⎈ Writing my own Kubernetes, Scaling VMs in Kubernetes, API Server Proxy, CVE-2024–10220, Exploit me, baby, one more time

This newsletter is brought to you by Fairwinds — expert-led, fully managed Kubernetes that frees your engineers from infrastructure headaches and puts you on the fast track to production-grade success.

---

📚 Articles

1. 🔥 A journey of writing my own Kubernetes

2. In-House Kubernetes vs. Managed Kubernetes-as-a-Service

3. Scaling Virtual Machines in Kubernetes Clusters: Insights for Kubernetes Applications

4. Exploring the Kubernetes API Server Proxy

5. CVE-2024–10220: Attack and Defense

6. Exploit me, baby, one more time: command injection in Kubernetes Log Query

7. Calico eBPF Source IP Preservation: The Unexpected Story of High Tail Latency

8. Topology Aware Routing/Hints

9. Understanding the impact of externalTrafficPolicy on Kubernetes services

10. Continuous Promotion on Kubernetes with GitOps

11. The World of Kubernetes Cluster Topologies: A Guide to Choosing the Right Architecture

12. Managing Over 6,000 Self-Hosted Databases Without a DBA — How a Single Engineer Leverages Kubernetes

13. Gracefully Terminating Pods in Kubernetes: Handling SIGTERM

14. Managing resources in Kubernetes cluster

---

🌟 Kubernetes Best Practices in 2025

A strong cloud native foundation starts with Kubernetes done right.

Avoid pitfalls, implement smart policies, and unlock the full value of Kubernetes with these best practices.

Learn more about the Kubernetes best practices in 2025

---

📖 Tutorials

1. Chaos testing a Postgres cluster managed by cloud-nativepg

2. Discover How Fathom Transformed Infrastructure and Deployment Speed

3. Scaling under pressure: Chaos Mesh stress tests on EKS auto mode

4. Istio Gateways and VirtualServices: Locally Exposing Kubernetes Services Made Easy

5. Exploring Istio: The power of service mesh in Kubernetes

---

📺 This week on the KubeFM podcast

Performance testing Kubernetes workloads

---

💼 Kubernetes jobs

Software Engineer 💰 CA$80.7K to CA$113.1K a year · 🌎 remote from Canada, the United States of America

Site Reliability Engineer 💰 $120K to $170K a year · 🏢 based in the office in Hawthorne, CA, USA

Data Engineer 💰 $115K to $150K a year · 🌎 remote from the United States of America

Software Engineer 💰 $150K to $165K a year · 🌎 remote from the United States of America

Software Engineer 💰 $118K to $209.5K a year · 🌎 remote from the United States of America

👉 Discover more opportunities on Kube Careers.

---

🛠 Tools and libraries

1. 🔥 The Bare Metal Operator

2. Lazy-Pull OCI Images

3. Kubernetes History Inspector: Interactive Timeline Debugging

4. Freelens: Cross-Platform GUI for Kubernetes Cluster Management

5. Helm-mapkubeapis: Fix Deprecated APIs in Helm Releases

6. Timoni: package manager for Kubernetes

7. KubeBlocks: manage database workloads

8. LLMariner (= LLM + Mariner)

9. Sealos: Kubernetes distribution

10. Kleidi: Kubernetes KMSv2 Plugin for Secure Secret Management

11. kapi: Lightweight Kubernetes API Proxy and Audit Tool

---

📅 Upcoming Kubernetes events

🔥 Kubernetes Topics Trends 📅 May 29

Docker vs. Podman & Development of Spegel, a stateless OCI registry mirror for clusters 📅 Jun 2

🔥 Kubernetes Community Days New York 2025 📅 Jun 4

🔥 Kubernetes Community Days Czech & Slovak 2025 📅 Jun 5

🔥 Advanced Kubernetes course 📅 Jun 26

👉 You can find more events on Kube Events.

---

📢 Call for papers closing soon

🔥 Cloud Native Days Austria ⏳ closes May 31

Cloud Native Denmark 2025 ⏳ closes Jun 16

Kubernetes Community Days Porto 2025 ⏳ closes Jun 30

Kubernetes Community Days Warsaw 2025 ⏳ closes Jun 16

Kubernetes Community Days UK Edinburgh 2025 ⏳ closes Jun 9

Texas Linux Festival 2025 ⏳ closes Aug 3

Devopsdays Tel Aviv ⏳ closes Jun 15

Open Source Summit Japan 2025 ⏳ closes Aug 4

Devopsdays Dallas ⏳ closes Jun 2

👉 You can find more Call for Papers on Kube Events.

---

---

Until next time!

— Dan