Kubernetes

Kubernetes Promotes KYAML as a Safer, More Consistent Way to Work with Manifests

Kubernetes is actively promoting KYAML, a more rigorous YAML dialect, as a key step toward safer and more consistent cluster configuration. This shift encourages developers to embrace explicit, predictable manifests, minimizing common YAML errors and boosting overall reliability. KYAML offers a clear path to streamlining Kubernetes deployments and reducing operational risk. For those seeking a deeper understanding of visibility challenges in the age of AI, explore our recent piece, "The AI visibility gap: Why great brands disappear from AI answers."

AKS Looks to Make Node Disruption More Predictable with New NAP Guidance

Microsoft is enhancing the predictability of node disruptions within Azure Kubernetes Service (AKS) with new guidance focused on Node Auto-Provisioning (NAP). This initiative balances the efficiency gains of automated node consolidation with the critical need for application availability. Platform teams can now leverage this resource to proactively manage potential impacts. For those exploring the broader implications of AI in data workflows, consider our article "How to Work with AI Coding Agents" for practical insights. This move underscores Microsoft’s commitment to a future-focused, reliable Kubernetes experience.

Presentation: Enchant Your AI and APIs with eBPF Magic 🪄

Unowned AI-generated code in production presents escalating risks, demanding proactive control. Dan Finneran’s presentation, "Enchant Your AI and APIs with eBPF Magic 🪄," demonstrates a powerful solution: leveraging eBPF to intercept and govern AI API traffic within Kubernetes. Kernel-level socket hooks enable transparent prompt filtering, model swapping, and critical security restrictions—all without application code changes or container restarts. Explore how this innovative approach secures AI agents. For deeper insights into AI-driven control systems, see "Cloudflare Turns Engineering Standards Into an AI-Enforced Control System."

Microsoft Releases Aspire 13.5 With a Refreshed Dashboard and Workflow Improvements

Microsoft’s Aspire 13.5 delivers a streamlined developer experience with a refreshed dashboard and workflow enhancements. This update prioritizes usability, introducing quality-of-life features like file imports for the Interaction Service and interactive terminals directly within the dashboard. Deployment capabilities are strengthened with Kubernetes persistent volume support and cross-scope Azure references. For those seeking broader context on modern development tools, explore our recent analysis of Next.js 16.3 and its performance improvements.

Flux Mirror Uses Gitless GitOps to Keep Software Supply Chain Under Control

Maintaining a secure software supply chain is paramount, and Flux now offers a solution: Flux Mirror. This new CLI plugin, integrated within the Flux v2.9 system, mirrors container images, Helm charts, and OCI artifacts across registries based on declarative configurations. Teams can ensure Kubernetes clusters reconcile exclusively from trusted, internally managed registries, enhancing control and visibility. Discover how Flux Mirror streamlines this process, empowering greater data integrity. For deeper insights into workflow improvements, explore our coverage of Microsoft's Aspire 13.5 release.

Kubeflow Expands AI Capabilities as CNCF Graduation Nears

Netflix Adopts Cloud-Native Job Queueing System Kueue to Replace an In-House Solution

Netflix has strategically transitioned its batch workload infrastructure, adopting the open-source Kueue job queueing system to replace a legacy in-house solution. This shift demonstrates a progressive approach to data management, leveraging a robust and scalable platform that has quickly surpassed the capabilities of its predecessor. By mapping existing functionalities and benefiting from new features, Netflix has streamlined operations and optimized resource allocation. This move echoes similar efforts to enhance operational efficiency, as seen with Instacart’s recent deployment of Blueberry, an AI-powered incident response assistant.

Pods as Workers, Not Agents: Rethinking the Deployment Unit for AI Agents on Kubernetes

Running AI agents on Kubernetes often prompts a critical question: should each agent occupy its own Pod? The kagent project offers a compelling alternative, arguing that dedicating individual Pods to agents—which can be bursty, short-lived, and require human interaction—is inefficient. Agent-substrate introduces a control plane to intelligently schedule logical "Actors" onto robust, long-lived worker Pods, optimizing resource utilization. Explore this transformative approach, further detailed in Mark Silvester’s insightful piece, and consider how it redefines the deployment unit for AI agents.

I started a bring your own cloud AutoML for smaller teams

Too many valuable machine-learning models languish in notebooks due to deployment complexities. Data scientist frustrations with disconnected tools and fragmented MLOps workflows inspired the creation of #SceptreAI. This Kubernetes-native tabular AutoML and MLOps workspace streamlines the entire process—from dataset versioning and resource-aware training to drift analysis and Kubernetes serving—all within a traceable workflow. Like the recent exploration of Vault Kubernetes key management, SceptreAI aims to simplify infrastructure, empowering teams to focus on trustworthy, scalable machine learning.

