28 articles tagged
AWS announced 10 external OIDC identity providers per EKS cluster on 24 August 2026 at no extra charge. The user guide adds a Kubernetes 1.32 floor and a 12 KB ceiling the announcement never mentions.
Microsoft's 24 August 2026 GA note says the eBPF host routing rollout respects existing connections. The enable page it links says the opposite and pins a Kubernetes version that died in July 2026.
One call can now terminate 100 instances. AWS pitches it at container orchestrators - the workload whose main safety control, instance scale-in protection, explicitly does not apply to this API.
The 21 August 2026 AWS announcement names custom health checks, UI banners and watch/compare tuning. The EKS user guide lists exactly one supported argocd-cm field, and says unsupported keys are ignored without an error.
Amazon EKS clusters built since 2018 carry a 10-year certificate authority. AWS now appends a successor 2 years out and activates it 6 months before expiry, ready or not.
Amazon EKS now lets you tune the scheduler, controller manager and API server. Four parameters shipped on 12 August 2026, and the headline autoscaling one needs a control plane tier costing $1.65 an hour.
Amazon EKS charges $0.60 per cluster hour once a Kubernetes version leaves standard support, six times the $0.10 base rate. That number, not a job title, is what a DevOps hire is really being asked to prevent.
AWS and Google now charge identical extended-support penalties, EKS turns it on by default and will not let you turn it off once it starts, and Mumbai egress runs up to 60% above US East. The numbers that decide a 2026
Buying DevOps services in 2026 is mostly a decision about who owns the upgrade treadmill. Kubernetes ships a minor version every four months with 14 months of support, and AWS, Google and Microsoft all charge
CNCF's Q1 2026 Technology Radar places Backstage, Helm and kro in Adopt, and just 28% of surveyed organisations run a dedicated platform team. Here is how to build an internal developer platform that engineers use
Kubernetes v1.36 landed on 22 April 2026 with 70 enhancements. Three changes will actually break production clusters, one widely repeated claim about IPVS is wrong, and EKS extended support costs 6x standard. Here is
GitHub resumes minimum version enforcement for self-hosted runners on 25 September 2026, with brownouts from 24 August. How to inventory a fleet, fix each runner type, and avoid the 30-day trap.
CPU-based autoscaling scales GPU inference too late. A 2026 config guide to HPA, KEDA, external metrics and Karpenter, with YAML for queue-depth and scale-to-zero scaling of LLM inference on Kubernetes.
Google Cloud's GKE AI security blueprint (16 July 2026) sets a 3-layer, 3-phase model for securing AI and agent workloads on Kubernetes: Confidential Nodes, Model Armor, gVisor sandboxing and org-level policy.
CloudNativePG, KubeBlocks, and Crunchy PGO all run production Postgres on Kubernetes, but they make different bets on HA, backups, and scope. Here is how they compare in 2026, with real config, and when a managed
CloudNativePG 1.30, released July 6, 2026, adds a DatabaseRole CRD for GitOps-friendly roles, a Lease-based primary election for safer failover, and three security fixes. Here is what changed, the config that matters
AI agents are long-running, stateful and GPU-hungry, and standard Deployments fight them. Here is how Agent Sandbox, warm pools and Kubernetes DRA change the design in 2026, with configs and comparison tables.
Amazon EKS 1.33 drops out of standard support on 29 July 2026 and billing jumps from $0.10 to $0.60 per cluster hour that same day. Here is the upgrade path to 1.36 and every breaking change between.
Dynamic Resource Allocation is GA in Kubernetes v1.35, but NVIDIA's upstream driver still ships its GPU kubelet plugin disabled by default. Here is what actually works today, with manifests.
Kubernetes 1.35 is the last version to support containerd 1.x; from 1.36 containerd 2.0 is the floor. Here is what breaks in your node config, how to find at-risk nodes, and how GKE, EKS and AKS differ.
Microsoft shipped AKS on bare metal to public preview on 2 June 2026. The validated hardware list runs from a $2,762 rugged mini PC to an ASUS NUC, and nothing on it trains a model. Here is what the feature actually
Ingress-NGINX reached end of life in March 2026, and about half of cloud native environments ran it. A tested migration path to Gateway API using ingress2gateway 1.0, including what it cannot translate.
Ingress NGINX maintenance ended in March 2026: no releases, no bugfixes, no security updates. ingress2gateway v1.1.0 maps 34 ingress-nginx annotations to Gateway API, refuses 7 more, and there are two NGINX providers
Kubernetes 1.35 shipped Pod Certificates at Beta and constrained impersonation at Alpha. Neither is the zero-trust mTLS upgrade the headlines promised, and the KEP says so directly. Here is the real scope.
Kubernetes v1.35 introduced the Workload API and native gang scheduling. Four months later v1.36 replaced the API version entirely. Here is the current shape, the migration, and the GPU maths that justifies it.
In-place pod resize graduated to stable in Kubernetes v1.35, and pod-level resize reached beta in v1.36. What changed, what still forces a restart, and how to wire it to the Vertical Pod Autoscaler.
Kubernetes image volumes reached stable in v1.36 after starting as alpha in v1.31. You can mount model weights straight from an OCI registry, read-only, with no rebuild of your model-server image.
Kubernetes is the default home for AI, yet GPUs often run at 5% utilization, wasting over $100,000 a year. How a managed platform fixes GPU scheduling and cost for Indian enterprises running AI.
