16 articles tagged
CPU-based autoscaling scales GPU inference too late. A 2026 config guide to HPA, KEDA, external metrics and Karpenter, with YAML for queue-depth and scale-to-zero scaling of LLM inference on Kubernetes.
Google Cloud's GKE AI security blueprint (16 July 2026) sets a 3-layer, 3-phase model for securing AI and agent workloads on Kubernetes: Confidential Nodes, Model Armor, gVisor sandboxing and org-level policy.
CloudNativePG, KubeBlocks, and Crunchy PGO all run production Postgres on Kubernetes, but they make different bets on HA, backups, and scope. Here is how they compare in 2026, with real config, and when a managed
CloudNativePG 1.30, released July 6, 2026, adds a DatabaseRole CRD for GitOps-friendly roles, a Lease-based primary election for safer failover, and three security fixes. Here is what changed, the config that matters
AI agents are long-running, stateful and GPU-hungry, and standard Deployments fight them. Here is how Agent Sandbox, warm pools and Kubernetes DRA change the design in 2026, with configs and comparison tables.
Amazon EKS 1.33 drops out of standard support on 29 July 2026 and billing jumps from $0.10 to $0.60 per cluster hour that same day. Here is the upgrade path to 1.36 and every breaking change between.
Dynamic Resource Allocation is GA in Kubernetes v1.35, but NVIDIA's upstream driver still ships its GPU kubelet plugin disabled by default. Here is what actually works today, with manifests.
Kubernetes 1.35 is the last version to support containerd 1.x; from 1.36 containerd 2.0 is the floor. Here is what breaks in your node config, how to find at-risk nodes, and how GKE, EKS and AKS differ.
Microsoft shipped AKS on bare metal to public preview on 2 June 2026. The validated hardware list runs from a $2,762 rugged mini PC to an ASUS NUC, and nothing on it trains a model. Here is what the feature actually
Ingress-NGINX reached end of life in March 2026, and about half of cloud native environments ran it. A tested migration path to Gateway API using ingress2gateway 1.0, including what it cannot translate.
Ingress NGINX maintenance ended in March 2026: no releases, no bugfixes, no security updates. ingress2gateway v1.1.0 maps 34 ingress-nginx annotations to Gateway API, refuses 7 more, and there are two NGINX providers
Kubernetes 1.35 shipped Pod Certificates at Beta and constrained impersonation at Alpha. Neither is the zero-trust mTLS upgrade the headlines promised, and the KEP says so directly. Here is the real scope.
Kubernetes v1.35 introduced the Workload API and native gang scheduling. Four months later v1.36 replaced the API version entirely. Here is the current shape, the migration, and the GPU maths that justifies it.
In-place pod resize graduated to stable in Kubernetes v1.35, and pod-level resize reached beta in v1.36. What changed, what still forces a restart, and how to wire it to the Vertical Pod Autoscaler.
Kubernetes image volumes reached stable in v1.36 after starting as alpha in v1.31. You can mount model weights straight from an OCI registry, read-only, with no rebuild of your model-server image.
Kubernetes is the default home for AI, yet GPUs often run at 5% utilization, wasting over $100,000 a year. How a managed platform fixes GPU scheduling and cost for Indian enterprises running AI.
