برچسب
۳۶ مقاله
Andrew Martin discusses why AI security is fundamentally tied to Kubernetes security. He shares insights into the evolving AI threat landscape, covering non deterministic agent behavior, GPU supply chain vulnerabilities, shared compute risks, and practical defense strategies from prompt firewalling to agentic…
How we detect failing GPUs and network fabric, remediate machines automatically, and let long running jobs survive hardware loss. Authors: Nick Rutigliano , Argha C , Samartha Chandrashekar Open Netflix, and the home screen is assembled for you: which rows appear, the order they appear in, the titles within them, and…
You submit a Kubernetes Job and wait for its Pods to appear. A minute passes. Then another. The Job is still suspended, there are no application logs, and there may not even be a Pod to inspect. In a cluster managed by Kueue , this can be completely normal. Kueue may still be deciding whether the Job can use the…
PlanetScale Postgres and Neki databases can now be deployed on Microsoft Azure
Lakebase Search is the search primitive of the Neon backend. One of the best things about it is that it ranks keyword results with BM25. That said, BM25 can only score the terms it's given.
In Linux, cgroups (control groups) are a kernel feature used for managing system resources. Kubernetes uses cgroups to allocate resources like CPU and memory to containers, ensuring that applications run smoothly without interfering with each other. With the release of Kubernetes v1.31, support for v1 cgroup…
Memory is often the first hard limit a Kubernetes cluster hits. Nodes run out of RAM long before they run out of CPU, and the new wave of agentic AI workloads makes this worse. These workloads demand large memory footprints to start up and run untrusted code, then sit idle waiting for the next prompt. That idle but…
As Kubernetes adoption has grown, the conversation has shifted beyond running containers to managing increasingly complex application lifecycles. Modern platforms support stateless web services, stateful databases, batch processing, AI workloads, and platform services. At the same time, they must remain reliable…
Kubernetes v1.37 promotes the PersistentVolumeClaimUnusedSinceTime feature gate to Beta (enabled by default). With this feature, the PersistentVolumeClaim (PVC) protection controller adds an Unused condition to each PVC, telling you whether any running pod currently references it — no custom tooling or cross…
Kubernetes v1.37 brings important storage security features: emptyDir permission modes and bind mount options. They help application programmers and security professionals implement rigorous security policies, for example, prohibiting deletion of files across containers or execution of arbitrary binaries from…
With the release of Kubernetes v1.37, the Pod Level Resource Managers feature has graduated to Beta status (disabled by default)! First introduced as an Alpha feature in Kubernetes v1.36 , this enhancement builds on Pod Level Resources by equipping Kubelet's Topology Manager, CPU Manager, and Memory Manager to use…
Memory QoS has graduated to Beta in Kubernetes v1.37 and is now enabled by default. On Linux nodes running cgroup v2, the feature uses the memory controller to give the kernel better guidance on how to treat container memory. It was first introduced as Alpha in v1.22, and expanded in v1.36 with tiered memory…
Changed Block Tracking (CBT) support for CSI drivers shipped as Alpha in September 2025. With the March 2026 v1.0.0 release of the external snapshot metadata project, the feature moved to Beta . If you aren't yet familiar with changed block tracking for storage in Kubernetes, the Alpha announcement covers the…
I'm excited to announce that native histogram support for Kubernetes metrics is graduating to Beta and is enabled by default in Kubernetes v1.37! Native histograms (previously introduced as Alpha in Kubernetes v1.36 under KEP 5808 ) bring high resolution, low cardinality observability to Kubernetes metrics. By…
In Kubernetes, resource allocation has historically been a static decision made during a Pod's initial scheduling and placement. With the graduation of the core in Place Pod resize feature to General Availability in v1.35, application developers and cluster operators gained the powerful ability to dynamically adjust…
Kubernetes has many ways to describe what is happening on a Node. Readiness, taints, Pod state, labels, annotations, and provider specific APIs each expose part of the picture. What has been missing is a shared, Kubernetes owned way to say that a Node is draining , undergoing maintenance, or undergoing Graceful Node…
Faster cross cluster connections, fewer IPv6 dead ends, less certificate churn.
Explore how and why Uber redesigned its Kubernetes® scaling control plane to coordinate multiple orchestrators, improve failover efficiency, and stay reliable at scale.
AI/ML and complex batch workloads continue to push the boundaries of Kubernetes scheduling. Following the foundational workload centric enhancements introduced in previous releases, Kubernetes v1.37 delivers the next major milestone in the Workload Aware Scheduling (WAS) journey. In this release, the core Workload…
Kubernetes v1.37 promotes the KubeletInUserNamespace feature gate to beta. With this feature enabled, all of the node components (kubelet, CRI and OCI runtimes, CNI plugins, and kube proxy) can run as a non root user on the host, using a Linux user namespace . This technique is also known as rootless mode . The work…
