🚀 New on LearnKube: "Kubelet Metrics: How cAdvisor and CRI Collect Kubernetes Stats."

Kubernetes metrics often look like a Prometheus topic, but the data originates much lower in the stack.

This guide explains how kubelet collects and exposes pod, container, node, and resource metrics, and how that path changes when stats move from cAdvisor to the container runtime through CRI.

You will learn:

- how Linux cgroups provide the raw counters behind container metrics
- where cAdvisor fits inside kubelet
- what kubelet exposes through /metrics, /metrics/cadvisor, /metrics/resource, and /stats/summary
- how containerd and CRI-O can return pod and container stats through CRI
- why the same kubelet endpoint can hide a different internal collection path

Read the full article:
https://learnkube.com/kubernetes-metrics-cadvisor-kubelet-cri

Artem Lajko shares how to prevent wasted resources in observability implementations using a label-based approach.

The model introduces three tiers: low tier (Prometheus + Grafana), medium (adding Loki and alerting), and high (including Jaeger tracing). Teams can progress through the tiers as their needs and capabilities grow, with GitOps and ArgoCD managing the dynamic deployment of tools.

Watch the full episode: https://ku.bz/9sGxhmm8s

This article introduces ctx_, a CLI tool that switches an entire DevOps working context at once, including Kubernetes context, cloud credentials, environment variables, VPN, SSH tunnels, secrets, and browser profile.

More: https://ku.bz/-BG8_C5W2

John Ford from Scout24 SE explains how Scout24 turned a forced OS migration into a chance to rethink Kubernetes autoscaling, node provisioning, and infrastructure efficiency.

You will learn:

- Why two-minute node provisioning forced a 25% capacity buffer
- How Karpenter made the Bottlerocket migration safer
- What broke around EC2 metadata, AWS SDKs, and cgroups
- How the new foundation enables Spot, ARM, and GPU workloads

Watch (or listen to) it here: https://ku.bz/DdmVC2_7v

🌟 This episode is brought to you by LearnKube — get started on your Kubernetes journey through comprehensive online, in-person or remote training: https://learnkube.com/training

With @Birthmarkb

Cluster Agent Swarm Skills is a collection of specialized AI agent skills for Kubernetes and OpenShift operations, covering cluster management, GitOps, security, observability, incident response, and platform workflow orchestration.

More: https://ku.bz/n9K3N9JBq

This week on Learn Kubernetes Weekly 184:

🔥 Three Weeks Hunting a 4GB Native Memory Leak That .NET Couldn't See
⚠️ Before You Migrate: Five Surprising Ingress-NGINX Behaviors You Need to Know
🔀 Why I Built ctx_: The Context Switcher That Actually Gets DevOps Work
🚀 Migrating Ingress NGINX Controller to Istio in Kubernetes
🐘 Running PostgreSQL on Kubernetes: Operators, Storage and Production Guide

Read it now: https://kube.today/issues/184

⭐️ This newsletter is brought to you by WeAreDevelopers World Congress — The World’s Largest Event for Developers, AI Builders & Tech Leaders https://ku.bz/CvpvW-SG2

Context Builder is a CLI tool that extracts metadata from Kubernetes, Grafana, Datadog and other systems to generate structured context files for AI agents, improving debugging accuracy and reducing guesswork.

More: https://ku.bz/zGW8x_G50

Kubeconform is a Kubernetes manifests validation tool.

Similar to Kubeval, but with the following improvements:

1. High performance.
2. Remote or local schema locations
3. Up-to-date schemas for all recent versions of Kubernetes.

More: https://ku.bz/l0kD6R0TS

This article walks you through building EDT-based eBPF bandwidth limiting in the AWS Network Policy Agent, showing where AI-generated code silently broke and how domain knowledge caught each bug.

More: https://ku.bz/KlSSnd0gm

zeropod is a tool that automatically checkpoints containers to disk after a certain amount of time of the last TCP connection, allowing for fast and seamless scaling down to zero.

