🔗 Stories, Tutorials & Articles

kubernetes.io
A new quadratic formula now maps cgroup v1 CPU shares to cgroup v2 CPU weight. Why? Because the old linear approach messed with CPU fairness; especially at low share values. This fix nails prioritization where it counts.
It lands at the OCI runtime layer, live in runc v1.3.2 and crun v1.23, so containers finally get CPU weights that reflect reality, not rounding errors.
Big picture: Kubernetes and cgroup v2 never quite agreed on CPU math. This update closes that gap, giving schedulers sharper control and workloads cleaner isolation.

kubernetes.io
Cluster API v1.12.0 adds in-place updates and chained upgrades, so machines can swap parts without going down, and clusters can jump versions without drama.
KubeadmControlPlane and MachineDeployments now choose between full rollouts or surgical patching, depending on what changed. The goal: keep clusters stable, upgrades smooth.
Bigger picture: Cluster API is edging closer to what real workload orchestration should feel like, a smart balance between solid-state infra and lifecycle agility.

kubernetes.io
Kubernetes is cutting off Ingress NGINX in March 2026. No more updates. No bug fixes. No security patches. Done.
Roughly half of cloud-native setups still rely on it, but it's been understaffed for years. If you're one of them, it's time to move.
There’s no plug-and-play replacement, but the ecosystem’s betting on Gateway API. It’s more modern. More flexible. Built for today’s traffic-routing problems.

docker.com
Clawdbot just plugged into Docker Model Runner (DMR). That means you can now run your own OpenAI-compatible assistant, locally, on your hardware. No cloud. No per-token fees. No data leaking into the void.

kubernetes.io
A new guide shows how to run Gateway API locally with kind and cloud-provider-kind. It spins up a one-node Kubernetes cluster in Docker - complete with LoadBalancer Services and a Gateway API controller. Cloud vibes, zero cloud bill.
Fire it up to deploy demo apps, test routing, or poke around with CRD experiments. No production stress attached.
⚙️ Tools, Apps & Software

github.com
Descheduler for Kubernetes

github.com
Kubernetes Enumeration Tools for Penetration Testing - K8s security assessment scripts for red team operations

github.com
A Kubernetes operator to manage Zed Attack Proxy (ZAP) scans :rocket:

github.com
Gracefully handle EC2 instance shutdown within Kubernetes

github.com
DevOps and Security knowledge base with 50+ skills covering Kubernetes, Terraform, AWS/GCP/Azure, container hardening, SOC2 compliance, and incident response. Includes ready-to-run scripts and agent-ready instructions for SREs, platform engineers, and security teams.
🤔 Did you know?
Did you know Kubernetes’ API server implements API Priority and Fairness (APF) to protect itself from overload by classifying traffic into flows and priority levels defined by FlowSchema and PriorityLevelConfiguration? APF applies a fair-queuing algorithm so that within a given priority level, distinct request flows are treated equitably, and it uses shuffle sharding to assign flows to a subset of queues to reduce interference from heavy hitters. APF has been enabled by default since Kubernetes 1.20 (beta) and became stable in v1.29, and the flow control configuration (priority levels, concurrency shares, queueing behavior) is tunable at runtime via API objects without restarting the API server. By dividing the server’s total concurrency limit among priority levels, critical control-plane traffic such as leader election, kubelet heartbeats, and controller manager requests remain responsive even under load from noisy clients.
⚡Growth Notes
When you change a Kubernetes resource, take the time to diff not just the YAML, but the resulting object model you expect the controllers to converge to, stepping through how each controller, admission webhook, and CRD status field will react to that single patch. This quiet habit of mentally simulating the full reconciliation path before you kubectl apply is how senior engineers avoid cascading outages, reduce rollback thrash, and build a deep, controller-focused intuition that continues to pay off even as APIs and platforms shift around them.