KubernetesLinks

The 20% code on GitOps the Hard Way, with Argo CD runs out June 30.

If your Argo CD knowledge ends where the tutorials do, at "apply this, watch it sync", this book picks up where production does: drift, RBAC, repo-server OOM, secrets in Git. 12 chapters, empty cluster to a pipeline you can run and explain, every command tested against a live cluster.

After June 30 it goes back to full price.

Get it with GITOPS20.

Prefer paper? It's on Amazon too: GitOps the Hard Way. That's the US store. If you're elsewhere, search "GitOps the Hard Way Argo CD" on your local Amazon and it'll be there.

Kubernetes keeps selling itself as “abstraction,” but the real story is the gritty control loops, resource edge cases, and operational guardrails that decide whether your cluster feels boring or cursed. This round goes from Netflix-scale batch scheduling to Postgres failover reality checks, with a few sharp takes on why teams adopt K8s in the first place.

🎬 How Netflix Simplified Batch Compute with Kueue
⚖️ Kubernetes QoS vs. Linux Cgroups: The Mixed-Resource Pod Risk
🔁 The feedback loops behind Kubernetes
🧠 What job interviews taught me about Kubernetes
🛡️ Tigera introduces unified control plane for Kubernetes-based AI agent security
🗄️ When failover isn’t safe: Building high-availability PostgreSQL on Kubernetes

Steal the patterns, dodge the footguns, ship the boring kind of reliable.

Stay safe out there.
FAUN.dev() Team

Terraform modules are often designed around what they do, not how easily humans or AI agents can use and reuse them. Join Jinger Meilani of MNTN to learn how to design IaC interfaces for humans, AI agents, and whatever comes next. Leave with concrete patterns that reduce misuse and help non-infrastructure developers get up to speed faster.

Register for free. July 14 | 12 PM EDT

YAML sprawl, missed schedules, untracked changes, no audit trail. AWX fixes all of it, if you know how to wield it past "apply this playbook". AWX in Action takes experienced Ansible users from a Kubernetes install that actually works to RBAC, dynamic inventories, custom execution environments, HA scaling, and CI-triggered workflows.

👉 15 chapters built from real consulting engagements, not vendor docs, every chapter explaining not just how AWX works but why.

Get AWX in Action.

Tigera launched Lynx for general availability, a Kubernetes-native control plane that operators place in the path of AI agent calls so teams can enforce identity and policy.

Netflix migrated millions of batch jobs from their custom queuing system to Kueue, a cloud-native job queueing system, as part of transitioning to a more Kubernetes-native infrastructure. Kueue offers features such as preemption, fair sharing, and hierarchical tenants that were missing in their homegrown solution, Compute Managed Batch (CMB).

The recent shift towards Kubernetes adoption can be attributed to the benefits of uniform deployment, standardized knowledge, and traceability it offers. With managed K8s services maturing and Helm simplifying deployment, more companies are choosing Kubernetes regardless of their technical needs. The ideal time to consider using Kubernetes is when a team expands beyond a single engineer to ensure knowledge is not tied to individuals.

Designing Kubernetes manifests with mixed configurations can lead to unpredictability in how resources are managed between containers. This is due to the different ways Kubernetes and Linux handle requests, limits, and OOM situations. To avoid operational risks and ensure stability, it is crucial to carefully define resource constraints within the Pod to protect critical workloads from OOM terminations or evictions.

Kubernetes operator is a closed feedback loop that ensures desired state for running workloads, similar to a thermostat's control. Operators automate manual tasks in managing databases like Postgres, improving efficiency by comparing and converging states. The same loop structure in a Bash script can be simplified and made scalable with Kubernetes components like kubelet, scheduler, CSI, and Services, creating a production control plane without the need for manual upkeep.

Datadog made PostgreSQL failover safer by treating replica lag as the promotion gate. A zonal-failure gameday showed that detection and automation could not protect the database if the standby sat behind the primary. The team added lag-aware checks, clearer operator signals, and failure drills so engineers could fail over with a known data-loss boundary.

A tool for creating and running Linux containers using lightweight virtual machines on a Mac. It is written in Swift, and optimized for Apple silicon.

Coroot is an open-source APM & Observability tool, a DataDog and NewRelic alternative 📊, 🖥️, 👉. Powered by eBPF for rapid insights into system performance. Monitor, analyze, and optimize your infrastructure effortlessly for peak reliability at any scale.

Kubernetes operator for deploying and managing OpenClaw AI agent instances with production-grade security, observability, and lifecycle management.

CruiseKube is an intelligent Kubernetes resource optimization controller that automatically monitors, analyzes, and applies resource recommendations to improve cluster efficiency and reduce costs.

Local Kubernetes on Apple's container framework - every node is its own lightweight VM. Metrics, storage, and LoadBalancer included.

Did you know that every Kubernetes pod runs a hidden helper called the pause container, whose only job is to hold the pod's Linux namespaces, the kernel feature that isolates resources like networking between processes? Because this container owns the network namespace, your real app containers can crash and restart without the pod losing its IP address, and every container in the pod can reach the others over localhost.

"Kubernetes makes failure routine by hiding it, then makes debugging mandatory by distributing it. Containers give you repeatable environments so you can ship the same mistake everywhere, on schedule."
— SenseiOne