Telegram channel "Kubernative by Palark | Kubernetes news and goodies"

Kubernative by Palark | Kubernetes news and goodies

Public

Attentions : It important to do your own research before placing your trust in any information, particularly if there's a request for money involved.

Can't Join? @kubernative

1.5k Members

Updated: March 11, 2026 at 2:57 AM

Kubernative by Palark | Kubernetes news and goodies

News, articles, tools, and other useful cloud native stuff for DevOps, SRE and software engineers. This channel is managed by Palark GmbH. Contact @dshnow to suggest your content.

Join @kubernative for exclusive articles and useful content and discussions in 1

Ranking

Global Ranking

#2530No change

Language Ranking

#575No change

Category Ranking

#37No change

Participant Growth (Last 28 Days)

Total: 1.5K

24h growth: +4 0%

Latest Posts

Kubernative by Palark | Kubernetes news and goodies

Mar 11, 2026, 02:44 AM

Our latest selection of interesting Kubernetes-related articles recently spotted online:

1. https://spacelift.io/blog/kubernetes-rolling-update by James Walker, Spacelift.
In this guide, we will explain the benefits of rolling updates, describe how they work, and provide detailed examples of their use. We’ll also compare how rolling updates stack up against other popular deployment strategies.

2. https://kubernetes.io/blog/2026/01/28/experimenting-gateway-api-with-kind/ by Ricardo Katz, Red Hat.
This document will guide you through setting up a local experimental environment with Gateway API on kind. This setup is designed for learning and testing. It helps you understand Gateway API concepts without production complexity.

3. https://itnext.io/understanding-the-ingress-nginx-deprecation-before-you-migrate-to-the-gateway-api-fbf2ad0443bc by Artem Lajko.
Most blog posts about the Ingress-NGINX deprecation are optimized for clicks, not for engineers who actually have to migrate production systems. You’ll find tiny demo setups, toy examples, and conclusions that fall apart the moment you apply them to an enterprise environment. That frustration is the reason this guide exists. This article is based on our real enterprise setup, built on top of the kubara framework. It documents how we approached the migration, what worked, what didn’t, and — just as important — what we decided not to migrate.

4. https://blog.zmalik.dev/p/lazy-pulling-container-images-a-deep by Zain Malik.
This post starts with why the problem is harder than it looks at the byte level, then surveys the major approaches and what they trade off. The core of the post is a hands-on experiment: I deploy an in-cluster registry, convert images to eStargz, patch containerd with a custom snapshotter, and measure something nobody benchmarks properly. Not just pull time, but readiness, the moment a container can actually serve its first request.

5. https://medium.com/qonto-way/kernel-archaeology-why-36-cpus-crash-cilium-but-32-dont-2007f6f6772a by Pierre Magne, Qonto.
[..] The deployment looked successful. But then, over several weeks, we noticed sporadic crashes — roughly one Cilium agent per week, completely unrecoverable without restarting the entire node. No clear pattern, no obvious trigger. Rare enough to be hard to reproduce, but severe enough to block production deployment.

6. https://medium.com/@bossm8/running-fluxcd-locally-gitops-for-kubernetes-on-your-laptop-7842b89d67b7 by Marco Boss.
[..] I started looking for a way to develop and validate manifests locally, while still having full access to Flux features, and without resorting to brittle hacks or partial simulations. In this post, I’ll walk you through the approach I ended up with and show you how to run Flux locally in a way that actually feels usable for day-to-day development.

#articles

911

Kubernative by Palark | Kubernetes news and goodies

Mar 11, 2026, 02:44 AM

vCluster introduced vind, marketed as a better kind

vCluster Labs ( as Loft Labs) released a new tool called vind (vCluster in Docker). It is built on top of vCluster and allows you to run Kubernetes clusters directly as Docker containers, similarly to what kind (Kubernetes IN Docker) offers. However, it comes with the following extra features:

- pausing the clusters when they're not in use and resuming them;
- automatic LoadBalancer support;
- image caching (pull-through cache via local Docker daemon);
- support for connecting external nodes, which can be real cloud instances;
- support for choosing CNI and CSI plugins;
- built-in vCluster Platform UI.

You can find more details about vind on https://github.com/loft-sh/vind and in yesterday’s https://www.linkedin.com/events/7417677957579718656/ on LinkedIn.

#news #tools

1,130

Kubernative by Palark | Kubernetes news and goodies

Mar 11, 2026, 02:44 AM

Optimising resources in Kubernetes is something we all want to do at some point. This new project aims to assist in that.

CruiseKube, dubbed as “Autopilot for Kubernetes”, is a controller that watches your K8s workloads and adjusts the resources accordingly. Here’s what it does:

- Continuously evaluates current CPU/memory usage and updates resource requests.
- Considers CPU pressure (PSI metrics) and other Pods on the node when resizing.
- Watches OOM memory values in stats and triggers Pod eviction when needed.
- Uses Prometheus as the primary metrics source.
- Provides a web UI to see and manage your settings.

