Kubernetes NMState provides declarative host networking configuration for Kubernetes nodes using NMState to manage interfaces, bonds, VLANs, and routes through custom resources.

More: https://ku.bz/d5hxkBdlh

Kide is an observability platform that ingests and indexes logs and metrics in real time so you can search, analyze, and alert on cluster and application data without waiting.

More: https://ku.bz/zpsL842PB

Kubernetes Autoscaling Mixin plugin provides a set of reusable Grafana dashboards and Prometheus rules to help you observe and improve Kubernetes autoscaling performance in your clusters.

More: https://ku.bz/rxvH9xRhn

This tutorial teaches how to set up distributed tracing with Grafana Tempo on AKS using Azure Blob Storage and Private Link for secure, cost-effective observability with workload identity and automated Private Link Service provisioning.

More: https://ku.bz/80GykkQ3W

Kube-OVN Endpoint Health Checker actively probes Kubernetes Service endpoints inside a Kube-OVN network to verify that traffic can actually reach backend pods and that network paths work as expected.

More: https://ku.bz/BT-JgH-Pr

Brock Mowry, CTO @ Tintri, discusses KubeVirt as a key emerging Kubernetes tool he's tracking.

Coming from a virtualization background, he finds the concept of running virtualization inside containers particularly compelling. Brock has been monitoring KubeVirt's development and notes its adoption by major organizations, expressing curiosity about the project's future direction and trajectory in the cloud-native ecosystem.

Watch the full interview: https://ku.bz/F6X3C5Nvg

Dilshan discusses a real incident where migrating EKS nodes to AL2023 caused the cluster autoscaler to lose AWS permissions silently.

You will learn:

- Why AL2023 blocks pod access to instance metadata by default, breaking components that relied on node IAM roles
- How to implement IRSA correctly by configuring IAM roles, Kubernetes service accounts, and OIDC trust relationships, and why both AWS IAM and Kubernetes RBAC must be configured independently
- How to audit which pods currently rely on node roles and clean up legacy IAM permissions to reduce attack surface after migration

Watch (or listen to) it here: https://ku.bz/T_YPfTfDb

🌟 This episode is brought to you by LearnKube — join their 4-day hands-on Advanced Kubernetes course starting January 29th and finally get comfortable with production clusters. https://learnkube.com/training

With @Birthmarkb "Keep Working Harder" Farrell

This tutorial teaches how to deploy a complete LGTM observability stack (Loki, Grafana, Tempo, Mimir) with OpenTelemetry on Kubernetes for unified metrics, logs, and traces.

More: https://ku.bz/0TrP5DsbK

This week's 6 Kubernetes jobs that offer VISA sponsorships are:

Platform Engineer with ClickHouse
💰 $14.1M to $23M a year
👨‍💻 Remote from the United States of America
→ https://ku.bz/2X8VqBpCy

Software Engineer with Inflection AI
💰 $175K to $350K a year
👨‍💻 Remote from the United States of America
→ https://ku.bz/ZJBvwh94F

Software Engineer with Teleport
💰 $173.6K to $293K a year
👨‍💻 Remote from the United States of America
→ https://ku.bz/99fD7rRtt

Software Engineer with Muon Space
💰 $207K to $234K a year
🏠🏃🏻‍♂️🌎 Silicon Valley, CA, USA
→ https://ku.bz/Qj3YWmb_8

Infrastructure Architect with Anchorage Digital
💰 $145K to $205K a year
👨‍💻 Remote from the United States of America
→ https://ku.bz/WDnzs-grR

👉 Browse 1214 jobs on Kube Careers https://kube.careers

This week on Learn Kubernetes Weekly 166:

🚀 How We Moved a 2 Million RPM WebSocket Service to EKS and Fixed a Critical Bottleneck
🔒 Beyond the Surface: Exploring Attacker Persistence Strategies in Kubernetes
📊 Standardizing CRD Condition Metrics in Kubernetes Operators
⚡ Scaling Dagster on Kubernetes: Best Practices for 50+ Code Locations
🌐 An Introduction to Envoy AI Gateway

Read it now: https://kube.today/issues/166

⭐️ This issue is brought to you by LearnKube — master Kubernetes with hands-on training designed for engineers who want to learn the smart way https://ku.bz/hypSbyc-V

Holos is a configuration management tool that uses CUE configuration language to generate and organize Kubernetes manifests across multiple clusters with type safety and reusability.

