# kubectl Published articles for kubectl. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Kubernetes Architecture: Control Plane, Scheduler, and Kubelet DevFeed: [Kubernetes Architecture: Control Plane, Scheduler, and Kubelet]() Original publisher: [Read original article]() Author: Nimesha Jinarajadasa Published: 2026-09-17T06:25:02Z Content type: tutorial Language: en Sources: [Kubernetes - KodeKloud Blog | DevOps, Cloud, Kubernetes, AI Tutorials & More]() Topics: [Kubernetes](), [control-plane](), [api server](), [Containers](), [etcd](), [kubectl]() Tags: [api](), [api-server](), [containers](), [control-plane](), [controllers](), [etcd](), [kubectl](), [kubernetes](), [kubernetes-architecture](), [kubernetes-networking](), [node](), [scheduler]() ### AI overview A beginner-friendly tutorial explaining how Kubernetes maintains the desired state of containerized applications. It covers the control plane, API server, etcd, controllers, scheduler, and kubelet. ### Source excerpt Learn how Kubernetes works, from the control plane and scheduler to kubelet, pods, and Services, with simple answers to interview questions. ## Day to day PostgreSQL on Kubernetes: Resize, Scale, and Upgrade DevFeed: [Day to day PostgreSQL on Kubernetes: Resize, Scale, and Upgrade]() Original publisher: [Read original article]() Author: Hans-Jürgen Schönig Published: 2026-08-25T06:16:00Z Content type: tutorial Language: en Sources: [CYBERTEC PostgreSQL | Services & Support]() Topics: [Kubernetes](), [PostgreSQL](), [postgresql clusters]() Tags: [capacity](), [commands](), [declarative](), [github](), [how-to](), [kubectl](), [kubernetes](), [operations](), [patroni](), [pg-operator](), [postgresql](), [postgresql-on-cloud](), [pull-requests](), [rolling-update](), [scale](), [upgrade]() ### AI overview A tutorial demonstrates resizing, scaling, and minor version upgrades for PostgreSQL running on Kubernetes with the CYBERTEC PG Operator. Using end-to-end minikube tests, it shows declarative manifest changes, rolling updates, Patroni failover, and scaling while the cluster remains available. ### Source excerpt This blog is about the resizing, scaling PostgreSQL in Kubernetes. This blog helps you learn various operation related to operations of PostgreSQL in Kubernetes. The post Day to day PostgreSQL on Kubernetes: Resize, Scale, and Upgrade appeared first on CYBERTEC PostgreSQL | Services & Support. ## Mastering PostgreSQL Configuration Management with CloudNativePG (CNPG) DevFeed: [Mastering PostgreSQL Configuration Management with CloudNativePG (CNPG)]() Original publisher: [Read original article]() Author: Wellingtone Luvonga Published: 2026-08-04T05:00:38Z Content type: tutorial Language: en Sources: [CYBERTEC PostgreSQL | Services & Support]() Topics: [configuration](), [PostgreSQL](), [postgresql clusters](), [Kubernetes](), [GitOps](), [YAML](), [kubectl]() Tags: [administration](), [cloudnativepg](), [configuration](), [configuration-management](), [gitops](), [how-to](), [kubectl](), [kubernetes](), [postgresql](), [replication](), [yaml]() ### AI overview This tutorial explains how CloudNativePG manages PostgreSQL configuration in Kubernetes. It contrasts imperative editing of configuration files with declarative management through Kubernetes YAML and shows how to define database parameters and pg_hba.conf rules in a CNPG cluster resource. ### Source excerpt This blog talks about Configuration Management in PostgreSQL with CNPG, with some great examples in a comprehensive way. The post Mastering PostgreSQL Configuration Management with CloudNativePG (CNPG) appeared first on CYBERTEC PostgreSQL | Services & Support. ## How to Build a Kubernetes Troubleshooting AI Agent with LangChain and kubectl DevFeed: [How to Build a Kubernetes Troubleshooting AI Agent with LangChain and kubectl]() Original publisher: [Read original article]() Author: Pramodh Kumar M Published: 2026-07-27T17:26:08Z Content type: tutorial Language: en Sources: [Kubernetes - KodeKloud Blog | DevOps, Cloud, Kubernetes, AI Tutorials & More]() Topics: [AI Agent](), [Kubernetes](), [kubectl](), [LangChain](), [Tutorial]() Tags: [ai](), [ai-agent](), [ai-agent-for-kubernetes](), [ai-agents](), [aiops-for-kubernetes](), [automation](), [configuration](), [crashloopbackoff-troubleshooting](), [devops](), [human-in-the-loop-agent](), [kubectl](), [kubectl-ai-agent](), [kubernetes](), [kubernetes-rbac-for-ai-agents](), [kubernetes-troubleshooting-ai-agent](), [kubernetes-troubleshooting-automation](), [langchain](), [langchain-kubernetes-agent](), [langgraph](), [langgraph-agent-tutorial](), [python](), [react-agent-python](), [security](), [tool](), [troubleshooting](), [tutorial]() ### AI