» Tag
kubernetes
51 postsGoogle's Agent Substrate Project: A New Control Plane for AI Agents
Google introduces GKE Agent Sandbox and Agent Substrate for AI agents, addressing Kubernetes limitations. A new control plane emerges.
Smol Machines: Kubernetes in a MicroVM
Smol machines enable running a real Kubernetes cluster in a single microVM, enhancing isolation and control for engineers.
Hardening Kubernetes: Closing the kubectl debug node Loophole
kubectl debug node can bypass pod security restrictions, granting root access to a node. Learn how PSA, RBAC, and break-glass namespaces close this gap.
CommitBrief — AI code reviews, right in your terminal
A provider-agnostic, local-first CLI that reviews your staged changes, a historic range, or a whole GitHub pull request. Zero telemetry, no server. Free and open source.
commitbrief.comKars: A Kubernetes-Native Zero-Trust Runtime for AI Agents
Kars runs each AI agent in an isolated Kubernetes sandbox, routing every external call through a Rust-based zero-trust broker with no agent-held credentials.
ArcadeDB Adds OpenTelemetry Tracing and Kubernetes Health Probes
ArcadeDB expands cloud observability with four opt-in pillars: deeper metrics, OpenTelemetry tracing, structured JSON logging and Kubernetes health probes.
Chasing True Zero-Downtime Redis Sentinel Failover on Kubernetes
An engineer's attempt to achieve near zero-downtime Redis Sentinel failover on EKS: custom preStop hooks, ioredis buffering risks, and the debate over HA at scale.
How Airbnb Broke Circular Dependencies in Its Observability Stack
Airbnb engineers explain how they eliminated circular dependencies in their metrics pipeline using dedicated Kubernetes clusters and a custom Envoy-based networking layer.
EKS, AKS, and GKE: A Comparative Analysis of Managed Kubernetes Services
A comparison of EKS, AKS, and GKE based on cost, networking, and operational experience. Which platform is right for you?
From Lift-and-Shift to Cloud-Native: A Kubernetes Modernization Playbook
A practical path for turning lifted VM workloads into real cloud-native systems: stateless redesign, strangler fig pattern, KEDA autoscaling, and modernization sequencing.
Building Secure AI Sandboxes on Kubernetes
Comparing gVisor, Kata, and Firecracker for running untrusted AI agent code safely on Kubernetes, and why pods alone aren't a security boundary.