▶️ https://github.com/truefoundry/CruiseKube
💬 https://www.reddit.com/r/kubernetes/comments/1qkt0m9/cruisekube_a_justintime_opensource_kubernetes/

Language: Go | License: MIT | 48 ⭐️

#tools

813

Kubernative by Palark | Kubernetes news and goodies

Mar 11, 2026, 02:44 AM

Node Readiness Controller for Kubernetes

Last week, a new Kubernetes SIG project https://kubernetes.io/blog/2026/02/03/introducing-node-readiness-controller/. The Node Readiness Controller can be used to define additional requirements for node readiness (e.g., GPU drivers are loaded). The controller will manage node taints to prevent scheduling until the required conditions are satisfied. It supports bootstrap-only and continuous enforcement modes. Currently, the project is in its alpha.

Find more details in the https://node-readiness-controller.sigs.k8s.io/ and on https://github.com/kubernetes-sigs/node-readiness-controller.

#news #tools

749

Kubernative by Palark | Kubernetes news and goodies

Mar 11, 2026, 02:44 AM

Another bunch of interesting Kubernetes-related articles recently spotted online:

1. https://octopus.com/blog/verifying-and-troubleshooting-kubernetes-deployments by Liam Mackie, Octopus Deploy.
Kubernetes has a gift for making simple problems look complicated, and complicated problems look simple. When something breaks, you often see symptoms completely unrelated to the real cause of the problem. This leads to a problem I like to call “blaming the network team”, where problems end up being diagnosed by the wrong engineers for a given issue. [..] I’ve personally experienced this dichotomy during my time as an engineer, working on both software and infrastructure, so I’m going to tell a story from two perspectives.

2. https://heilancoos.github.io/research/2025/12/16/kubernetes.html by Alexis Obeng.
My main motivation for writing this was to better understand for myself how Kubernetes works and its attack surface. I was also inspired from talking to people in the field and realizing just how prominent Kubernetes is in corporate environments. Although I did not cover every single attack vector here, I still cover a large amount of topics in the hope that this will prove useful to others seeking to understand Kubernetes’ attack surface.

3. https://palark.com/blog/cncf-sandbox-2025-jan/ by Dmitry Shurupov, Palark.
Learn about the following new CNCF projects: Podman Container Tools and Podman Desktop, bootc, composefs, k0s, KubeFleet, SpinKube, container2wasm, Runme Notebooks for DevOps, SlimFaas, Tokenetes, CloudNativePG, and Drasi.

4. https://www.prequel.dev/blog-post/the-real-state-of-helm-chart-reliability-2025-hidden-risks-in-100-open-source-charts by Prequel.
Prequel's reliability research team audited 105 popular Kubernetes Helm charts to reveal missing reliability safeguards. The average score was ~3.98/10. 48% (50 charts) rated "High Risk" (score ≤3/10). Only 17% (18 charts) were rated "Reliable" (≥7/10).

5. https://www.cncf.io/blog/2026/01/20/reclaiming-underutilized-gpus-in-kubernetes-using-scheduler-plugins/ by Lalit Somavarapha, Gernot Seidler, Srujana Reddy Attunuri (HPE).
The default Kubernetes preemption mechanism (DefaultPreemption) can evict lower-priority pods to make room for higher-priority ones. But it only considers priority — not actual utilization. Pods are treated equivalently from a preemption perspective when they share the same priority, regardless of their current utilization. We evaluated several existing approaches.

6. https://medium.com/dodopayments/how-we-built-our-deployment-pipeline-gitops-argocd-and-kubernetes-at-dodo-payments-eb025549834e by Ayush Agarwal, Dodo Payments.
The investment in GitOps pays off at a certain scale. Below that scale, simpler solutions work fine. For us, running a payment platform with strict requirements around security, auditability, and reliability — GitOps isn’t optional. It’s infrastructure.

#articles

Kubernative by Palark | Kubernetes news and goodies

Mar 11, 2026, 02:44 AM

📷 Photo

Kubernetes-based alternatives to Heroku are real. Here’s one of them.

Canine positions itself as a “developer-friendly PaaS for your Kubernetes”. It’s focused on small development teams and simplifies using Kubernetes for them by providing:

- container builds performed via Docker BuildKit or Buildpacks;
- automatic deployment to GitHub and GitLab;
- web UI to deploy, scale, and manage (e.g., configure resource constraints) apps running in Kubernetes;
- integration with existing K8s tools, such as Helm, cert-manager, and Telepresence;
- single sign-on via SAML, OIDC, and LDAP.

▶️ https://github.com/CanineHQ/canine

Language: Ruby | License: Apache 2.0 | 2716 ⭐️

#tools #gui

1,110

Kubernative by Palark | Kubernetes news and goodies

Mar 11, 2026, 02:44 AM

ClickHouse just got the official Kubernetes operator

Less than 5 hours ago, the official ClickHouse Operator got its first public release, v0.0.1. It allows you to create and manage ClickHouse clusters and features ClickHouse Keeper integration, storage provisioning, TLS/SSL support, and Prometheus metrics integration.