overview A tutorial on building a Kubernetes troubleshooting AI agent with LangChain v1 and kubectl. It describes a diagnostic ladder for investigating pod failures, read-only tools, approval requirements for write operations, separate identities for remediation, and a golden trace suite for evaluating results. ### Source excerpt Most pod failures resolve into six root causes, and the investigation is identical every time. Here is how to build an agent that runs that investigation for you, with a hard boundary between reading a cluster and changing one. ## Building AI Agents That Manage Kubernetes DevFeed: [Building AI Agents That Manage Kubernetes]() Original publisher: [Read original article]() Author: Nimesha Jinarajadasa Published: 2026-07-27T05:00:53Z Content type: tutorial Language: en Sources: [Kubernetes - KodeKloud Blog | DevOps, Cloud, Kubernetes, AI Tutorials & More]() Topics: [AI Agent](), [Kubernetes](), [kubectl](), [Python]() Tags: [agents](), [ai](), [how-to](), [kubectl](), [kubernetes](), [python](), [tutorial]() ### AI overview A hands-on tutorial for building a supervised AI agent that manages Kubernetes through an LLM and kubectl tool-calling loop. The agent reads cluster state, proposes approved actions such as scaling a deployment, applies guardrails and human approval, and verifies the result on a throwaway cluster. ### Source excerpt Build a supervised AI agent that manages Kubernetes: an LLM in a kubectl tool loop with real guardrails. Full hands-on tutorial, live output. ## How to scale GitOps in the enterprise: From single cluster to fleet management DevFeed: [How to scale GitOps in the enterprise: From single cluster to fleet management]() Original publisher: [Read original article]() Author: Artem Lajko Published: 2026-07-23T05:40:01Z Content type: tutorial Language: en Sources: [Platform Engineering Blog]() Topics: [GitOps](), [Tooling](), [Git](), [YAML](), [flux]() Tags: [complexity](), [config](), [deployment](), [developers](), [git](), [guide](), [helm](), [how-to](), [kubectl](), [learn](), [operational](), [platform](), [reconciliation](), [scale](), [secrets](), [secrets-management](), [workflow](), [workflows]() ### AI overview This guide explains how to scale GitOps from a single cluster to enterprise fleet management across 50 or more clusters. It focuses on architectural patterns, state store strategies, multi-cluster topology, secrets and policy management, configuration sprawl, repository performance, reconciliation delays, and the organizational discipline required for reliable operations. ### Source excerpt Learn how to scale GitOps from 1 to 50+ clusters using advanced state store patterns (OCI, ConfigHub), multi-cluster topology, and enterprise secrets/policy management ## Securing kubectl on Remote Kubernetes Clusters Without Static Credentials or VPNs DevFeed: [Securing kubectl on Remote Kubernetes Clusters Without Static Credentials or VPNs]() Original publisher: [Read original article]() Author: info@goteleport.com (Steven Martin) Published: 2026-07-17T00:00:00Z Content type: tutorial Language: en Sources: [Teleport]() Topics: [Kubernetes](), [Kubernetes clusters](), [k3s](), [Network](), [Networks]() Tags: [best-practices](), [clusters](), [credentials](), [firewalls](), [how-to](), [infrastructure](), [k3s](), [kubectl](), [kubernetes](), [kubernetes-clusters](), [network](), [networks](), [remote]() ### AI overview A guide to securing kubectl access to remote Kubernetes clusters running on distributed edge devices. It explains how NAT, firewalls, kubeconfig sprawl, and static credentials create access and security risks, and discusses avoiding publicly exposed API servers and VPN-related operational challenges. ### Source excerpt Learn how to secure Kubernetes access across remote fleets without creating risk. ## What running Kubernetes across millions of clusters taught AWS about zonal failures DevFeed: [What running Kubernetes across millions of clusters taught AWS about zonal failures]() Original publisher: [Read original article]() Author: Raghav Tripathi Published: 2026-07-10T15:00:00Z Content type: article Language: en Sources: [Kubernetes Overview, News and Trends | The New Stack]() Topics: [Amazon EKS](), [Kubernetes](), [Amazon Web Services](), [Resilience](), [Availability]() Tags: [amazon-eks](), [api](), [availability](), [aws](), [aws-marketplace](), [cloud-services](), [health-checks](), [kubectl](), [kubernetes](), [networking](), [operations](), [outage](), [post-contributed](), [resilience](), [sponsor-aws-marketplace](), [sponsored-post-contributed]() ### AI overview AWS describes how years of engineering on Amazon EKS addressed zonal failures, including gray failures where a zone is degraded but still passes some health checks. The approach emphasizes static stability, preserving capacity, and routing around the impaired Availability Zone. ### Source excerpt Handling the obvious failures is the easy part: a server goes down, you spin up another. The failures that actually The post What running Kubernetes across millions of clusters taught AWS about zonal failures appeared first on The New Stack. ## Kubernetes Tutorial: Deploy, Expose, Scale, and Self-Heal Your First App DevFeed: [Kubernetes Tutorial: Deploy, Expose, Scale, and Self-Heal Your First App]() Original publisher: [Read original article]() Author: Nimesha Jinarajadasa Published: 2026-07-06T08:25:48Z Content type: tutorial Language: en Sources: [Kubernetes - KodeKloud Blog | DevOps, Cloud, Kubernetes, AI Tutorials & More]() Topics: [Kubernetes](), [Tutorial](), [kubectl](), [YAML](), [Containers](), [Deployment]() Tags: [beginners](), [declarative](), [guide](), [kubectl](), [kubernetes](), [scale](), [self-healing](), [state](), [tutorial](), [yaml]() ### AI overview A beginner-friendly, hands-on tutorial that walks through deploying an application to a Kubernetes cluster, exposing it with a Service, scaling it, observing self-healing, and repeating the deployment declaratively with YAML and kubectl. ### Source excerpt A hands-on Kubernetes tutorial for beginners: deploy your first app, expose and scale it, see self-healing, and use YAML with kubectl. ## Server-side apply: what happens when you run kubectl apply DevFeed: [Server-side apply: what happens when you run kubectl apply]() Original publisher: [Read original article]() Author: Chiara Salvatore Published: 2026-06-30T00:00:00Z Content type: tutorial Language: en Sources: [Learnk8s]() Topics: [Kubernetes](), [kubectl](), [API](), [OpenAPI Specification](), [Deployment]() Tags: [apply](), [deployment](), [how-to](), [kubectl](), [kubernetes](), [openapi]() ### AI overview This tutorial explains how Kubernetes client-side and server-side apply handle shared object state. It focuses on field ownership, API server interactions, and how different tools can overwrite or preserve changes. ### Source excerpt Client-side apply can silently overwrite changes made by other tools. Server-side apply moves field ownership to the API server. Here is how it works and why it matters. ## Kube-Agents: an intent-driven presentation layer for Kubernetes DevFeed: [Kube-Agents: an intent-driven presentation layer for Kubernetes]() Original publisher: [Read original article]() Author: Google Open Source (noreply@blogger.com) Published: 2026-05-21T18:30:00Z Content type: opinion Language: en Sources: [Google Open Source Blog]() Topics: [Kubernetes](), [control-plane](), [API](), [YAML]() Tags: [agents](), [api](), [autonomous](), [control-plane](), [kube-agents](), [kubectl](), [kubernetes](), [yaml]() ### AI overview The article presents Kube-Agents, a proposed system of autonomous and human-in-the-loop agents that would provide an intent-driven presentation layer for Kubernetes. It describes agents that complement existing Kubernetes interfaces by observing cluster state and carrying out operations through existing APIs. ### Source excerpt by Adrian Chung, Abdelfettah Sghiouar & Matt Larkin, Google Kubernetes Engine Empowering every engineer to do more with Kubernetes Kubernetes is the gold standard for container orchestration. Its power, flexibility, and rich API surface are exactly why it has become the foundation of modern cloud-first infrastructure. Today, engineers express that power through the K8s API, declarative YAML manifests, and cloud consoles, a remarkably expressive toolbox. We believe the next step is to expand how engineers interact with that toolbox. A Kubernetes expert should be able to converse with a deep-domain peer that speaks fluent control-plane and can reason about cluster state in real time. An engineer who isn't a Kubernetes specialist should be