Introducing Kube Signals: the new KubeFM show that turns keynote trends into direct conversations with the speakers shaping them.

For episode one, Brian Teller sits down with Saiyam Pathak from vCluster after his KubeCon India keynote on AI factories. They examine why the GPU beneath the model is becoming a platform-engineering problem.

They discuss:

- Why whole-GPU allocation wastes capacity
- How DRA, HAMI, MIG, and MPS enable sharing
- What Kubernetes must learn to support AI factories

Watch the full episode: https://ku.bz/4QZDqrnf-

This episode is sponsored by LearnKube. Download the free book, The Technical Guide to Kubernetes Rightsizing, to understand what Prometheus and Grafana cannot tell you about safely reducing requests and limits.

This case study shows how to stabilize Harbor on VMware VKS by expanding storage, upgrading the Supervisor Service, and configuring Trivy scanning to receive vulnerability results.

More: https://ku.bz/cScZ7ZQ8d

Public and private registries solve different distribution problems.

Meg Sarros explains the split clearly: public registries optimize discoverability and broad access, while private registries prioritize governance, encryption, signing, and scanning for internal workloads.

The takeaway is not choosing one forever, but knowing where each model fits in your image supply chain.



Watch the full interview: https://ku.bz/k_r1B0Rwj

This week on Learn Kubernetes Weekly 198:

🏗️ Data Lakehouse: Infrastructure
🔭 What the Popularity of Emerging Tools Tells Us About Kubernetes' Future
⚡ Kafka on Kubernetes: Performance Lessons for Any Disk-Heavy Data Service
🌐 To Centralise or Not to Centralise: The Questions That Shaped the Kubernetes CODECO Federated Architecture
🚨 Your AI Just Deleted the Wrong Deployment. Now What?

Read it now: https://kube.today/issues/198

⭐️ This newsletter is brought to you by LearnKube — master Kubernetes with hands-on training designed for engineers who want to learn the smart way https://ku.bz/hypSbyc-V

Warden is a secure gateway that brokers connections between AI agents and enterprise systems by authenticating agent identity and injecting short-lived credentials at request time.

More: https://ku.bz/knyfjtYg7

What emerging Kubernetes tools are experts paying attention to right now?

Bart Farrell from KubeFM looks back across 100+ KubeFM conversations to surface the tools guests kept mentioning, including Karpenter, Dapr, Argo CD, Kagent, Agent Gateway, OpenTelemetry, KRO, KCP, KubeVirt, Kueue, Kyverno, Headlamp, KEDA, Crossplane, KServe, ACK, and more.

Amos explains how TLS certificate renewal failures became the first symptom of a complex networking issue when adding a home computer to his production Kubernetes cluster.

He walks through the cert-manager HTTP challenge process with Let's Encrypt validation and demonstrates how to use K9s for debugging to trace certificate renewal problems to specific nodes.

Watch the full episode: https://ku.bz/6Ll_7slr9

This case study shows how Cilium implements defense-in-depth supply chain security for open source CI/CD.

It covers access controls, dependency pinning, credential isolation, and cryptographic verification.

More: https://ku.bz/dB6Bj2sKw