The operator is written in Go, is Open Source (Apache 2.0) and available on https://github.com/ClickHouse/clickhouse-operator.

#news #releases #databases

1,450

Kubernative by Palark | Kubernetes news and goodies

Mar 11, 2026, 02:44 AM

New Kubernetes working group: Checkpoint/Restore WG

The newly https://kubernetes.io/blog/2026/01/21/introducing-checkpoint-restore-wg/ Kubernetes WG will focus on the Checkpoint/Restore in Userspace (CRIU) ecosystem for K8s. It includes the https://github.com/checkpoint-restore/criu tool as well as checkpointctl, criu-coordinator, and checkpoint-restore-operator.

You can find the charter, which defines the scope and governance of this working group, and other information, including its public meetings, on https://github.com/kubernetes/community/tree/master/wg-checkpoint-restore.

#news

795

Kubernative by Palark | Kubernetes news and goodies

Mar 11, 2026, 02:44 AM

Happy to share our first-in-2026 digest of the prominent software updates in the Cloud Native ecosystem!

Apache CloudStack, an Open Source IaaS solution, updated its CloudStack Kubernetes Provider, a cloud controller manager to facilitate K8s deployments, to https://github.com/apache/cloudstack-kubernetes-provider/releases/tag/v1.2.0. It added support for network ACLs for LB on VPC networks, a configurable source CIDR list, and ARM64 support for Docker images.

Harvester, a hyperconverged infrastructure solution built on Kubernetes, released https://github.com/harvester/harvester/releases/tag/v1.7.0 with experimental automatic VM workload rebalancing, support for MIG-backed vGPU devices, multipath device recognition and management, NIC hot plugging and hot unplugging, Open Virtual Format (OVF), pausable node upgrades, transparent hugepages configuration, VM VLAN trunking, and volume snapshots in guest clusters.

Jaeger (a CNCF Graduated project) reached https://github.com/jaegertracing/jaeger/releases/tag/v2.14.0, which added a dark theme to the UI, removed legacy v1 components (query, collector, ingester), and added a bunch of experimental features, most of which are related to ClickHouse and the FindTraces implementation for this storage.

Keycloak, an identity and access management solution (a CNCF Incubating project), released https://github.com/keycloak/keycloak/releases/tag/26.5.0 (with 26.5.1, which followed shortly). It introduced several new features in preview, such as Workflows to automate administrative tasks, JWT Authorization Grants, exporting logs and metrics to OpenTelemetry collectors, and authenticating clients with Kubernetes service account tokens. Other release highlights are support for Caddy as a reverse proxy provider for client certificate authentication, organisation invitation management, and a guide on integrating Keycloak with MCP servers.

Envoy (a CNCF Graduated project) was updated to https://github.com/envoyproxy/envoy/releases/tag/v1.37.0, which brought many new features. Some of them include global module loading and streaming HTTP callouts to HTTP filters in dynamic modules, container-aware CPU detection, new MCP filter and router for agentic network, new stats-based access logger, production-ready Proto API Scrubber filter, cluster-level retry policies, hash policies, and request mirroring, and many more.

Kubebuilder, an SDK for building Kubernetes APIs using CRDs, has seen its https://github.com/kubernetes-sigs/kubebuilder/releases/tag/v4.11.0 release. The helm/v1-alpha projects are now automatically migrated to helm/v2-alpha, which got numerous improvements, including nodeSelector, affinity, and tolerations support, standard Helm labels for generated resources, and custom resources added to templates/extras. Newly generated projects also got their AGENTS.md files.

#news #releases

Kubernative by Palark | Kubernetes news and goodies

Mar 11, 2026, 02:44 AM

📷 Photo

The latest CNCF Annual Cloud Native Survey is published

Here are some of the report highlights:
1. 66% of organisations use Kubernetes to host GenAI workloads. 47% deploy AI models occasionally, and only 7% do it daily.
2. Top challenges of using containers are: cultural changes with the dev team (47%), lack of training (36%), security (36%), CI/CD (35%), monitoring (35%), and complexity (34%).
3. Among the Cloud Native innovators (organisations using Cloud Native techniques for nearly all of their development), CI/CD tools are used by 91%, GitOps by 58%, service mesh by 39%, containers for stateful apps by 79%, and serverless architecture by 64%.
4. Charts displaying the most used graduated and incubating CNCF projects are attached.

Find the full report on the https://www.cncf.io/reports/the-cncf-annual-cloud-native-survey/ (no registration is required).

#news #reports #cncfprojects

1,160

Kubernative by Palark | Kubernetes news and goodies

Mar 8, 2026, 09:11 AM

📷 Photo

KubeAcademy by VMware is retired

KubeAcademy was a free educational resource for learning Kubernetes online, curated by the VMware experts. In 2024, it offered dozens of free courses. In late 2023, Broadcom finalised its acquisition of VMware, which is what most likely affected KubeAcademy's existence: “As of January 1st, 2026, KubeAcademy has been https://kube.academy/retirement and the site will no longer be maintained or supported.”

