ContentPosts from @kaptain..
Link
@kaptain shared a link, 1 month, 2 weeks ago
FAUN.dev()

The State of Java on Kubernetes 2026: Why Defaults are Killing Your Performance

Akamas just dropped fresh numbers: over60% of Java apps running on Kubernetesstick with default JVM settings. That means sluggish memory use, GC thrash, and CPUs getting choked out. Even with "container-friendly" Java builds out there, most teams still skip setting GC types or heap sizes. Kubernetes.. read more  

The State of Java on Kubernetes 2026: Why Defaults are Killing Your Performance
Link
@kaptain shared a link, 1 month, 2 weeks ago
FAUN.dev()

Zero-Downtime Ingress Controller Migration in Kubernetes

Ingress-nginxis heading for the exits - end-of-life drops March 2026. That puts Kubernetes operators on the hook to swap in a new ingress controller. The migration path? Run both old and new in parallel. Use DNS cutover. Point explicitly with Ingress classes. Done right, the switchover hits zero dow.. read more  

Zero-Downtime Ingress Controller Migration in Kubernetes
Link
@kaptain shared a link, 1 month, 2 weeks ago
FAUN.dev()

Migrating from Slurm to Kubernetes

SkyPilot drops a clean interface that blendsSlurmwithKubernetes. AI/ML teams get to keep their Slurm-style comforts - job scripts, gang scheduling, GPU guarantees, interactive workflows - but pick up Kubernetes perks like container isolation and rich ecosystem hooks. It handles the messy bits: pods,.. read more  

Migrating from Slurm to Kubernetes
Link
@kaptain shared a link, 1 month, 2 weeks ago
FAUN.dev()

LLMs on Kubernetes: Same Cluster, Different Threat Model

Running LLMs on Kubernetes opens up a new can of worms - stuff infra hardening won’t catch. You need a policy-smart gateway to vet inputs, lock down tool use, and whitelist models. No shortcuts. This post drops a reference gateway build usingmirrord(for fast, in-cluster tinkering) andCloudsmith(to t.. read more  

LLMs on Kubernetes: Same Cluster, Different Threat Model
Link
@kaptain shared a link, 1 month, 2 weeks ago
FAUN.dev()

How GKE Inference Gateway improved latency for Vertex AI

Vertex AI now plays nice withGKE Inference Gateway, hooking into the Kubernetes Gateway API to manage serious generative AI workloads. What’s new:load-awareandcontent-aware routing. It pulls from Prometheus metrics and leverages KV cache context to keep latency low and throughput high - exactly what.. read more  

How GKE Inference Gateway improved latency for Vertex AI
Link
@kaptain shared a link, 1 month, 2 weeks ago
FAUN.dev()

Why Kubernetes is retiring Ingress NGINX

The Kubernetes Steering Committee is pulling the plug onIngress NGINX- official support ends March 2026. No more updates. No security patches. Gone. Why? It's been coasting on fumes. One or two part-time maintainers couldn't keep up. The tech debt piled up. Now it's a security liability. What's next.. read more  

Why Kubernetes is retiring Ingress NGINX
Link
@kaptain shared a link, 1 month, 2 weeks ago
FAUN.dev()

CVE-2026-22039: Kyverno Authorization Bypass

Kyverno - a CNCF policy engine for Kubernetes - just dropped a critical one:CVE-2026-22039. It lets limited-access users jump namespaces by hijacking Kyverno'scluster-wide ServiceAccountthrough crafty use of policy context variable substitution. Think privilege escalation without breaking a sweat. I.. read more  

CVE-2026-22039: Kyverno Authorization Bypass
Link
@kaptain shared a link, 1 month, 2 weeks ago
FAUN.dev()

How Kubernetes Learned to Resize Pods Without Restarting Them

Kubernetes v1.35 introduces in-place Pod resizing, allowing dynamic adjustments to CPU and memory limits without restarting containers. This feature addresses the operational gap of vertical scaling in Kubernetes by maintaining the same Pod UID and workload identity during resizing. With this breakt.. read more  

How Kubernetes Learned to Resize Pods Without Restarting Them
Link
@kaptain shared a link, 1 month, 2 weeks ago
FAUN.dev()

Introducing Node Readiness Controller

Kubernetes just dropped theNode Readiness Controller- a smarter way to track node health. It slaps taints on nodes based on custom signals, not just the plain old "Ready" status. The goal? Safer pod scheduling that actually reflects what’s going on under the hood. It's powered by theNodeReadinessRul.. read more  

Link
@kaptain shared a link, 1 month, 3 weeks ago
FAUN.dev()

Experimenting with Gateway API using kind

A new guide shows how to runGateway APIlocally withkindandcloud-provider-kind. It spins up a one-node Kubernetes cluster in Docker - complete with LoadBalancer Services and a Gateway API controller. Cloud vibes, zero cloud bill. Fire it up to deploy demo apps, test routing, or poke around with CRD e.. read more