#RedditKubernetes

I built zlb for clusters where: - public IPs are scarce and routed to one machine; - nodes have no inbound internet access; - there's no BGP or shared L2, so MetalLB, Cilium IPAM, and kube-vip don't fit.…

My 3-node Talos homelab had no persistent storage, so anything with data, like Grafana or a database, had nowhere to live. Longhorn keeps every volume on two of the three nodes, so one node can go down without losing data, and it rebuilds the missing copy…

Hi! If you have any discount code for kubecon tickets please dm me. submitted by /u/njbullz23 [link] [comments]

Share any new Kubernetes tools, UIs, or related projects! submitted by /u/AutoModerator [link] [comments]

We run backend code we've never seen, from thousands of sites, on Kubernetes, and every one of those pods runs inside gVisor. Most of my day goes to it. This is the map I wish I'd had before I started sending fixes upstream.…

A scan is a snapshot of an image against that day's advisory database. The image never changes, the database changes daily. So the only way to know if today's advisory hits last week's deployment is to scan everything again.…

Hey y’all! I’ve been on workers’ comp for a couple of weeks, and I’m not sure if this is boredom, me contemplating a career change, or a little bit of both 😂. Since I’m not very mobile right now, I decided to dive into the homelab hobby.…

Instead of pulling weights from S3 at startup, we've been packaging models as OCI artifacts and pulling them by digest, the same way we pull images. That gets us signing, replication and admission policy for free.…

Follow-up to yesterday's gVisor intro. This is the stub-memory bug I mentioned there, with the debugging steps. gVisor's systrap platform runs app code in host "stub" processes and shifts their shared memory by a random, page-aligned gap at startup, so…

for people running cnpg in prod, what caught you out that you didnt see coming? one thing we noticed: a cluster with no backups configured at all still shows ContinuousArchiving=True, "Continuous archiving is working".…

Is there any real reason to put a heavy appliance like NetScaler in front of the API server? It feels like massive overkill, and I'd rather avoid dealing with the network team's ticket queue.…

kubectl debug node/ puts the node's root filesystem at /host, but the pod isn't privileged, so chroot /host fails unless you add --profile=sysadmin . It also works one node at a time and leaves the pod behind until you delete it.…

Hello, So I have deployed this micro services demo in my cluster using flux. I want to collect metrics from services so I have deployed the monitoring stack using kube-Prometheus-stack and want to use service monitors to identity the services but I see…

I'm working as L1 Linux System Admin. I want to learn Docker & Kubernetes in a structured way. Can you please suggest some good courses for Docker & Kubernetes which is still relevant in 2026? submitted by /u/satkum1106 [link] [comments]

Over the years, I have submitted a couple of pull requests to repos under the Kubernetes GitHub organization. None of them were ever reviewed or merged.…

A detail I hadn't fully appreciated until I rebuilt Monzo's 2017 outage: a normal Service always resolves (to its ClusterIP) even with no endpoints, but a headless Service ( clusterIP: None ) resolves straight to its ready Pods, so with zero Pods its name…

What happens if you break an embargo? Like, fines or worse? Or nothing? “On October 21st at 07:41 UTC, more than six hours before the coordinated release, Chainguard unilaterally broke the embargo and published built images containing the fix.…

Disclosure: I run a DevOps consultancy (MeteorOps). Nothing for sale here; my co-founder wrote the long version, link in a comment. We set CPU limits for every container, but if there's a latency-sensitive service we avoid setting any limits.…

While investigating why quantized `llama.cpp` inference pods behind a FastAPI gateway on a 3-node `kind` cluster were experiencing sudden P95 latency spikes (500ms jumping to 30s) and HTTP 502/504 timeouts, I ran a controlled benchmark across 64…

Got something working? Figure something out? Make progress that you are excited about? Share here! submitted by /u/AutoModerator [link] [comments]