The educational content produced by KubeAcademy is being published on https://github.com/kube-academy.

#news #career

1,100

Kubernative by Palark | Kubernetes news and goodies

Mar 8, 2026, 09:11 AM

As many are aware, MinIO has recently gone to "maintenance mode.” If you’ve been looking for a Kubernetes-friendly alternative, check out this new project.

Garage, an S3-compatible distributed object storage, just got an unofficial Kubernetes operator. Still being in its alpha, it simplifies deploying and maintaining Garage clusters with the following features implemented:

- Deploying StatefulSets with proper configuration, storage, and networking;
- Bucket creation with quotas;
- S3 key management with automatic credential generation;
- Multi-cluster federation by connecting Garage clusters across K8s instances.

▶️ https://github.com/rajsinghtech/garage-operator
💬 https://www.reddit.com/r/kubernetes/comments/1qeagkn/built_a_kubernetes_operator_for_garage_selfhosted/

Language: Go | License: Apache 2.0 | 44 ⭐️

#tools #storage #news

907

Kubernative by Palark | Kubernetes news and goodies

Mar 5, 2026, 07:45 PM

📷 Photo

Feel a need to validate your Dockerfiles against best practices? Consider trying this new tool.

Dockadvisor is a fast linter for Dockerfiles that helps you keep them optimal and consistent. Here’s what it offers:

- applying 60+ rules that cover standard instructions (FROM, RUN, ENV, etc.) and multi-stage builds;
- performs security checks, such as specifying secrets in variables;
- scores the quality of your Dockerfile on the scale from 0 to 100;
- can be used as a web interface, Go library, or WebAssembly module (i.e. executed in the browser).

▶️ https://github.com/deckrun/dockadvisor

Language: Go | License: Apache 2.0 | 70 ⭐️

#tools

901

Kubernative by Palark | Kubernetes news and goodies

Feb 26, 2026, 08:36 AM

Percona Everest becomes OpenEverest

Percona Everest is a Cloud Native database platform that helps operating PostgreSQL, MongoDB, and MySQL databases in Kubernetes environments. Originating as a vendor-owned solution, it has now https://www.percona.com/blog/introducing-openeverest/ into an independent Open Source project called https://openeverest.io/. Percona has also formed a subsidiary, Solanica, that is fully focused on developing OpenEverest. The authors plan to donate OpenEverest to CNCF soon.

#news #databases

1,080

Kubernative by Palark | Kubernetes news and goodies

Feb 24, 2026, 01:54 AM

Kubernetes Dashboard is getting archived

Yesterday, the Kubernetes Dashboard maintainers https://groups.google.com/g/kubernetes-sig-ui/c/vpYIRDMysek/m/wd2iedUKDwAJ that the “project will be archived and sunset in the coming days/weeks.” It has been developed in the Kubernetes SIG UI but lacked active contributors and maintainers for a while.

The authors recommend Headlamp as an alternative to Kubernetes Dashboard, since it a Kubernetes SIG UI project last year.

#news #gui

1,640

Kubernative by Palark | Kubernetes news and goodies

Feb 24, 2026, 01:54 AM

If you’re not overwhelmed yet with your work after a holiday break… or if you’re just into having some educational and practical fun with Kubernetes, don’t miss this project!

K8sQuest is a new gamified training platform for K8s, where you need to troubleshoot and fix various issues using a GUI terminal featuring arcade game styling. Importantly, it can be self-hosted locally. The project comes with:

- 50 challenges, 5 categories, 3 difficulty levels;
- different K8s topics covered, including basics, scaling, networking, storage, and security;
- progressive hints and step-by-step guides, points for completed challenges, and progress auto-saving.

▶️ https://github.com/Manoj-engineer/k8squest
💬 https://www.reddit.com/r/kubernetes/comments/1pzqzfk/i_made_a_cli_game_to_learn_kubernetes_by_breaking/

Language: Shell, Python | License: Apache 2.0 | 326 ⭐️

#tools #fun #career

1,060

Kubernative by Palark | Kubernetes news and goodies

Feb 19, 2026, 08:29 PM

Looking for a way to simplify deploying LLMs on Kubernetes? This project provides everything you might need.

llmaz is an inference platform that integrates various Open Source projects for running LLMs. It supports:

- Different inference backends: vLLM, llama.cpp, Ollama, Text-Generation-Inference, SGLang, and TensorRT-LLM.
- Different model providers: HuggingFace, ModelScope, and ObjectStores.
- Chatbot interface based on Open WebUI.
- Heterogeneous devices.
- Distributed inference via multi-host and homogeneous xPyD support with LeaderWorkerSet.
- Envoy AI Gateway for token-based rate limiting, model routing, and more.
- Horizontal Pod scaling (HPA) and node autoscaling (Karpenter).

▶️ https://github.com/InftyAI/llmaz

Language: Go | License: Apache 2.0 | 278 ⭐️

#tools #genai

1,270

Kubernative by Palark | Kubernetes news and goodies

Feb 16, 2026, 09:13 AM

Kubernetes 1.35 has been released. It is codenamed Timbernetes and comes with 60 enhancements: 17 stable, 19 beta, and 22 alpha features.