More: https://ku.bz/pCGwlKG-3

Yue Yin, Software Engineer at ByteDance, explains how Katalyst complements the Gödel scheduler by providing detailed node-level resource information.

The system enables NUMA-aware scheduling and manages resource allocation between online and offline workloads. The integration between Katalyst and Gödel created a unified resource pool that increased ByteDance's CPU utilization from 30% to 60%.

Watch the full episode: https://ku.bz/lMpNng_33

This tutorial explains how to design CloudNativePG for production failure by using plugin-based backups, WAL archiving, point-in-time recovery, snapshots, and PgBouncer so recovery is treated as the real operational priority.

More: https://ku.bz/NGXpyR5wV

We have 10 free tickets for Kubernetes Community Days New York 2026.

A one-day Kubernetes and cloud native conference for engineers, with technical talks, hands-on workshops, and time to meet other practitioners.

Date: June 10, 2026
Venue: Convene One Liberty Plaza, NYC

https://ku.bz/JkjmffBzw

Claim yours: 📧 hello@kube.events

Kappal runs your existing docker-compose.yaml on Kubernetes using familiar commands like up, down, logs, exec.

More: https://ku.bz/9GTYnN7gS

🚀 New on LearnKube: “User and workload identities in Kubernetes.”

The Kubernetes API server must identify the caller before it can check permissions.

The article follows that identity through the request path: external users, in-cluster workloads, service account tokens, projected volumes, JWT claims, TokenReview, and AWS IAM federation.

You will learn:

- how authentication differs from authorization
- why human users usually come from OIDC, certificates, webhooks, proxies, or static token files
- how pods authenticate with service accounts
- why TokenRequest and projected volumes replaced automatic long-lived token secrets
- what sub, aud, iss, and exp tell you inside a JWT
- how EKS IRSA uses projected tokens to federate with AWS IAM
- how TokenReview validates Kubernetes-issued tokens inside the cluster

Read the full article:
https://learnkube.com/authentication-kubernetes

Brock Mowry, CTO @ Tintri, discusses the practical challenges of running AI workloads on Kubernetes from his perspective in the data management space.

Brock warns against the common pattern of experimental AI initiatives that consume significant budgets but lack defined outcomes. His key advice is straightforward: establish your desired outcome before beginning the journey to avoid the costly mistake of purchasing expensive GPUs that ultimately sit idle.

Watch the full interview: https://ku.bz/F6X3C5Nvg

This case study shows how OOM Killer terminated a critical network daemon on Kubernetes nodes, causing a network outage.

It covers debugging via serial console and implementing memory reservations to prevent system-critical process termination.

More: https://ku.bz/_TSW8pWsq

K8sQuest is a local Kubernetes learning game with 50 progressive challenges where you fix broken clusters using kubectl with real-time monitoring, progressive hints, and post-mission debriefs running on kind.

More: https://ku.bz/rr1K1pB3h

The right AI governance pattern for Kubernetes is not one agent doing everything. It is multiple agents doing specific work well.

Henrik Rexed of Dynatrace says teams should think in terms of specialized review lanes: one AI system for infrastructure-heavy changes, another for observability concerns, and a human reviewer to confirm the final result. That reduces the chance of subtle platform-specific issues being missed by a generic review pass.





Watch the full interview: https://ku.bz/KGQ_b20nQ

This week on Learn Kubernetes Weekly 185:

🔥 A One-Line Kubernetes Fix That Saved 600 Hours a Year
🔐 Why Kubernetes Has No Login — And How We Solved It for AuditRadar
⚙️ Durable Workflows Beyond Vercel: Version-Safe Orchestration for Kubernetes
🧩 The Missing Layers in Your Kubernetes Operator
🚨 Why Your KServe InferenceService Won't Become Ready: Four Production Failures and Fixes

Read it now: https://kube.today/issues/185

⭐️ This issue is brought to you by Qodo, the AI code integrity platform helping teams review, test, and ship reliable infrastructure code faster https://ku.bz/NvLHsnl-6