able to express higher-order intent, such as "deploy my application," "rebalance this workload" and have it carried out safely against the same powerful APIs. Both audiences get more leverage out of the platform they already trust. This is the vision behind Kube-Agents: a system of intelligent, autonomous, and human-in-the-loop agents that act as a new, intent-driven presentation layer for Kubernetes. We are moving from declarative intent via API to higher-order, human intent-driven operations while preserving everything that makes Kubernetes great underneath. The Vision: Expanding the Presentation Layer Today, engineers do impressive work stitching together metrics, alerts, and multi-step commands to keep clusters healthy. Agents extend that work, not replace it. By complementing existing interfaces with autonomous agents, engineers can choose the level of abstraction that fits the task: drop down to kubectl and YAML when precision matters, or describe intent in plain language when speed and clarity matter more. The agents continuously observe system state and can execute complex operations in real time on the engineer's behalf. This isn't about hiding Kubernetes. It's about giving every engineer a more capable collaborator on top o ## Kubeflow Community Distribution 26.03.1 Release Announcement DevFeed: [Kubeflow Community Distribution 26.03.1 Release Announcement]() Original publisher: [Read original article]() Author: Kubeflow 26.03 Release Team Published: 2026-04-11T05:00:00Z Content type: release Language: en Sources: [Kubeflow]() Topics: [releases](), [Kubernetes](), [MinIO](), [istio](), [OpenID connect (OIDC)](), [kubectl]() Tags: [announcement](), [authentication](), [authorization](), [catalog](), [ci](), [istio](), [kubectl](), [kubernetes](), [minio](), [network](), [oidc](), [parallel](), [release](), [storage](), [ui](), [updates](), [versioning]() ### AI overview The Kubeflow Community Distribution 26.03.1 release introduces calendar-based versioning and updates components including Kubernetes, Kubeflow Pipelines, KServe, Trainer, notebooks, the dashboard, Istio, and related dependencies. It also adds native OIDC support, conditional and parallel Local Runner control flows, SeaweedFS storage support, and completes MinIO deprecation. ### Source excerpt The release versioning is now calendar-based (Year.Month.Patch). Around two base releases are planned per year with optional patch releases. The best-effort only community support is roughly 6 months and there is commercial support available from multiple vendors. Please update regularly as explained in our upgrading and extending section to benefit also from security and performance improvements. Release details: 26.03 and 26.03.1. ## Using Mitmproxy to Observe kubectl Traffic DevFeed: [Using Mitmproxy to Observe kubectl Traffic]() Original publisher: [Read original article]() Author: Scott Lowe Published: 2026-03-04T22:30:00Z Content type: tutorial Language: en Sources: [Scott's Weblog]() Topics: [Kubernetes](), [kubectl](), [Linux](), [Ubuntu](), [Authentication](), [Network](), [macOS](), [Amazon Web Services]() Tags: [apt](), [authentication](), [aws](), [certificates](), [cilium](), [cli](), [cloud](), [cni](), [commands](), [containers](), [cri-o](), [devops](), [docker](), [go](), [iac](), [k8s](), [kubectl](), [kubernetes](), [linux](), [macos](), [networking](), [oci](), [security](), [tutorial](), [ubuntu]() ### AI overview This tutorial explains how to use mitmproxy to observe traffic between kubectl and the Kubernetes API Server. It describes the tested Linux and Ubuntu environment, notes that the commands should work similarly on macOS, and discusses extracting client certificates from a Kubeconfig file for certificate-based authentication. ### Source excerpt When I first started learning Kubernetes, I had the idea that observing the network traffic between a client system using kubectl and the Kubernetes API Server would be a useful thing to do. The source of the idea is unclear; I am unsure why I thought this would be useful as a learning tool. Regardless, I continued on with learning Kubernetes and never really pursued this idea--until this week. I found it can be a useful troubleshooting technique, but I will leave it up to you to determine if it is a useful learning technique. In this post, I will show you how to observe kubectl traffic using mitmproxy. This technique is inspired by/informed by Ahmet Alp Balkan's