- https://kubernetes.io/blog/2025/12/17/kubernetes-v1-35-release/
- https://palark.com/blog/kubernetes-1-35-release-features/

#releases #news

1,360

Kubernative by Palark | Kubernetes news and goodies

Feb 16, 2026, 09:13 AM

No matter how tired you are from seeing all those Kubernetes dashboards. It’s Friday, so why not share yet another GUI… especially since it’s pretty neat! 🤪

Kite is a new Kubernetes dashboard, featuring a modern, responsive UI. While its initial public release happened less than 4 months ago, it already offers a lot for Kubernetes administrators:

- Complete resource management for all popular resources (from Pods to PVCs) and CRDs, including built-in editor (Monaco) for YAML manifests and resource relationships visualisation;
- Multi-cluster management with fine-grained permissions and automatic cluster discovery based on kubeconfig entries;
- RBAC and user management, OAuth integration;
- Powerful observability capabilities, including a general cluster overview, detailed Pod and Node monitoring, real-time metrics, and live logs streaming with filtering and search;
- An ability to execute commands directly in Pods or Nodes.

▶️ https://github.com/zxh326/kite
💬 https://www.reddit.com/r/kubernetes/comments/1obf8tb/kite_a_modern_lightweight_kubernetes_dashboard/

Language: TypeScript, Go | License: Apache 2.0 | 1802 ⭐️

#tools #gui

1,380

Kubernative by Palark | Kubernetes news and goodies

Feb 12, 2026, 02:02 AM

Ingress NGINX will be retired soon Another significant announcement made during KubeCon NA involved deprecation. Kubernetes SIG Network and the Security Response Committee declared that Ingress NGINX will be retired in March 2026. This Ingress controller…

1,130

Kubernative by Palark | Kubernetes news and goodies

Feb 10, 2026, 12:51 AM

Here come some of the interesting Kubernetes-related articles recently spotted online:

1. https://blog.bytebytego.com/p/how-airbnb-runs-distributed-databases by ByteByteGo.
Instead of limiting a database cluster to one Kubernetes environment, they chose to deploy distributed database clusters across multiple Kubernetes clusters, each one mapped to a different AWS Availability Zone. This is not a common design pattern. Most companies avoid it because of the added complexity. But Airbnb’s engineers saw it as the best way to ensure reliability, reduce the impact of failures, and keep operations smooth.

2. https://kubernetes.io/blog/2025/11/25/configuration-good-practices/ by Kirti Goyal, Kubernetes blog.
This blog brings together tried-and-tested configuration best practices. The small habits that make your Kubernetes setup clean, consistent and easier to manage. Whether you are just starting out or already deploying apps daily, these are the little things that keep your cluster stable and your future self sane.

3. https://cloud.google.com/blog/products/containers-kubernetes/how-we-built-a-130000-node-gke-cluster/ by Besher Massri and Maciek Różacki, Google.
At Google Cloud, we’re constantly pushing the scalability of Google Kubernetes Engine (GKE) so that it can keep up with increasingly demanding workloads — especially AI. GKE already supports massive 65,000-node clusters, and at KubeCon, we shared that we successfully ran a 130,000-node cluster in experimental mode — twice the number of nodes compared to the officially supported and tested limit. [..] In this blog, we take a look at the trends driving demand for these kinds of mega-clusters, and do a deep dive on the architectural innovations we implemented to make this extreme scalability a reality.

4. https://blog.platformatic.dev/93-faster-nextjs-in-your-kubernetes by Matteo Collina, Platformatic.
We'll start by examining the complications of running this powerful framework in your own environment, and get under the hood (and I mean, down to the kernel) about why they happen. Then, we'll walk you through the approach we took with Watt to solve them, and what it means for you if you happen to run Next.js on any other Node.js CPU-bound workload on-prem.

5. https://oilbeater.com/en/2025/11/09/evpn-for-kubernetes/ by Mengxin Liu.
Recently, while researching EVPN as a multi-tenancy solution for physical networks, I discovered the open-source project OpenPERouter. It introduces the concept of EVPN into container networking, providing a new approach to achieving multi-tenancy in Kubernetes. This solution not only unifies software and hardware network architectures but also offers some compatibility with existing CNIs like Calico, which advertise routes via BGP.

6. https://palark.com/blog/kubernetes-1-35-release-features/ by Kirill Kononovich, Palark.
The Kubernetes 1.35 release, scheduled for December 17th, has gift-wrapped a variety of experimental improvements designed to enhance infrastructure flexibility and security. In this overview, we focus on its Alpha features extending across a broad spectrum of tasks: from watch-based route controller reconciliation and the long-awaited Gang Scheduling for AI/ML workloads to the secrets field for passing Service Account tokens, mutable volume attach limits, and proxying API server requests to fix version skew.

