Topic
14 articles found
This is part of the Platform engineering with Go series: a growing collection of posts on Kubernetes, Go tooling, and infrastructure automation. View all posts in the series It's 3am. Your on-call phone goes off. A service is down in production. You log in, check the pods, and see this: kubectl get
Argo CD, a widely used tool for deploying software to Kubernetes, has an unpatched flaw in its repo-server component that lets an unauthenticated attacker run code, provided they can reach the component's internal network port. Synacktiv, which found the bug, says it can lead to a full cluster takeo
Amazon EKS runs hundreds of thousands of Kubernetes clusters across more than thirty AWS regions. Operating at that scale has The post Operating Kubernetes at scale: a few stories from running Amazon EKS appeared first on The New Stack.
Modern cloud deployments involve many tools with different lifecycles, creating a heavy burden on engineers. The Kubernetes ecosystem offers a unified Control Plane approach. Sharing best practices through tech talks and inner-source collaboration can create an engaged community and drive adoption.
Grab's security team built Palana, a Kubernetes-native secure execution platform, to run autonomous AI agents safely. Unlike deterministic software, model-driven agents exhibit unpredictable tool-use, code-writing, and prompt injection risks. Palana contains these threats at the infrastructure level
Google's GKE Labs has introduced OpenRL, an open-source project that provides a self-hosted API for post-training and fine-tuning Large Language Models (LLMs) on standard Kubernetes clusters. By Sergio De Simone
Upbound Inc. today released Modelplane, a new open-source tool for managing artificial intelligence inference clusters. San Francisco-based Upbound is backed by $69 million from Alphabet Inc.’s GV fund, Intel Capital and others. It’s best known as the creator of Crossplane, an open-source infrastruc
Kubernetes teams automate deployments without thinking about it. CI/CD pipelines fire dozens of times a day, autoscaling adjusts replicas in The post Kubernetes teams trust automation to ship code but not to touch CPU, and AI is raising the stakes appeared first on The New Stack.
Chapter 3: The Dockerfile — Multi-Stage Build 3.1 Why Multi-Stage Builds? Metric Single-Stage vs Multi-Stage 3.2 The Complete Dockerfile # ───────────────────────────────────────────────────────────────────────── # Stage 1: builder # Installs all dependencies and compiles assets. # This stage is NEV
If you're setting up Kubernetes for a private project — internal tools, an isolated network, an in-house stack — at some point you hit the question: where do the images come from? Every tutorial assumes public registries like docker.io, ghcr.io, or quay.io are reachable. When they aren't, the chicke
I've been writing software for ten years. Last week I needed to extract a .tar.gz, sat there with my cursor blinking, and could not for the life of me remember the flag order. Is it -xzf? -xvf? So I Googled "extract tar gz" — for what felt like the thousandth time in my career. If you've done this —
Kubernetes Pod Autoscaling: A Key to Efficient Resource Utilization As a Full Stack Engineer specializing in DevOps, AI Infrastructure, and Cloud, I've seen firsthand the importance of efficient resource utilization in Kubernetes environments. In my experience, Kubernetes pod autoscaling is a crucia
Kubernetes v1.36 introduces Pod-Level Resource Managers as an alpha feature, bringing a more flexible and powerful resource management model to performance-sensitive workloads. This enhancement extends the kubelet's Topology, CPU, and Memory Managers to support pod-level resource specifications (.sp
On behalf of SIG Node, we are pleased to announce updates to the Memory QoS feature (alpha) in Kubernetes v1.36. Memory QoS uses the cgroup v2 memory controller to give the kernel better guidance on how to treat container memory. It was first introduced in v1.22 and updated in v1.27. In Kubernetes v