similarly-named blog post from 2019. Unfortunately, I found the instructions there to be incomplete (most likely just due to the passage of time and continued evolution of the tools involved). I used the following tools and environments in my testing: The tests were conducted on a Linux system running Ubuntu 24.04.4. The commands should work similarly on macOS. Mitmproxy was installed from the Ubuntu repositories using apt. kubectl version 1.33.3 was used to communicate to a self-managed cluster on AWS (in other words, not Amazon EKS) running Kubernetes 1.32.9. The cluster was bootstrapped using kubeadm. I wouldn't expect any major/significant differences with other versions of kubectl or Kubernetes. I was using a client certificate to authenticate to Kubernetes. It's unclear to me how this might work--if it works at all--with alternate authentication mechanisms. Prepare Client Certificates Before you can start mitmproxy, you'll first need to extract the client certificates from the Kubeconfig file. A couple of ways exist to do this; a blog post of mine from 2022 contains what I believe is the easiest way. The method involves yq (to extract information from the Kubeconfig) and base64 (to decode the client certificate and client key). Refer to the linked blog post for full details. First, extract the client cer ## Investigate Amazon EKS Audit Logs with Teleport Identity Security DevFeed: [Investigate Amazon EKS Audit Logs with Teleport Identity Security]() Original publisher: [Read original article]() Author: info@goteleport.com (Ben Arent) Published: 2025-11-11T00:00:00Z Content type: release Language: en Sources: [Teleport]() Topics: [Amazon Elastic Kubernetes Service](), [audit](), [Security](), [Kubernetes](), [Amazon Web Services]() Tags: [audit](), [cloudtrail](), [collection](), [kubectl](), [kubernetes](), [metrics](), [security]() ### AI overview Teleport 18 adds official support for importing Amazon EKS Audit Logs into Teleport Identity Security. The feature provides unified visibility into Kubernetes API activity, including actions performed outside Teleport, and supports correlating EKS activity with Teleport access and AWS audit data. ### Source excerpt Learn how Teleport 18 brings Amazon EKS Audit Logs into Identity Security, giving teams unified visibility into all Kubernetes API activity--including shadow access. ## Introducing Replik8s, a Modern Security Tool for Kubernetes DevFeed: [Introducing Replik8s, a Modern Security Tool for Kubernetes]() Original publisher: [Read original article]() Published: 2025-09-22T16:00:00Z Content type: release Language: en Sources: [Latacora]() Topics: [Kubernetes](), [Security](), [Kubernetes clusters](), [Open Source](), [Incident response](), [AI Agent]() Tags: [ai-agent](), [incident](), [incident-response](), [kubectl](), [kubernetes](), [kubernetes-clusters](), [mcp](), [other](), [security](), [security-tools](), [trivy]() ### AI overview Latacora introduces Replik8s, an open-source Kubernetes tool that snapshots cluster data, serves historical snapshots through a mirror API, supports kubectl and Trivy workflows, and provides query-based analysis for auditing and investigation. ### Source excerpt Introduction # Security tools are often designed to highlight specific issues by consuming APIs and applying predefined logic. Each tool implements its own data structures, storage formats, and evaluation logic. While effective in narrow contexts, this approach creates challenges for teams managing a diverse toolset. Moreover, most tools are optimized to fetch only the data needed for specific findings, limiting their utility in broader contexts such as incident response or historical analysis. ## Native Subresource Support in Kubectl DevFeed: [Native Subresource Support in Kubectl]() Original publisher: [Read original article]() Author: Abhimanyu Saharan Published: 2025-06-29T00:00:00Z Content type: tutorial Language: en Sources: [Abhimanyu Saharan]() Topics: [Kubernetes]() Tags: [flag](), [kubectl](), [kubernetes](), [scale]() ### AI overview The article introduces native kubectl support for interacting with Kubernetes subresources such as status and scale through the new --subresource flag, eliminating the need for raw HTTP calls. ### Source excerpt Interact with Kubernetes subresources like `status` and `scale` using `kubectl` natively with the new `--subresource` flag, no more raw HTTP calls. ## Blog: Detecting Threats in OVHcloud MKS Audit