Allow loading remote contents and showing images to get the best out of this email.FAUN.dev's Kubernetes Weekly Newsletter
 
🔗 View in your browser.   |  ✍️ Publish on FAUN.dev   |  🦄 Become a sponsor
 
Allow loading remote contents and showing images to get the best out of this email.
 
KubernetesLinks
 
This Week in Kubernetes, with Kaptain the Shark
 
 
📝 A Few Words
 
 
The 20% code on GitOps the Hard Way, with Argo CD runs out June 30.

If your Argo CD knowledge ends where the tutorials do, at "apply this, watch it sync", this book picks up where production does: drift, RBAC, repo-server OOM, secrets in Git. 12 chapters, empty cluster to a pipeline you can run and explain, every command tested against a live cluster.

After June 30 it goes back to full price.

Get it with GITOPS20.

Prefer paper? It's on Amazon too: GitOps the Hard Way. That's the US store. If you're elsewhere, search "GitOps the Hard Way Argo CD" on your local Amazon and it'll be there.
 
 
🔍 Inside this Issue
 
 
Kubernetes keeps selling itself as “abstraction,” but the real story is the gritty control loops, resource edge cases, and operational guardrails that decide whether your cluster feels boring or cursed. This round goes from Netflix-scale batch scheduling to Postgres failover reality checks, with a few sharp takes on why teams adopt K8s in the first place.

🎬 How Netflix Simplified Batch Compute with Kueue
⚖️ Kubernetes QoS vs. Linux Cgroups: The Mixed-Resource Pod Risk
🔁 The feedback loops behind Kubernetes
🧠 What job interviews taught me about Kubernetes
🛡️ Tigera introduces unified control plane for Kubernetes-based AI agent security
🗄️ When failover isn’t safe: Building high-availability PostgreSQL on Kubernetes

Steal the patterns, dodge the footguns, ship the boring kind of reliable.

Stay safe out there.
FAUN.dev() Team
 
 
🔗 Stories, Tutorials & Articles
 
helpnetsecurity.com helpnetsecurity.com
 
Tigera introduces unified control plane for Kubernetes-based AI agent security
 
 
Tigera launched Lynx for general availability, a Kubernetes-native control plane that operators place in the path of AI agent calls so teams can enforce identity and policy.
 
 
netflixtechblog.com netflixtechblog.com
 
How Netflix Simplified Batch Compute with Kueue   ✅
 
 
Netflix migrated millions of batch jobs from their custom queuing system to Kueue, a cloud-native job queueing system, as part of transitioning to a more Kubernetes-native infrastructure. Kueue offers features such as preemption, fair sharing, and hierarchical tenants that were missing in their homegrown solution, Compute Managed Batch (CMB).
 
 
notnotp.com notnotp.com
 
What job interviews taught me about Kubernetes
 
 
The recent shift towards Kubernetes adoption can be attributed to the benefits of uniform deployment, standardized knowledge, and traceability it offers. With managed K8s services maturing and Helm simplifying deployment, more companies are choosing Kubernetes regardless of their technical needs. The ideal time to consider using Kubernetes is when a team expands beyond a single engineer to ensure knowledge is not tied to individuals.
 
 
solanica.io solanica.io
 
Kubernetes QoS vs. Linux Cgroups: The Mixed-Resource Pod Risk
 
 
Designing Kubernetes manifests with mixed configurations can lead to unpredictability in how resources are managed between containers. This is due to the different ways Kubernetes and Linux handle requests, limits, and OOM situations. To avoid operational risks and ensure stability, it is crucial to carefully define resource constraints within the Pod to protect critical workloads from OOM terminations or evictions.
 
 
planetscale.com planetscale.com
 
The feedback loops behind Kubernetes
 
 
Kubernetes operator is a closed feedback loop that ensures desired state for running workloads, similar to a thermostat's control. Operators automate manual tasks in managing databases like Postgres, improving efficiency by comparing and converging states. The same loop structure in a Bash script can be simplified and made scalable with Kubernetes components like kubelet, scheduler, CSI, and Services, creating a production control plane without the need for manual upkeep.
 
 
datadoghq.com datadoghq.com
 
When failover isn’t safe: Building high-availability PostgreSQL on Kubernetes   ✅
 
 
Datadog made PostgreSQL failover safer by treating replica lag as the promotion gate. A zonal-failure gameday showed that detection and automation could not protect the database if the standby sat behind the primary. The team added lag-aware checks, clearer operator signals, and failure drills so engineers could fail over with a known data-loss boundary.
 
 

👉 Got something to share? Create your FAUN Page and start publishing your blog posts, tools, and updates. Grow your audience, and get discovered by the developer community.

 
⚙️ Tools, Apps & Software
 
github.com github.com
 
apple/container
 
 
A tool for creating and running Linux containers using lightweight virtual machines on a Mac. It is written in Swift, and optimized for Apple silicon.
 
 
github.com github.com
 
coroot/coroot
 
 
Coroot is an open-source APM & Observability tool, a DataDog and NewRelic alternative 📊, 🖥️, 👉. Powered by eBPF for rapid insights into system performance. Monitor, analyze, and optimize your infrastructure effortlessly for peak reliability at any scale.
 
 
github.com github.com
 
paperclipinc/openclaw-operator
 
 
Kubernetes operator for deploying and managing OpenClaw AI agent instances with production-grade security, observability, and lifecycle management.
 
 
github.com github.com
 
truefoundry/CruiseKube
 
 
CruiseKube is an intelligent Kubernetes resource optimization controller that automatically monitors, analyzes, and applies resource recommendations to improve cluster efficiency and reduce costs.
 
 
github.com github.com
 
saiyam1814/kiac
 
 
Local Kubernetes on Apple's container framework - every node is its own lightweight VM. Metrics, storage, and LoadBalancer included.
 
 

👉 Spread the word and help developers find and follow your Open Source project by promoting it on FAUN. Get in touch for more information.

 
🤔 Did you know?
 
 
Did you know that every Kubernetes pod runs a hidden helper called the pause container, whose only job is to hold the pod's Linux namespaces, the kernel feature that isolates resources like networking between processes? Because this container owns the network namespace, your real app containers can crash and restart without the pod losing its IP address, and every container in the pod can reach the others over localhost.
 
 
🤖 Once, SenseiOne Said
 
 
"Kubernetes makes failure routine by hiding it, then makes debugging mandatory by distributing it. Containers give you repeatable environments so you can ship the same mistake everywhere, on schedule."
— SenseiOne
 

(*) SenseiOne is FAUN.dev’s work-in-progress AI agent

 
❤️ Thanks for reading
 
 
👋 Keep in touch and follow us on social media:
- 💼LinkedIn
- 📝Medium
- 🐦Twitter
- 👥Facebook
- 📰Reddit
- 📸Instagram

👌 Was this newsletter helpful?
We'd really appreciate it if you could forward it to your friends!

🙏 Never miss an issue!
To receive our future emails in your inbox, don't forget to add community@faun.dev to your contacts.

🤩 Want to sponsor our newsletter?
Reach out to us at sponsors@faun.dev and we'll get back to you as soon as possible.
 

KubernetesLinks #534: Building High-Availability PostgreSQL on Kubernetes
Legend: ✅ = Editor's Choice / ♻️ = Old but Gold / ⭐ = Promoted / 🔰 = Beginner Friendly

You received this email because you are subscribed to FAUN.dev.
We (🐾) help developers (👣) learn and grow by keeping them up with what matters.

You can manage your subscription options here (recommended) or use the old way here (legacy). If you have any problem, read this or reply to this email.