#kubernetes

Explains Elastic Container Service (ECS) from a Kubernetes perspective, mapping core ECS components like clusters, task definitions, and services to similar Kubernetes constructs such as pods, deployments, and services to help Kubernetes users understand ECS.

KubeSwift is an open-source project that provides Kubernetes-native VM orchestration using Cloud Hypervisor. It allows users to manage virtual machines directly through Kubernetes APIs and tooling, integrating VM workloads seamlessly into existing Kubernetes clusters.

Stern is a tool that allows users to tail logs from multiple pods and containers in Kubernetes, with support for color-coded output, regex-based pod selection, and customizable options for log streaming.

The article compares the RED (Rate, Errors, Duration) and USE (Utilization, Saturation, Errors) methods for Kubernetes observability from an SRE perspective. RED focuses on user-facing request metrics, while USE targets resource health, helping teams choose the right approach for monitoring microservices and infrastructure.

This guide explains how to deploy DocumentDB across multiple cloud providers using the DocumentDB Kubernetes Operator, covering setup, configuration, and management of a multi-cloud DocumentDB cluster on Kubernetes.

Ballast is an automatic resource adjuster for Kubernetes workloads that dynamically tunes CPU and memory requests and limits based on actual usage, helping to optimize cluster resource utilization without manual intervention.

Tigera has launched Lynx, a unified control plane designed to manage Kubernetes-native AI agents. The platform aims to simplify the deployment, scaling, and orchestration of AI workloads within Kubernetes environments.

Kubelens is a browser-based UI tool for Kubernetes clusters that requires no additional setup beyond having kubectl configured. It allows users to view and manage cluster resources through a graphical interface.

Kube-insight is an open-source tool that captures and retains Kubernetes cluster state, configuration, and logs for incident investigations. It stores evidence snapshots over time, enabling post-hoc analysis of what changed in a cluster before or during an incident. The project aims to improve forensic capabilities for Kubernetes environments.

Synaplan is an Apache2-licensed, open-source AI management platform with Helm charts for Kubernetes deployment and integrated support for major AI APIs, including Ollama. It is designed for hosters who want to run their own branded version.

Flux 2.9.0 has been released, introducing new mirror and schema plugins. The update brings enhanced functionality for managing Kubernetes resources with these additional plugin options.

A kubelet memory leak in Kubernetes 1.36 is caused by kube-controller-manager sending excessive PATCH requests for completed Pods. The fix involves reverting behavior with feature flags or upgrading to a patched version.

ngrok ported Kubernetes to run inside a web browser using WebAssembly, creating a project called Webernetes. The demo allows users to spin up a full Kubernetes cluster with a control plane and worker node entirely client-side, with all components compiled to WASM and running in the browser without any backend servers.

The video "wrtK8s" discusses writing Kubernetes resource types and controllers, covering YAML structure, API group versions, and custom resource definitions (CRDs) for extending Kubernetes functionality.

A developer successfully ported Kubernetes to run entirely within a web browser using WebAssembly and a custom runtime, demonstrating the feasibility of running container orchestration workloads in the browser without a traditional cluster. The project leverages in-browser Linux emulation and lightweight container runtimes to run real Kubernetes components like kubelet and API server locally.

Looop is a tiny, portable, Kubernetes-shaped control loop designed for LLM agents, offering a lightweight framework to manage and orchestrate agent workflows.

ServerKit is an Android app that turns SSH commands into a visual UI for server management, supporting monitoring, Kubernetes, and database operations. It includes a terminal and a free 30-minute VPS lab for testing. The developer created it after needing remote server access without a laptop.

The article explains Kubernetes CPU requests and limits by linking them directly to Linux cgroups. It clarifies that requests are used for scheduling and setting the CPU bandwidth (CFS quota), while limits cap a pod's CPU usage. Through practical examples with the docker and cgroup filesystem, it demonstrates how these Kubernetes abstractions translate into actual kernel mechanisms.

Kubescheduler: The Game is a browser-based puzzle where players manually schedule Kubernetes pods onto nodes, mimicking the role of the real kube-scheduler. Players assign pods to nodes based on resource constraints and policies, testing their understanding of Kubernetes scheduling logic.

Infisical rebuilt their Kubernetes Operator from scratch because the original design had scalability and performance issues. The new operator improves how secrets are synced and managed across Kubernetes clusters, addressing the limitations that emerged as usage grew.

Linkerd introduces cluster federation capabilities for Kubernetes, enabling zero-downtime operations across multiple clusters. The feature allows seamless service discovery and communication between clusters without complex networking configurations, supporting multi-cluster failover and geographic load balancing.

This article reviews OVHCloud's managed Kubernetes service, detailing its cluster setup, node pools, pricing, and integration with the OVH ecosystem. It covers strengths like simplicity and cost-effectiveness, as well as limitations such as fewer advanced features compared to larger hyperscalers. The review serves as a practical guide for teams considering OVHCloud for Kubernetes workloads.

The article discusses how using Crossplane and Helm together simplifies cloud infrastructure management. By treating infrastructure as Kubernetes resources and managing them with Helm charts, the approach makes complex cloud provisioning "boring" and reliable, which is praised as a positive outcome for engineering teams.

The article describes how the author built "ModelPlane," a fleet-scale inference control plane using Crossplane. It explains how Crossplane's declarative Kubernetes-native approach was used to manage and orchestrate AI/ML model deployments across large-scale infrastructure, enabling efficient control over inference workloads.

Linkerd 2.20 has been released, introducing new features for the cloud-native service mesh, including enhanced performance, improved security, and expanded compatibility with Kubernetes ecosystems.

Linkerd 2.20 introduces rate-limit-aware load balancing, reduced memory usage, automated trust anchor rotation, and Windows VM support. The update improves performance and operational efficiency for the service mesh, particularly for environments with rate-limited upstream services and those using Windows nodes.

Flanksource Canary Checker integrates with Flux to enable synthetic infrastructure testing, allowing teams to validate that infrastructure changes and deployments behave as expected through automated, continuous testing of system components.

Webernetes is an open-source project that runs a lightweight Kubernetes cluster entirely inside a web browser, enabling users to experiment with Kubernetes without needing external infrastructure or installations.

Helmsniff is a security scanner for Helm charts that checks for misconfigurations, vulnerabilities, and insecure defaults.

Wekubernetes is a project that runs a full Kubernetes cluster inside a web browser using WebAssembly and wazero, allowing developers to experiment with Kubernetes locally without any installation.