HashiCorp Ships Public Beta of Vault Kubernetes Key Management

HashiCorp has released a public beta of Vault Kubernetes key management, a significant advancement for secure data handling. This KMS v2-compatible plugin allows Kubernetes API servers to delegate envelope encryption to Vault Enterprise, effectively isolating critical key encryption keys from the cluster itself. This shift strengthens security posture by establishing a separately governed trust domain. Explore this innovative approach to Kubernetes security—a topic also addressed in our recent article detailing Terraform’s new tfpolicy framework.

How is your enterprise tracking AI agent telemetry? Groundcover thinks it should never leave your cloud

The rise of AI agents is fundamentally reshaping enterprise data management, particularly how telemetry is tracked. Groundcover thinks it should never leave your cloud, offering a compelling alternative to traditional observability platforms. With $160 million in funding, the company is challenging established players like Datadog and Splunk by prioritizing customer-controlled data storage and a predictable, host-based pricing model. Explore how this approach, combined with eBPF technology, is transforming observability into infrastructure for autonomous software, as discussed further in our recent article, "Smallest.

Microsoft Three-Layer LLM Routing Architecture for AI Agents on AKS

Microsoft has introduced a robust three-layer LLM routing architecture for AI agents deployed on Azure Kubernetes Service (AKS), addressing critical challenges in agent traffic management. This reference architecture streamlines decision-making across three key areas: model selection for responses, call orchestration, and GPU replica assignment. By optimizing these elements, organizations can enhance agent performance and scalability. For those exploring custom skill integration, consider "How to Create Custom Skills in Claude," a valuable resource for maximizing LLM capabilities.

CICD / KAFKA / KUBERNETES / Interview questions (MLE) [R]

Preparing for a Machine Learning Engineer interview focused on live streaming deployments? Your friend should prioritize questions around CI/CD pipelines, Kafka for data streaming, and Kubernetes for orchestration. Expect deep dives into topics like schema management, fault tolerance, and scaling strategies within these systems. Understanding how to debug deployment issues and monitor performance in a live environment is also key. For a more detailed look at building end-to-end ML platforms, see our recent article, "Recent project I worked on: End to End Edge ML platform."

MCP just got its biggest update ever — here’s what changes for AI agents

The Model Context Protocol (MCP), the connective tissue enabling AI agents to interact with software, has undergone its most significant update yet. This sweeping architectural revision, spearheaded by the Agentic AI Foundation (AAIF), a Linux Foundation initiative, introduces a fully stateless architecture, enhanced authentication, and formalized deprecation policies. This unlocks enterprise-grade scalability, allowing organizations to leverage AI agents with greater efficiency and security – a critical step toward wider adoption.

Amazon EKS Adds Kubernetes Version Rollback Within 7 Days of an Upgrade

Amazon EKS now offers a critical safeguard: Kubernetes version rollbacks. Practitioners can revert a cluster's control plane to its previous version within seven days of an upgrade, significantly reducing the risk associated with in-place updates. This new feature provides a valuable safety net, enabling faster recovery from potentially problematic Kubernetes version changes. For deeper insight into related infrastructure resilience challenges, explore our article, "One fallen power line exposed a growing AI data center problem."

GKE Security Blueprint Joins Growing List of Cloud AI Frameworks

Google Cloud's new GKE Security Blueprint addresses a critical gap: securing AI workloads as they move from prototype to production. This blueprint outlines a three-layer approach encompassing infrastructure, model integrity, and application security, reflecting the evolving demands of AI deployment. Organizations can confidently navigate this shift by leveraging this framework to bolster their Kubernetes environments. For a deeper dive into AI efficiency gains, explore our related article, "Gemini 3.6 Flash Is Here."

Agents think in milliseconds, legacy infrastructure doesn't. LinkedIn, Walmart and Zendesk shared how they closed the gap at VB Transform 2026

Agents operate at lightning speed, but legacy infrastructure often lags behind. A key takeaway from VB Transform 2026 was clear: the real bottleneck in AI agent deployment isn't the models themselves, but rather the underlying infrastructure. LinkedIn, Walmart, and Zendesk shared their experiences navigating this challenge, highlighting the need for a shift from human-centric systems to those optimized for agentic workflows. Discover how these leaders are building for model and context independence to unlock greater productivity and innovation.

Linkerd 2.20 Delivers Smarter Traffic Management and Dramatic Efficiency Gains

Linkerd 2.20 significantly elevates Kubernetes networking with smarter traffic management and dramatic efficiency gains. This release, announced by the Linkerd community, delivers key enhancements across performance, observability, and control. As a CNCF-graduated service mesh, Linkerd remains the leading lightweight choice for Kubernetes, empowering teams to optimize application delivery. Explore the new features to discover how Linkerd 2.20 streamlines operations and unlocks greater resource utilization within your existing infrastructure.