The Kubernetes API server handles all of the requests to your Kubernetes cluster. But how does it actually work? When you type kubectl apply -f my.yaml, your YAML is sent to the API and stored in etcd.

Generate a variety of suspect actions that are detected by Falco rulesets.

NooBaa is an object data service for hybrid and multi cloud environments. NooBaa provides an S3 object store service (and Lambda with bucket triggers) to clients both inside and outside the cluster, and uses storage resources from within or outside the cluster, with flexible placement policies to automate data use cases.

PigeonEye is a fast, native Kubernetes GUI. Every resource type your cluster serves — including every CRD — shows up automatically, with the same columns kubectl get prints.

Run singleton workloads through node drains, upgrades, consolidation and spot reclaims, without paying for a second replica around the clock.

Open-source, Kubernetes-native Workspace-as-a-Service. helm install it on any cluster (the only prerequisite is cert-manager) and give people a full remote desktop — Linux (VNC) or Windows (RDP via KubeVirt, auto-detected) — accessible from any browser.

Write egress rules against hostnames instead of hand-curated CIDR lists. The controller resolves them to IPs, tracks DNS TTLs, and reconciles a standard networking.k8s.io/v1 NetworkPolicy — so enforcement stays with whatever CNI you already run.

Portager is a Kubernetes operator that declaratively syncs container images between OCI-compliant registries. Define an ImageSync custom resource specifying source images, a destination registry, a cron schedule, and authentication — the operator handles the rest.

Alex Palcuie helps keep Claude running at Anthropic; he is on-call and handles incidents. When he gave a talk called Can Claude fix itself? in March, his answer was “no.” At Signals Berlin earlier this month, that had become a "maybe": Claude can investigate production systems, come up with valid fixes and surprise Alex with Move 37* moments, yet it can also still send responders chasing a convincing, wrong explanation.

In this post, we’ll look at how small changes to a single algorithm reduced the memory footprint of one of our Pingora-based services significantly. That allowed us to reclaim more than 100TB of RAM globally, on top of the 100TB of memory the DNS team was able to shed last month.