Tag
AWS announced 10 external OIDC identity providers per EKS cluster on 24 August 2026 at no extra charge. The user guide adds a Kubernetes 1.32 floor and a 12 KB ceiling the announcement never mentions.
Manu Shukla 
Microsoft's 24 August 2026 GA note says the eBPF host routing rollout respects existing connections. The enable page it links says the opposite and pins a Kubernetes version that died in July 2026.
Manu Shukla 
One call can now terminate 100 instances. AWS pitches it at container orchestrators - the workload whose main safety control, instance scale-in protection, explicitly does not apply to this API.
Manu Shukla 
The 21 August 2026 AWS announcement names custom health checks, UI banners and watch/compare tuning. The EKS user guide lists exactly one supported argocd-cm field, and says unsupported keys are ignored without an error.
Manu Shukla 
Amazon EKS clusters built since 2018 carry a 10-year certificate authority. AWS now appends a successor 2 years out and activates it 6 months before expiry, ready or not.
Manu Shukla 
Amazon EKS now lets you tune the scheduler, controller manager and API server. Four parameters shipped on 12 August 2026, and the headline autoscaling one needs a control plane tier costing $1.65 an hour.
Manu Shukla 
Amazon EKS charges $0.60 per cluster hour once a Kubernetes version leaves standard support, six times the $0.10 base rate. That number, not a job title, is what a DevOps hire is really being asked to prevent.
Manu Shukla 
AWS and Google now charge identical extended-support penalties, EKS turns it on by default and will not let you turn it off once it starts, and Mumbai egress runs up to 60% above US East. The numbers that decide a 2026
Manu Shukla 
Buying DevOps services in 2026 is mostly a decision about who owns the upgrade treadmill. Kubernetes ships a minor version every four months with 14 months of support, and AWS, Google and Microsoft all charge
Manu Shukla 
CNCF's Q1 2026 Technology Radar places Backstage, Helm and kro in Adopt, and just 28% of surveyed organisations run a dedicated platform team. Here is how to build an internal developer platform that engineers use
Manu Shukla 
Kubernetes v1.36 landed on 22 April 2026 with 70 enhancements. Three changes will actually break production clusters, one widely repeated claim about IPVS is wrong, and EKS extended support costs 6x standard. Here is
Manu Shukla 
GitHub resumes minimum version enforcement for self-hosted runners on 25 September 2026, with brownouts from 24 August. How to inventory a fleet, fix each runner type, and avoid the 30-day trap.
Manu Shukla 
CPU-based autoscaling scales GPU inference too late. A 2026 config guide to HPA, KEDA, external metrics and Karpenter, with YAML for queue-depth and scale-to-zero scaling of LLM inference on Kubernetes.
Manu Shukla 
Google Cloud's GKE AI security blueprint (16 July 2026) sets a 3-layer, 3-phase model for securing AI and agent workloads on Kubernetes: Confidential Nodes, Model Armor, gVisor sandboxing and org-level policy.
Manu Shukla 
CloudNativePG, KubeBlocks, and Crunchy PGO all run production Postgres on Kubernetes, but they make different bets on HA, backups, and scope. Here is how they compare in 2026, with real config, and when a managed
Manu Shukla 
CloudNativePG 1.30, released July 6, 2026, adds a DatabaseRole CRD for GitOps-friendly roles, a Lease-based primary election for safer failover, and three security fixes. Here is what changed, the config that matters
Manu Shukla 
AI agents are long-running, stateful and GPU-hungry, and standard Deployments fight them. Here is how Agent Sandbox, warm pools and Kubernetes DRA change the design in 2026, with configs and comparison tables.
Manu Shukla 
Amazon EKS 1.33 drops out of standard support on 29 July 2026 and billing jumps from $0.10 to $0.60 per cluster hour that same day. Here is the upgrade path to 1.36 and every breaking change between.
Manu Shukla 
Dynamic Resource Allocation is GA in Kubernetes v1.35, but NVIDIA's upstream driver still ships its GPU kubelet plugin disabled by default. Here is what actually works today, with manifests.
Manu Shukla 
Kubernetes 1.35 is the last version to support containerd 1.x; from 1.36 containerd 2.0 is the floor. Here is what breaks in your node config, how to find at-risk nodes, and how GKE, EKS and AKS differ.
Manu Shukla 
Microsoft shipped AKS on bare metal to public preview on 2 June 2026. The validated hardware list runs from a $2,762 rugged mini PC to an ASUS NUC, and nothing on it trains a model. Here is what the feature actually
Manu Shukla 
Ingress-NGINX reached end of life in March 2026, and about half of cloud native environments ran it. A tested migration path to Gateway API using ingress2gateway 1.0, including what it cannot translate.
Manu Shukla 
Ingress NGINX maintenance ended in March 2026: no releases, no bugfixes, no security updates. ingress2gateway v1.1.0 maps 34 ingress-nginx annotations to Gateway API, refuses 7 more, and there are two NGINX providers
Manu Shukla 
Kubernetes 1.35 shipped Pod Certificates at Beta and constrained impersonation at Alpha. Neither is the zero-trust mTLS upgrade the headlines promised, and the KEP says so directly. Here is the real scope.
Manu Shukla 