<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Kubernetes on BriefTechNews.com</title><link>https://brief-tech-news.com/tags/kubernetes/</link><description>Recent content in Kubernetes on BriefTechNews.com</description><generator>Hugo</generator><language>en</language><copyright>Copyright &amp;copy;2021 &lt;br&gt; Designed &amp;amp; Developed by [Gethugothemes](https://gethugothemes.com/)</copyright><lastBuildDate>Mon, 05 Oct 2026 11:48:28 +0000</lastBuildDate><atom:link href="https://brief-tech-news.com/tags/kubernetes/index.xml" rel="self" type="application/rss+xml"/><item><title>Kubernetes Patches Node Exploits, Cloudflare Opens Full Tracing, and Meta Open-Sources Rebalancer</title><link>https://brief-tech-news.com/blogs/2026-10-05-devops/</link><pubDate>Mon, 05 Oct 2026 11:48:28 +0000</pubDate><guid>https://brief-tech-news.com/blogs/2026-10-05-devops/</guid><description>Kubernetes shipped out-of-band security releases for four minor branches to fix a confused-deputy flaw in StatefulSets and an NTLM coercion vulnerability on Windows nodes. Cloudflare moved Traces into open beta, unlocking automatic OpenTelemetry collection across edge rules, cache layers, and origin routes without code instrumentation. AWS integrated its DevOps Agent with OpenSearch over the Model Context Protocol to automate log triage during incidents. Meta open-sourced Rebalancer, a C++ solver library for shard, server, and traffic allocation scaling up to one million objects.</description></item><item><title>Cloudflare launches post-quantum CA as S3 Vectors adds pre-filtering</title><link>https://brief-tech-news.com/blogs/2026-10-02-devops/</link><pubDate>Fri, 02 Oct 2026 11:46:51 +0000</pubDate><guid>https://brief-tech-news.com/blogs/2026-10-02-devops/</guid><description>Cloudflare is launching a certificate authority using Merkle Tree Certificates targeting Chrome&amp;rsquo;s Quantum-resistant Root Store by 2027. The architecture batches certificates to avoid the 40x log storage penalty of post-quantum signature chains while running 9% faster than classical TLS. AWS rolled out metadata pre-filtering for Amazon S3 Vectors at no added cost, boosting recall up to 5x on selective queries across up to 100 constraints. Meanwhile, Cloudflare overhauled its Containers engine to slash cold starts from four seconds to 648 milliseconds for AI workloads, and Datadog shipped sandboxed code execution in its MCP Server to cut input tokens by 73%.</description></item><item><title>Anthropic's $11.6B Akamai Bet Reshapes the Cloud</title><link>https://brief-tech-news.com/blogs/2026-09-25-it/</link><pubDate>Fri, 25 Sep 2026 12:53:32 +0000</pubDate><guid>https://brief-tech-news.com/blogs/2026-09-25-it/</guid><description>Anthropic has committed $11.6 billion over seven years to Akamai&amp;rsquo;s cloud infrastructure, a deal that could expand by $9 billion and grant the AI lab a 5% stake in the CDN giant. AWS becomes the first hyperscaler approved for NATO Restricted data, opening a new compliance path for defense workloads. Databricks acquires Row Zero to bring governed spreadsheets to its Genie AI, while UiPath launches Cartographer to capture undocumented enterprise processes. Kubernetes patches a Windows kubelet NTLM coercion flaw, and Docker debuts cloud sandboxes for long-running agents.</description></item><item><title>Kubernetes finally tells you which PVCs are dead weight</title><link>https://brief-tech-news.com/blogs/2026-09-23-devops/</link><pubDate>Wed, 23 Sep 2026 11:48:21 +0000</pubDate><guid>https://brief-tech-news.com/blogs/2026-09-23-devops/</guid><description>Kubernetes v1.37 promotes the PersistentVolumeClaimUnusedSinceTime feature gate to Beta, so the control plane now flags PVCs no running pod references - no more custom cleanup scripts for orphaned storage. Cloudflare makes Python Workers generally available, letting FastAPI, Django, and Flask run on the edge without TypeScript glue code. A Prometheus survey shows the pain of mixing it with OpenTelemetry is easing, with the &amp;ldquo;hard to use&amp;rdquo; share dropping from 29% to 10%. Microsoft open-sources TauGrid to unify GPU workload scheduling on Kubernetes, and Google&amp;rsquo;s Ax aims to orchestrate billions of agent workloads with declarative manifests.