Logs with Falco DevFeed: [Blog: Detecting Threats in OVHcloud MKS Audit Logs with Falco]() Original publisher: [Read original article]() Published: 2025-03-13T00:00:00Z Content type: tutorial Language: en Sources: [Falco - Falco](), [Falco - The Falco blog]() Topics: [Kubernetes](), [Security](), [threat detection](), [Kubernetes clusters](), [kubectl](), [Cloud](), [Open Source](), [api server](), [container](), [Amazon EKS](), [Amazon Elastic Kubernetes Service]() Tags: [api](), [audit](), [auditlogs](), [container](), [falco](), [kubectl](), [kubernetes](), [linux](), [logs](), [mks](), [ovhcloud](), [plugin](), [security](), [threat-detection]() ### AI overview This article explains how Falco uses the OVHcloud MKS Audit Logs plugin to detect anomalies, suspicious activity, and policy violations in Kubernetes clusters. It describes Falco's event processing and outlines the required setup involving OVHcloud Logs Data Platform, a data stream, and an MKS cluster. ### Source excerpt Detecting threats in a Kubernetes cluster can be challenging, we generally don't know where and how to start. The good news is that we have an amount of valuable logs that can help us to know what is happened in the cluster. Indeed, each action requested or done by a user or an app, in a cluster, is recorded in Audit Logs. Kubernetes events are key to understanding the behavior of a cluster. We already provide plugins that let you parse Audit Logs and use Falco to detect threats from GKE, EKS and AKS clusters. With our latest plugin, you'll now have the same powerful threat detection capabilities for your OVHcloud MKS clusters 🎉. What is Falco? Falco is an Open Source cloud-native runtime security tool. It provides near real-time threat detection for cloud, container, and Kubernetes workloads by leveraging runtime insights. Falco can monitor events from various sources, including the Linux kernel, and enrich them with metadata from the Kubernetes API server, container runtime, and more. Falco can receive Events, compare them to a set of Rules to determine the actions to perform and generate Alerts to different endpoints. What is the OVH MKS Audit Logs plugin? The OVH audit logs plugin (k8saudit-ovh) extends Falco's capabilities to OVHcloud Managed Kubernetes Service (MKS) clusters, providing you with the same security insights and threat detection Falco already offers for GKE, EKS and AKS environments. With this plugin, you can seamlessly integrate MKS Audit Logs into Falco's event processing pipeline, enabling it to identify anomalies, suspicious activities, and policy violations within your MKS-based workloads. Concretely, when a user executes some kubectl commands in an OVHcloud MKS cluster, Audit Logs will be generated. Falco is listening to them, and depending on the configured rules to follow, it will generate some alerts. Using OVH MKS Audit Logs plugin In order to use the OVH MKS Audit Logs plugin, you must follow several steps: deploy an OVHcloud LDP (Logs ## Automating Keycloak Deployments for Fun and Profit DevFeed: [Automating Keycloak Deployments for Fun and Profit]() Original publisher: [Read original article]() Author: brakmic Published: 2024-12-24T22:31:29Z Content type: tutorial Language: en Sources: [Harris Brakmic - Coding]() Topics: [Deployment](), [Kubernetes](), [Helm charts](), [Docker](), [DevOps](), [Testing](), [PostgreSQL](), [sealed secrets](), [kubectl](), [Debian]() Tags: [bash](), [build](), [coding](), [debian](), [deployment](), [devops](), [docker](), [examples](), [ha](), [helm](), [helm-charts](), [high-availability](), [iam](), [java](), [keycloak](), [kubectl](), [kubernetes](), [nginx](), [postgresql](), [sealed-secrets](), [testing]() ### AI overview A practical tutorial for automating a local Keycloak deployment designed to resemble a production environment. It uses Certificate Manager, Sealed Secrets, PostgreSQL high availability, and provides both a Bash script and Helm charts for redeployment. ### Source excerpt This article will be a practical one as I intend to showcase a fully automated setup of Keycloak for local testing. However, unlike so many examples out there, this article aims to deploy a production-level Keycloak deployment that uses a Certificate Manager, Sealed Secrets, and PostgreSQL HA (high-availability variant). The goal is to create a [...] ## New Pluralsight Course - Certified Kubernetes Administrator - Working With Your Cluster DevFeed: [New Pluralsight