More: https://ku.bz/Qkp14750k

Kyle Campos, CTPO at CloudBolt Software, explains how their new Kubernetes cost allocation offering changes the market landscape by combining optimization and reporting into a single platform.

He addresses the core problem where teams have historically been blind to cost allocation or forced to use separate solutions and manually unify data layers.

Watch the interview: https://ku.bz/7Wkjqr176

Read the announcement: https://ku.bz/5bVgXgp1d

This tutorial teaches how to optimize pod IP allocation in AWS EKS using VPC CNI prefix delegation to increase pod density per node and reduce IP address exhaustion in VPCs.

More: https://ku.bz/B28qS8c4-

This tool acts as a proxy for Prometheus that tracks query costs and provides analytics on expensive queries to help optimize observability resource usage.

More: https://ku.bz/LZQlNcqZ7

This project automates OS-level maintenance for K3s clusters, draining and rebooting nodes one at a time (worker first, optional control plane), with Longhorn checks, dry-run support, and minimal disruption.

More: https://ku.bz/TJKkQHP-N

This tutorial teaches how to build a managed Kubernetes service on Proxmox using Cluster API (CAPI) for automated cluster provisioning and lifecycle management.

More: https://ku.bz/R5mWtjTh7

Wait4X is a lightweight, zero-dependency tool that waits for ports, HTTP endpoints, DNS records, or databases (Redis, MySQL, Kafka, etc.) to become ready, and can then execute commands.

More: https://ku.bz/Nlx_18gXN

This tool continuously checks Kubernetes control plane signals like:

- API availability,
- leader election,
- and controller health to detect early signs of cluster instability.

More: https://ku.bz/RLZsfDNbY

This week's 6 Kubernetes jobs that offer VISA sponsorships are:

Platform Engineer with ClickHouse
💰 $14.1M to $23M a year
👨‍💻 Remote from the United States of America
→ https://ku.bz/2X8VqBpCy

Platform Engineer with GitLab
💰 $171.4K to $367.2K a year
👨‍💻 Remote from
→ https://ku.bz/8pJpRy7KF

Software Engineer with Inflection AI
💰 $175K to $350K a year
👨‍💻 Remote from the United States of America
→ https://ku.bz/ZJBvwh94F

Software Engineer with Teleport
💰 $173.6K to $293K a year
👨‍💻 Remote from the United States of America
→ https://ku.bz/99fD7rRtt

Software Engineer with Reddit
💰 $190.8K to $267.1K a year
👨‍💻 Remote from
→ https://ku.bz/y8WLRlLrl

👉 Browse 1292 jobs on Kube Careers https://kube.careers

This week on Learn Kubernetes Weekly 167:

⚖️ Kubernetes & KEDA: Avoiding System Failures from Imbalanced Scaling
🔐 Why DevOps should Sec: making a case for DevOps Engineers to transition to DevSecOps
🌐 Optimizing Pod IP Allocation in AWS EKS with Amazon VPC CNI Prefix Delegation
🎮 GPU Starvation in Kubernetes: How Dynamic MIG Partitioning Saved Our GPU Budget
🔄 Migrating from F5 NGINX ingress controller to the F5 NGINX gateway fabric

Read it now: https://kube.today/issues/167

⭐️ This newsletter is brought to you by LearnKube — master Kubernetes with hands-on training designed for engineers who want to learn the smart way https://ku.bz/hypSbyc-V

This article demonstrates how to build reproducible Kubernetes infrastructure using NixOS and OKD for declarative node configuration and cluster management.

More: https://ku.bz/GN7F7DKKL