This week on Learn Kubernetes Weekly 132:

🕵️‍♂️ An In-Depth Analysis of the OpenAI's Incident and Mitigation Strategies
👩‍🔬 Taming the wild west of research computing: how policies saved us a thousand headaches
👋 We're leaving Kubernetes
📊 Resource management in Kubernetes
📉 Reducing Pod Startup Time for Java Application on EKS

Read it now: https://learnk8s.io/issues/132

⭐️ This newsletter is sponsored by Dagger — build software engineering workflows and environments https://ku.bz/GPL98fg84

This tutorial shows how Kargo automates continuous promotion across Kubernetes environments using GitOps, Argo CD & Helm.

It tracks container image updates, syncs env-specific Helm values via Git commits, and coordinates multi-stage delivery pipelines.

More: https://ku.bz/Bt5KZ9vP8

Aviram Hassan, Co-Founder & CEO at MetalBear, explains their newly released queue splitting feature for mirrord.

This capability allows developers to split message queues and Kafka topics using the mirrord operator, enabling true multi-tenant development environments. Aviram highlights that this feature specifically addresses working with consumers in messaging systems.

Watch the interview: https://ku.bz/hKpsKvR5S

Learn more about queue splitting in mirrod: https://ku.bz/mhDM836l2

Freelens is a cross-platform GUI for managing Kubernetes clusters.

It bundles kubectl/Helm, supports kubeconfig, and runs on macOS, Linux, and Windows.

More: https://ku.bz/vWndqRLPn

Master Kubernetes with Learnk8s' Advanced Kubernetes workshop!

What should you expect?

- Learn how to architect and design clusters from the ground up (in the cloud or on-prem).
- Explore the Kubernetes internal component and how the system is designed with resiliency in mind.
- Deep-dive into the networking components and observe the packets flowing into the cluster.
- Hands-on labs to test the theory with real-world scenarios!
- And more.

The next online course starts in June: https://ku.bz/bRfWBNxJc

We also run in-person courses and corporate training: https://learnk8s.io/corporate-training

This article tests Postgres HA under chaos in Kubernetes using CloudNativePG for DB management and Coroot for full-stack observability.

It simulates CPU noise, query locks, and pod kills, showing how eBPF + pg_stat reveal root cause.

More: https://ku.bz/smwNwHtT6

This guide maps single-node to geo-redundant Kubernetes cluster topologies, explaining who deploys them, how they scale, where they fail, and why each exists.

More: https://ku.bz/MJHnvgnmT

mapkubeapis is a Helm v3 plugin which updates in-place Helm release metadata that contains deprecated or removed Kubernetes APIs to a new instance with supported Kubernetes APIs.

More: https://ku.bz/Rs89vGy7f

Sealos runs 6,000+ MySQL, Redis, MongoDB, and Kafka clusters across 4 regions using KubeBlocks operators on Kubernetes.

Learn how CRDs, automated HA, backup, drift detection, and PITR make one engineer manage DBaaS at scale.

More: https://ku.bz/v1BQHKg1k

Timoni is a package manager for Kubernetes, powered by CUE and inspired by Helm.

Instead of using Go templates with YAML like Helm or layering YAML like Kustomize, Timoni relies on Cuelang's type safety, code generation and data validation features.

More: https://ku.bz/n_2gBjvzh

This article explains how SIGTERM signals work during pod termination in Kubernetes, why ignoring them leads to data loss and failed requests, and how to handle SIGTERM properly to support graceful shutdowns using HTTP servers and cleanup logic.

More: https://ku.bz/9p4r7D0YF

This chaos engineering experiment simulates resource spikes on EKS Auto Mode using Chaos Mesh, NGINX, and HPA.

It shows how Karpenter scales nodes dynamically under CPU stress, respects anti-affinity, and reclaims resources post-load to optimize cost.

More: https://ku.bz/_YCr_LRDS

Stephan Schwarz walks through his systematic approach to performance testing Kubernetes applications.

You will learn:

- Why shared Kubernetes components skew results and how ingress controllers, service meshes, etc. create testing challenges that require careful consideration of the entire request chain
- Practical approaches to HPA configuration, including how to account for scaling latency and planning for spare capacity based on your SLA requirements
- The role of observability tools like OpenTelemetry in production environments where load testing isn't feasible, and how distributed tracing helps isolate performance bottlenecks across interdependent services

Watch (or listen to) it here: https://ku.bz/yY-FnmGfH

🌟 This episode is brought to you by Learnk8s — get started on your Kubernetes journey through comprehensive online, in-person or remote training https://learnk8s.io/training

With @Birthmarkb "Not Open Source" Farrell

In this article, you will learn how to track namespace quotas, monitor cluster capacity, and make data-driven CPU and memory allocation decisions.

More: https://ku.bz/vTn8nTx6g

KubeBlocks is an open-source Kubernetes operator that manages relational, NoSQL, vector, and streaming databases on the public cloud or on-premise.

It is designed for production, providing reliable, performant, cost-effective data infrastructure.

More: https://ku.bz/qdGCY6v18

Eyal Bukchin, CTO & Co-Founder at MetalBear, highlights three emerging Kubernetes tools worth watching.

He discusses GlassKube for tackling on-premises software management for clients, Robusta for incident response in complex production environments, and LocalStack for enhancing local development workflows. As the creator of Mirrord, Eyal emphasizes tools that improve the developer experience and solve real operational challenges in Kubernetes ecosystems.

Watch the full interview: https://ku.bz/H5RPCdFCy

This week on Learn Kubernetes Weekly 133:

🧙‍♀️ A journey of writing my own Kubernetes
📊 Scaling Virtual Machines in Kubernetes Clusters: Insights for Kubernetes Applications
🕵️ Exploring the Kubernetes API Server Proxy
🥋 CVE-2024–10220: Attack and Defense
👧 Exploit me, baby, one more time: command injection in Kubernetes Log Query

Read it now: https://learnk8s.io/issues/133

⭐️ This newsletter is sponsored by Fairwinds — expert-led, fully managed Kubernetes that frees your engineers from infrastructure headaches and puts you on the fast track to production-grade success https://ku.bz/sSRQp8xDH

This post challenges the default DevOps habit of setting CPU limits in Kubernetes workloads.

It shows how limits prevent optimal bin-packing, lead to throttling under load, and increase infrastructure cost.

More: https://ku.bz/DHnYFCf1f

Namespace Hound is a tool that identifies and assesses potential security vulnerabilities and risks in Kubernetes clusters used by multiple tenants

More: https://ku.bz/pt-TskhHX

Kluctl is the missing glue to put together large Kubernetes deployments.

It allows you to declare and manage multi-environment and multi-cluster deployments.

Kluctl does not have cluster-side dependencies and works out of the box.

More: https://ku.bz/-tD8qv1V7