Course - Certified Kubernetes Administrator - Working With Your Cluster]() Original publisher: [Read original article]() Author: Anthony Nocentino Published: 2024-04-28T00:00:00Z Content type: release Language: en Sources: [Kubernetes on Anthony Nocentino's Blog]() Topics: [Kubernetes](), [kubectl](), [Command-line interface](), [Deployment]() Tags: [cli](), [containers](), [deployment](), [kubectl](), [kubernetes](), [pluralsight](), [training]() ### AI overview The post announces the availability of a Pluralsight course in the Certified Kubernetes Administrator series. The course teaches learners to use kubectl to interact with Kubernetes clusters and perform basic imperative and declarative application deployments. ### Source excerpt We're working through the major refresh of my Certified Kubernetes Administrator series at Pluralsight! The next course "Certified Kubernetes Administrator: Working With Your Cluster" in the updated series is now available on Pluralsight here! If you want to learn about the course, check out the trailer here, or if you're going to dive right in, check it out here! This course will teach you the first steps in interacting with a Kubernetes cluster using kubectl. ## New Pluralsight Course - Certified Kubernetes Administrator - Kubernetes Foundations DevFeed: [New Pluralsight Course - Certified Kubernetes Administrator - Kubernetes Foundations]() Original publisher: [Read original article]() Author: Anthony Nocentino Published: 2024-01-17T00:00:00Z Content type: release Language: en Sources: [Kubernetes on Anthony Nocentino's Blog]() Topics: [Kubernetes](), [Learning]() Tags: [api](), [architecture](), [configuration](), [container](), [containers](), [course](), [fundamentals](), [kubectl](), [kubernetes](), [kubernetes-networking](), [learning](), [pluralsight](), [training]() ### AI overview The article announces the first course in a refreshed Certified Kubernetes Administrator series on Pluralsight. Kubernetes Foundations teaches core Kubernetes concepts, architecture, API fundamentals, networking, and cluster operations for IT professionals preparing to use Kubernetes or study for the CKA exam. ### Source excerpt We're kicking off a major refresh of my Certified Kubernetes Administrator series at Pluralsight! The first course "Certified Kubernetes Administrator: Kubernetes Foundations" in the updated series is now available on Pluralsight here! If you want to learn about the course, check out the trailer here, or if you're going to dive right in, check it out here! This course will teach you the fundamentals needed to get started with Kubernetes! ## Spotlight on SIG CLI DevFeed: [Spotlight on SIG CLI]() Original publisher: [Read original article]() Author: The Kubernetes Authors Published: 2023-07-20T00:00:00Z Content type: article Language: en Sources: [Kubernetes Contributors Blog]() Topics: [Kubernetes](), [kubectl](), [Command-line interface](), [Tooling](), [interoperability](), [Cloud Native Ecosystem]() Tags: [cli](), [cloud-native-ecosystem](), [interoperability](), [kubectl](), [kubernetes](), [spotlight](), [tech-lead](), [tooling]() ### AI overview An interview with SIG CLI leaders describes the group's role in improving Kubernetes command-line tooling, including kubectl, and supporting contributors. It covers the group's goals, ongoing efforts, CLI libraries, and interoperability specifications for Kubernetes-related tooling. ### Source excerpt In the world of Kubernetes, managing containerized applications at scale requires powerful and efficient tools. The command-line interface (CLI) is an integral part of any developer or operator's toolkit, offering a convenient and flexible way to interact with a Kubernetes cluster. SIG CLI plays a crucial role in improving the Kubernetes CLI experience by focusing on the development and enhancement of kubectl, the primary command-line tool for Kubernetes. In this SIG CLI Spotlight, Arpit Agrawal, SIG ContribEx-Comms team member, talked with Katrina Verey , Tech Lead & Chair of SIG CLI,and Maciej Szulik , SIG CLI Batch Lead, about SIG CLI, current projects, challenges and how anyone can get involved. So, whether you are a seasoned Kubernetes enthusiast or just getting started, understanding the significance of SIG CLI will undoubtedly enhance your Kubernetes journey. Introductions Arpit: Could you tell us a bit about yourself, your role, and how you got involved in SIG CLI? Maciej: I'm one of the technical