7. https://www.sysdig.com/blog/kubernetes-1-35-whats-new by Víctor Jiménez Cerrada, Sysdig.
Kubernetes 1.35 will be released soon, bringing 17 changes to its security features. It includes new validations, the deprecation of old technologies, and broader support for user namespaces, to name a few.

#articles

Kubernative by Palark | Kubernetes news and goodies

Feb 8, 2026, 08:57 AM

https://kubespec.dev/ is an online resource that helps you find the official built-in documentation for all the Kubernetes resources and their properties.

- All the information it provides is automatically generated based on the OpenAPI specification.
- The data is available for any chosen Kubernetes release, from v1.11 to v1.35, and the differences introduced for the resource in each subsequent release are displayed.
- Each Kubernetes resource comes with examples of how it might look.
- CRDs of some other popular Cloud Native tools, such as Argo, Cilium, CloudNativePG, Gateway API, Istio, and Kyverno, are also covered.

#tools

810

Kubernative by Palark | Kubernetes news and goodies

Dec 6, 2025, 10:55 AM

Two new certifications from CNCF

New Cloud Native certifications were announced during KubeCon NA, and they are:

- Certified Cloud Native Platform Engineer (CNPE). The exam is now https://training.linuxfoundation.org/certification/certified-cloud-native-platform-engineer-cnpe/ for enrollment.
- Certified Kubernetes Network Engineer (CKNE). It’s still in development and will become available next year. Subject Matter Experts are https://training.linuxfoundation.org/kubernetes-network-engineer-program/ to join the development process of this exam.

P. S. Thanks for this photo and info to James Spurin (https://www.linkedin.com/posts/jamesspurin_new-certification-live-from-the-kubecon-activity-7394009545167093760-7R8u/).

?q=%23news ?q=%23career

548

Kubernative by Palark | Kubernetes news and goodies

Dec 6, 2025, 10:55 AM

Certified Kubernetes AI Conformance Program 1.0

KubeCon NA also marked the https://www.cncf.io/announcements/2025/11/11/cncf-launches-certified-kubernetes-ai-conformance-program-to-standardize-ai-workloads-on-kubernetes/ of the Certified Kubernetes AI Platform Conformance Program v1.0 from CNCF, which defines capabilities and configurations for running AI and ML frameworks on Kubernetes and other CNCF projects. It was a community-driven initiative supported by various companies, including Google Cloud, Kubermatic, Microsoft, and Red Hat.

Currently, the following K8s distributions are https://github.com/cncf/k8s-ai-conformance/ with this program:
- Alibaba Cloud Container Service for Kubernetes
- Amazon Elastic Kubernetes Service (EKS)
- Azure Kubernetes Service (AKS)
- CCE (Cloud Container Engine) by Baidu Cloud
- CoreWeave Kubernetes Service
- DaoCloud Enterprise
- Gardener by NeoNephos Foundation
- Giant Swarm Platform
- Google Kubernetes Engine
- Kubermatic Kubernetes Platform
- Linode Kubernetes Engine (LKE) by Akamai
- OCI Kubernetes Engine (OKE) by Oracle
- OpenShift Container Platform and Red Hat OpenShift Service on AWS
- RKE2 by SUSE
- Talos Linux
- vSphere Kubernetes Service

?q=%23news ?q=%23genai

625

Kubernative by Palark | Kubernetes news and goodies

Dec 6, 2025, 10:55 AM

Two newly graduated and one incubated CNCF projects

Yesterday, the CNCF Technical Oversight Committee voted to move the following CNCF projects to a higher level of their maturity:

- Crossplane, the cloud native control plane framework, became Graduated (https://github.com/cncf/toc/issues/1788)
- Dragonfly, a P2P-based file distribution and image acceleration system, became Graduated (https://github.com/cncf/toc/issues/1358)
- OpenFGA, a high-performance and flexible authorisation/permission system built for developers, became Incubating (https://github.com/cncf/toc/issues/1287)

?q=%23news ?q=%23cncfprojects

795

Kubernative by Palark | Kubernetes news and goodies

Dec 6, 2025, 10:55 AM

Old-school terminal users might enjoy getting a find-like experience for kubectl with this new project.

kubectl-find is a plugin for kubectl that helps you find Kubernetes resources based on various criteria and perform some actions. It allows you to:

- find resources by their name (regex), age, labels, and status;
- additionally, use a node name, image name, or the fact of being restarted when finding Pods;
- use custom jq filters for finding resources;
- execute one of these actions on the matched resources: print, patch, or delete.

Language: Go | License: Apache 2.0 | 57 ⭐️

▶️ https://github.com/alikhil/kubectl-find
💬 https://www.reddit.com/r/kubernetes/comments/1natspg/kubectlfind_a_plugin_inspired_by_unix_find_locate/

?q=%23tools ?q=%23CLI

749

Kubernative by Palark | Kubernetes news and goodies

Dec 6, 2025, 10:55 AM

Sharing another bunch of interesting Kubernetes-related articles recently spotted online:

1. https://raesene.github.io/blog/2025/09/12/beyond-the-surface/ by Rory McCune.
The goal of this talk is to lay out one attack path that attackers might use to retain and expand their access after an initial compromise of a Kubernetes cluster by getting access to an admin’s credentials. It doesn’t cover all the ways that attackers could do this, but provides one path and also hopefully illuminates some of the inner workings and default settings that attackers might exploit as part of their exploits.

