI agents on Kubernetes with secure defaults, pinned images, default-deny egress via Blocky, digest-locked upgrades, and batteries-included observability ➜ https://ku.bz/CbKpPNvJq

kubectl-netshoot is a kubectl plugin that spins up a netshoot container in a pod or on a node, so you can debug cluster networking without adding any tools to your own images ➜ https://ku.bz/2N04Jyj70

Harvester turns bare-metal servers into a hyperconverged platform combining VMs and containers using Kubernetes, KubeVirt, Longhorn, and Rancher It supports live migration and distributed storage and is built for core-to-edge ops ➤ https://ku.bz/0-LL0mwyj

kubewall provides a simple and rich real time interface to manage and investigate your clusters ➜ https://ku.bz/qpjRJ28h4

This week on the Learn Kubernetes Weekly: 🌐 DNS on AWS ⏳ Eventually Consistent ConfigMap Mounts 🚨 kubectl-mcp-tool Command Injection 🐘 PostgreSQL Lifecycle on Harvester 💰 Cassandra Bill: $30K to $10K ⭐️ Teleport Read it now: https://kube.today/issues/206

Join Graziano Casto of Akuity at LearnKube Day Salt Lake City 2026 for Kubernetes lightning talks, YAML Games, and a community reception with DJ Amin Astaneh Learn more: https://learnkube.com/learnkube-day-salt-lake-city-2026

"My biggest surprise was that kubelet pulls images serially by default. One big image blocks everything else." Jan Ludvik on a one-flag fix for faster node startup 📺: https://ku.bz/B7TzKXyxf

This tutorial teaches how to build a Raspberry Pi K3s homelab by preparing nodes, enabling cgroups, configuring networking, joining agents, and deploying a Skaffold demo app ➜ https://ku.bz/dVBHR_Ztk

CPU and memory usage need context before you change Kubernetes requests and limits Our new open-source Resource Review Mixin brings usage, throttling, pressure, and runtime events into Grafana https://github.com/learnk8s/resource-review-mixin

If you're running I/O-intensive workloads, traditional block storage latency becomes a bottleneck Simplyblock CSI bypasses kernel I/O and leverages user-space SPDK over NVMe-oF to deliver bare-metal performance within Kubernetes ➜ https://ku.bz/tpz35thV_

Kor is a CLI tool that scans your cluster and lists the unused resources nobody cleaned up, from forgotten ConfigMaps and Secrets to stale Services and PVCs ➤ https://ku.bz/YzcpnL3gj

This tutorial shows how to run Azure DevOps agents on AKS so that KEDA spins up a fresh agent pod whenever the pipeline queue grows and removes it when the job is done ➤ https://ku.bz/y7Kjp1WvS

Kubesafe is a tool that prevents accidental execution of dangerous commands on the wrong Kubernetes cluster by providing a safety net for cluster management ➤ https://ku.bz/3hC23K79L

DPF is a Kubernetes-native framework for provisioning and orchestrating NVIDIA BlueField-3 DPUs It abstracts DPU management and offloads networking and storage workloads from host servers to Linux-based arm64 DPUs using the DOCA software stack ➜ https://ku.bz/yzQLfQ3N6

KubeShark is a Kubernetes skill for Claude Code and Codex that feeds the agent official best practices, so generated manifests stop using deprecated APIs, wildcard RBAC or missing resource limits ➤ https://ku.bz/m6GhSVL9W

This article tells how a GPU passthrough on a k3s worker VM put a whole Proxmox host into a boot loop, and how masking the guest-start service at the GRUB prompt rescued it ➤ https://ku.bz/79pRFd6Zm

This article lays out an AI-assisted AWS DevSecOps pipeline on EKS, where Amazon Q reviews code, Inspector gates the image, DevOps Guru watches production and Step Functions decide when auto-remediation may run without a human ➜ https://ku.bz/LL-lCFNc0