leads for SIG-CLI. I was working on Kubernetes in multiple areas since 2014, and in 2018 I got appointed a lead. Katrina: I've been working with Kubernetes as an end-user since 2016, but it was only in late 2019 that I discovered how well SIG CLI aligned with my experience from internal projects. I started regularly attending meetings and made a few small PRs, and by 2021 I was working more deeply with the Kustomize team specifically. Later that year, I was appointed to my current roles as subproject owner for Kustomize and KRM Functions, and as SIG CLI Tech Lead and Chair. About SIG CLI Arpit: Thank you! Could you share with us the purpose and goals of SIG CLI? Maciej: Our charter has the most detailed description, but in few words, we handle all CLI tooling that helps you manage your Kubernetes manifests and interact with your Kubernetes clusters. Arpit: I see. And how does SIG CLI work to promote best-practices for CLI development and usage in the cloud native e ## Teleport at KubeCon + CloudNativeCon Europe 2023 DevFeed: [Teleport at KubeCon + CloudNativeCon Europe 2023]() Original publisher: [Read original article]() Author: travis.rodgers@goteleport.com (Travis Rodgers) Published: 2023-03-24T00:00:00Z Content type: article Language: en Sources: [Teleport]() Topics: [Kubernetes](), [Kubernetes clusters](), [Authorization](), [Cloud Native Ecosystem](), [Open Source](), [Cloud]() Tags: [authorization](), [cloud-native](), [kubecon](), [kubecon-eu](), [kubectl](), [kubernetes](), [kubernetes-clusters](), [open-source](), [security](), [zero-trust]() ### AI overview This article previews Teleport's presence at KubeCon + CloudNativeCon Europe 2023 and presents Teleport as a way to secure Kubernetes infrastructure. It describes centralized access to Kubernetes clusters, fine-grained RBAC, identity-based authentication, VPN-independent Zero Trust access, and use of kubectl. ### Source excerpt A few reasons why you need Teleport in your Kubernetes infrastructure, and what we're up to at KubeCon EU, 2023. ## Chainguard Image now available for Kubectl DevFeed: [Chainguard Image now available for Kubectl]() Original publisher: [Read original article]() Published: 2023-02-07T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [chainguard images](), [Security](), [sigstore](), [vulnerability scanning](), [Cloud Native Ecosystem](), [Containers](), [ci](), [GitOps]() Tags: [base-images](), [chainguard](), [chainguard-images](), [ci](), [containers](), [gitops](), [kubectl](), [kubernetes](), [sbom](), [security](), [sigstore](), [slsa](), [vulnerability-scanning]() ### AI overview Chainguard announces a kubectl image in the Chainguard Images catalog. The image supports multiple architectures, including arm64, is 75% smaller than a commonly used alternative, includes SBOMs, and is signed with Sigstore. Chainguard reports zero known CVEs at publication time. ### Source excerpt Kubectl added to Chainguard Images catalog. Chainguard kubectl build is 75% smaller than the usual image used & is the only supported image with arm64 support. ## Encrypt Your Sensitive Information Before Storing It - Encrypting with Mozilla SOPS and AGE DevFeed: [Encrypt Your Sensitive Information Before Storing It - Encrypting with Mozilla SOPS and AGE]() Original publisher: [Read original article]() Author: Techno Tim Published: 2022-10-01T14:00:00Z Content type: tutorial Language: en Sources: [Techno Tim]() Topics: [Encryption](), [Git](), [.env](), [JSON](), [Kubernetes](), [YAML](), [kubectl](), [Amazon Web Services](), [Azure]() Tags: [aws](), [azure](), [encryption](), [env-file-security](), [format](), [git](), [homelab](), [kubectl](), [kubernetes](), [other](), [passwords](), [secrets](), [tokens]() ### AI overview A tutorial on encrypting secrets before committing them to Git repositories using Mozilla SOPS and age. It covers supported file formats, key creation, encryption and decryption workflows, Kubernetes secrets, environment files, VS Code integration, and Flux-based GitOps workflows. ### Source excerpt Committing secrets to your Git Repo can expose information like passwords, access tokens, and other types of sensitive information.Some might think that committing secrets to a private Git Repo is OK, but I am here to tell you it's not.If you're going to commit secrets to a git repo, private or public, you should encrypt them first using Mozilla SOPS (Secret Operations) and AGE.SOPS is an edito... [Next page]()