2. https://medium.com/coreteq/how-our-small-company-migrated-from-docker-swarm-to-kubernetes-fb683c6f5c3a by Miroslav Hrivnak, CORETEQ Technology.
As a small tech company with 20–30 people, we’ve gone through the natural evolution of infrastructure. From the days when one server and a few LXC containers were enough, to Docker and Docker Swarm, and finally to Kubernetes, which we now use not only in production but also for development and testing. In this article, I’d like to share why we migrated, the challenges we faced, and how we successfully moved from Docker Swarm to Kubernetes.

3. https://bchess.github.io/k8s-1m/ by Ben Chess.
This is an effort to create a fully functional Kubernetes cluster with 1 million active nodes.

4. https://heinancabouly.substack.com/p/zero-trust-for-kubernetes-implementing by Heinan Cabouly.
Let’s walk through a practical implementation of Zero Trust security using Istio on Amazon EKS. I’ll show you real-world configurations based on production Kubernetes environments.

5. https://www.joyfulbikeshedding.com/blog/2025-10-23-clear-kubernetes-namespace-contents-before-deleting-the-namespace.html by Hongli Lai.
Our Kubernetes platform test suite creates namespaces with their corresponding contents, then deletes everything during cleanup. We noticed a strange problem: namespace deletion would sometimes get stuck indefinitely. The root cause was surprising — we had to clear the contents before deleting the namespace! We also learned that getting stuck isn’t the only issue that can occur if we don’t do this.

6. https://medium.com/mercadolibre-tech/scaling-kubernetes-at-mercado-libre-with-karpenter-and-gitops-2c792a7403c5 by Juliano Marcos Martins, Mercado Libre.
This article explores how we’ve used Karpenter and GitOps to evolve our ecosystem (35,000 active microservices; approximately 30,000 daily deployments; around 120,000 pull requests per day), achieving automated provisioning, declarative governance, and large-scale cloud-native operations.

?q=%23articles

Kubernative by Palark | Kubernetes news and goodies

Dec 6, 2025, 10:55 AM

Happy to share another digest of the prominent software updates in the Cloud Native ecosystem!

Release Spotlight: Mimir 3.0.0

Earlier this week, Grafana Labs https://grafana.com/blog/2025/11/03/grafana-mimir-3-0-release-all-the-latest-updates/ that Mimir, its horizontally scalable long-term storage for Prometheus, was updated to https://github.com/grafana/mimir/releases/tag/mimir-3.0.0. Most importantly, it features a new decoupled architecture that involves a Kafka-based ingest storage layer for better scalability and performance.

It also switched to the Mimir Query Engine (MQE) as the default query engine and introduced an experimental support for the Prometheus Remote-Write 2.0 protocol, PromQL duration expressions, and native OTLP delta metric ingestion.

Other noticeable updates in the Cloud Native space:

1. HolmesGPT, an AI agent for cloud troubleshooting (a CNCF Sandbox project), released https://github.com/robusta-dev/holmesgpt/releases/tag/0.15.0. It came with a new Cilium and Hubble toolset, an enhanced New Relic toolset, and improved Gemini support.

2. Backstage, a framework for building developer portals (a CNCF Incubating project), was updated to https://github.com/backstage/backstage/releases/tag/v1.44.0. Some of its essential changes are a new Dialog component in Backstage UI, support for custom external service auth methods, a new plugin converting Material UI themes to Backstage UI, and easily configured low-level HTTP server options through config.

3. Calico, a container networking and security solution, released https://github.com/projectcalico/calico/releases/tag/v3.31.0. It comes with a streamlined eBPF data plane installation, general availability of nftables data plane, DSCP (Differentiated Services Code Point) marking support, QoS controls for eBPF data plane, fine-grained BGP control with a per-peer local AS number, and numerous other improvements.

4. Vitess, a database clustering system for horizontal scaling of MySQL (a CNCF Graduated project), released https://github.com/vitessio/vitess/releases/tag/v23.0.0. It upgraded the default MySQL version from 8.0.40 to 8.4.6, introduced new metrics (TransactionsProcessed and SkippedRecoveries), and added dynamic control of EmergencyReparentShard-based recoveries to VTOrc.

5. Argo CD (a CNCF Graduated project) released its https://github.com/argoproj/argo-cd/releases/tag/v3.2.0, which anticipated the deprecation of Argo CD v2.x. New features include health checks for GitOps Promoter resources, new configurable deletion strategies for Progressive Sync, title matching support for the Pull Request Generator in ApplicationSet, server-side diff calculations in Argo CD CLI, and several hydrator improvements.

6. External Secrets Operator, a K8s operator integrating external secret management systems (a CNCF Sandbox project), has reached its https://github.com/external-secrets/external-secrets/releases/tag/v1.0.0, which anticipates its general availability. There are some new features as well — namely, support for generic targets (ConfigMaps, Custom Resources) and a new esoctl bootstrap generator command.