This article lays out a production EKS setup where Karpenter keeps a cheap On-Demand baseline and absorbs traffic spikes with Spot nodes that drain safely when AWS reclaims them ➤ https://ku.bz/f-CnXzXxb

tfplanctx turns a Terraform plan into a short, grep-friendly summary so coding agents can review what will change without burning context on raw plan output ➤ https://ku.bz/jm97DG4yh

kubectl-config-doctor is a CLI plugin that detects broken, misconfigured, or unreachable kubeconfig setups—catching issues like duplicate contexts, invalid auth methods, missing files, or unreachable APIs ➜ https://ku.bz/Whfwxjb38

"If the disk filled up before backup ran, the Postgres instance would go down." Ziv Yatzik on why existing backup solutions fall short 📺: https://ku.bz/Rg_sQYSmw

This week on the Learn Kubernetes Weekly: 🚨 Kubernetes Health Checks Down Payments 🏗️ Hybrid Kubernetes Survey Processing ⚡ The Fastest Redis Call 🌐 CNI Deep Dive 🤔 Why CPUs Never Had This Problem ⭐️ LearnKube Read it now: https://kube.today/issues/205

This article explains how CNI connects Kubernetes pods, how ADD, DEL, and CHECK work, and how Flannel, Calico, and Cilium move traffic differently ➜ https://ku.bz/FDkSSqmvF

This article sketches how to build a shared-memory fabric with RoCE v2 in Kubernetes, bypassing the CNI overlay with RDMA for tightly coupled workloads The author states upfront that it is untested design work, not benchmarked guidance ➜ https://ku.bz/jwTMnqRTL

1/10 One of the things I like about the LearnKube Telegram group is the discussion that follows the articles we share. We shared a case study about a payment service stuck in a restart loop. Its liveness probe depended on a downstream service.

Automation can only replace human judgment if your pod signals are strong enough to trust Jason Deal on what Kubernetes platforms still need to get right before upgrades can be fully automated 📺: https://ku.bz/1_-DTgLsg

Slurm Bridge is a Kubernetes scheduler that converts Pod resource requests into Slurm jobs, enabling HPC and cloud workloads to share the same cluster hardware ➜ https://ku.bz/VqsW5p3PN

This article explains why EKS sends most pod-to-pod traffic across availability zones and how the Kubernetes 1.35 trafficDistribution: PreferSameZone setting keeps it local and cuts the transfer bill ➤ https://ku.bz/rTP8hwDVQ

NetObserv deploys an eBPF agent on every node to capture network flows, enrich them with Kubernetes metadata, and export to Loki, Prometheus, Kafka, or IPFIX — with a web console showing topology, raw flows, and traffic metrics ➤ https://ku.bz/STLN1Tks5

This case study shows how Inditex reclaims idle node capacity with an open-source overcommit operator that rewrites pod requests through a mutating webhook, based on priority class ➤ https://ku.bz/XV3rLBhJr

This case study follows one engineer building a home data centre from scratch, running k3s on recycled hardware with NAS storage, Cloudflare Tunnels for public access and Argo CD for deployments ➤ https://ku.bz/ZVqq7WZFk

This case study shows how a hidden iptables-legacy NAT rule added by Tailscale changed source IPs between Kubernetes hosts and broke etcd peer TLS, plus how the team found and removed it ➜ https://ku.bz/MNNxsw45F

Ten speakers. Five minutes each. Practical Kubernetes lessons for the community Brandt Keller from Defense Unicorns is joining the LearnKube Day lightning talks in Salt Lake City https://learnkube.com/learnkube-day-salt-lake-city-2026

Hermes Agent Operator runs Hermes AI agents on Kubernetes as custom resources, so each agent's config, skills and workspace live in one manifest instead of drifting on someone's laptop ➤ https://ku.bz/wHB1LNKGz

System Upgrade Controller upgrades your nodes from inside the cluster: you describe the change in a Plan resource and it runs the upgrade job on each node, cordoning and draining when you ask it to ➤ https://ku.bz/GyCBX9mcG

obleth is a multi-tenant AI gateway that fairly shares GPU capacity, routes OpenAI-compatible requests to the right model, starts Slurm jobs, and tracks cost and energy use ➜ https://ku.bz/LYJ5D5wLh

This tutorial shows how to serve and scale large language models on Kubernetes with KServe, use KEDA for demand-based scaling, and run inference with vLLM ➜ https://ku.bz/vQySxD1n9