?q=%23news ?q=%23releases

Kubernative by Palark | Kubernetes news and goodies

Dec 6, 2025, 10:55 AM

KubeCon + CloudNativeCon North America 2025 begins today, and we can expect some interesting announcements for the Cloud Native community. It also means that Cloud Native Rejekts, the b-side conference, has already happened.

Thus, while we all wait for big news, this https://www.youtube.com/playlist?list=PLnfCaIV4aZe_Di35xfN0KBUz-ZWp08zZD presents ~20 talks given at Rejekts this Saturday. Unfortunately, they are not yet cut into separate videos, but you can use the https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-atlanta-na-atlanta-2025/schedule/ for better navigation.

?q=%23events ?q=%23video

684

Kubernative by Palark | Kubernetes news and goodies

Dec 6, 2025, 10:55 AM

Tired of dealing with various managed Kubernetes solutions from hyperscalers in the terminal? This new project aims to streamline this experience.

Orbit is a CLI tool that unifies the discovery of and access to the K8s clusters across different cloud providers. It offers:

- automatic discovery and access to the clusters managed by AWS EKS, Azure AKS, and Google GKE (existing cloud credentials are used for that);
- adding newly discovered cluster to your kubeconfig (without creating duplicates for the already existing entries);
- an interactive interface to navigate through clusters and see their statuses and other details, and find them by name.

Language: Go | License: Open Source (no specific license is defined yet) | 6 ⭐️

▶️ https://gitlab.com/RMJx1/orbit
📣 https://rmjj.co.uk/cv/blog/orbit

?q=%23tools ?q=%23CLI

1,040

Showing 30 of 50 posts

Loading posts...

Rating

User Reviews (0)

No reviews yet. Be the first to share your experience!

Loading reviews...

Kubernative by Palark | Kubernetes news and goodies

News, articles, tools, and other useful cloud native stuff for DevOps, SRE and software engineers. This channel is managed by Palark GmbH. Contact @dshnow to suggest your content.

Join @kubernative for exclusive articles and useful content and discussions in 1

Ranking

Global Ranking

#2530No change

Language Ranking

#575No change

Category Ranking

#37No change

Participant Growth (Last 28 Days)

Total: 1.5K

24h growth: +4 0%

Latest Posts

Kubernative by Palark | Kubernetes news and goodies

Mar 11, 2026, 02:44 AM

Our latest selection of interesting Kubernetes-related articles recently spotted online:

1. https://spacelift.io/blog/kubernetes-rolling-update by James Walker, Spacelift.
In this guide, we will explain the benefits of rolling updates, describe how they work, and provide detailed examples of their use. We’ll also compare how rolling updates stack up against other popular deployment strategies.

2. https://kubernetes.io/blog/2026/01/28/experimenting-gateway-api-with-kind/ by Ricardo Katz, Red Hat.
This document will guide you through setting up a local experimental environment with Gateway API on kind. This setup is designed for learning and testing. It helps you understand Gateway API concepts without production complexity.

3. https://itnext.io/understanding-the-ingress-nginx-deprecation-before-you-migrate-to-the-gateway-api-fbf2ad0443bc by Artem Lajko.
Most blog posts about the Ingress-NGINX deprecation are optimized for clicks, not for engineers who actually have to migrate production systems. You’ll find tiny demo setups, toy examples, and conclusions that fall apart the moment you apply them to an enterprise environment. That frustration is the reason this guide exists. This article is based on our real enterprise setup, built on top of the kubara framework. It documents how we approached the migration, what worked, what didn’t, and — just as important — what we decided not to migrate.

4. https://blog.zmalik.dev/p/lazy-pulling-container-images-a-deep by Zain Malik.
This post starts with why the problem is harder than it looks at the byte level, then surveys the major approaches and what they trade off. The core of the post is a hands-on experiment: I deploy an in-cluster registry, convert images to eStargz, patch containerd with a custom snapshotter, and measure something nobody benchmarks properly. Not just pull time, but readiness, the moment a container can actually serve its first request.

5. https://medium.com/qonto-way/kernel-archaeology-why-36-cpus-crash-cilium-but-32-dont-2007f6f6772a by Pierre Magne, Qonto.
[..] The deployment looked successful. But then, over several weeks, we noticed sporadic crashes — roughly one Cilium agent per week, completely unrecoverable without restarting the entire node. No clear pattern, no obvious trigger. Rare enough to be hard to reproduce, but severe enough to block production deployment.

6. https://medium.com/@bossm8/running-fluxcd-locally-gitops-for-kubernetes-on-your-laptop-7842b89d67b7 by Marco Boss.
[..] I started looking for a way to develop and validate manifests locally, while still having full access to Flux features, and without resorting to brittle hacks or partial simulations. In this post, I’ll walk you through the approach I ended up with and show you how to run Flux locally in a way that actually feels usable for day-to-day development.

#articles