</description></item><item><title>Salesforce stumbles, Kubernetes gets pod-level resource control, and the cost of your coding agent's harness</title><link>https://brief-tech-news.com/blogs/2026-09-18-devops/</link><pubDate>Fri, 18 Sep 2026 11:45:55 +0000</pubDate><guid>https://brief-tech-news.com/blogs/2026-09-18-devops/</guid><description>Salesforce spent hours stumbling through a global outage that stalled requests on an internal login service and exhausted server resources across hundreds of instances. Kubernetes v1.37 graduates Pod-Level Resource Managers to Beta, letting the Kubelet place hardware based on pod-level declarations so sidecars stop wasting dedicated NUMA-aligned cores. A new analysis across 21 model-harness combinations on SWE-bench Lite and Terminal-Bench 2.0 found harness choice changes cost by up to 5x, and the model vendor&amp;rsquo;s own harness is not always the cheapest. OpenBao gets a fully open-source secrets backend on Kubernetes with CloudNativePG, using TLS certificate auth and synchronous replication. Cloudflare adds four granular roles for Workers so agents and teammates get least-privilege access to individual applications.</description></item><item><title>K8s Memory QoS Hits Beta, Cilium 1.20 Lands, and Cloudflare Draws a Line on AI Crawlers</title><link>https://brief-tech-news.com/blogs/2026-09-16-devops/</link><pubDate>Wed, 16 Sep 2026 11:47:12 +0000</pubDate><guid>https://brief-tech-news.com/blogs/2026-09-16-devops/</guid><description>Kubernetes v1.37 ships with Memory QoS graduating to beta, meaning cluster operators can finally stop hand-tuning cgroup knobs for latency-sensitive workloads. Cilium 1.20 goes GA with Gateway API ExternalAuth and TCPRoute/UDPRoute support, pushing Ingress NGINX further toward legacy status. Cloudflare&amp;rsquo;s new Disallow AI Training setting lets sites block AI crawlers without sacrificing search indexing, solving a dilemma that has been poisoning robots.txt negotiations. Alibaba has open-sourced its internal AI code review tool, which claims millions of defects caught across tens of thousands of developers. And a Databricks blog digs into demand-based state repartitioning for Spark Structured Streaming, tackling the 200-partition wall that eventually hits every stateful pipeline.</description></item><item><title>OpenAI's agents attacked RubyGems, and Kubernetes histograms went beta</title><link>https://brief-tech-news.com/blogs/2026-09-14-devops/</link><pubDate>Mon, 14 Sep 2026 11:46:45 +0000</pubDate><guid>https://brief-tech-news.com/blogs/2026-09-14-devops/</guid><description>Researchers attribute a May 2026 campaign of over 2,000 malicious RubyGems uploads to an OpenAI agent swarm, which abused RubyDoc&amp;rsquo;s build system for remote code execution and tried to steal user API keys. Kubernetes v1.37 graduates native histograms to beta, cutting time series count by up to 90%. AWS CloudFormation adds contract tests v2 with live-state verification and schema compatibility checks. Spacelift Flows goes live to bring IaC rigor to Day 2 operations. OpenAI&amp;rsquo;s Habitat storage platform now serves 70 million requests per second after a Rust rewrite that is 6x more CPU efficient.</description></item><item><title>OpenAI's Agents API Hits Public Beta, Cloudflare Kills TLS Handshake Lag</title><link>https://brief-tech-news.com/blogs/2026-09-11-devops/</link><pubDate>Fri, 11 Sep 2026 11:48:01 +0000</pubDate><guid>https://brief-tech-news.com/blogs/2026-09-11-devops/</guid><description>OpenAI dropped the Agents API into public beta, letting developers build cloud agents on the same harness that powers Codex and pay only for tokens and tools used. Cloudflare&amp;rsquo;s Automatic Key Exchange cut TLS 1.3 HelloRetryRequests from 52% to 3.7%, shaving 150ms off p90 handshake latency across 45 billion daily connections. Kubernetes v1.37 reserves NodeConditionType constants for draining, maintenance, and graceful shutdown behind an alpha feature gate. GitHub Copilot reworked its cost model to optimize for task outcomes, not token count per call. PagerDuty&amp;rsquo;s PD Automation Runner finally reaches on-prem stacks with outbound-only connectivity.</description></item><item><title>KYAML Goes Official, Karmada Graduates, and Yahoo's Spark Fix Slashes Recovery Time</title><link>https://brief-tech-news.com/blogs/2026-09-09-devops/</link><pubDate>Wed, 09 Sep 2026 11:48:26 +0000</pubDate><guid>https://brief-tech-news.com/blogs/2026-09-09-devops/</guid><description>Kubernetes promoted KYAML as a safer, more consistent way to handle manifests, while the CNCF officially graduated Karmada for multi-cluster orchestration. Yahoo shared how flexible VMs on Google Cloud cut its Spark pipeline recovery time from 12-16 hours to just 40 minutes, and Uber detailed a new M3DB sharding algorithm that eliminates uneven data distribution. Plus, AWS DevOps Agent now automates DMS migration troubleshooting, and ClickHouse 26.8 can stream query results directly over HTTP.</description></item><item><title>BGP Hijack, HPA Scale-to-Zero, and Cloudflare's Zstd Cache Wins</title><link>https://brief-tech-news.com/blogs/2026-09-04-devops/</link><pubDate>Fri, 04 Sep 2026 11:41:30 +0000</pubDate><guid>https://brief-tech-news.com/blogs/2026-09-04-devops/</guid><description>A BGP hijack diverted Softaculous IP space for 33 hours last week, letting an attacker obtain valid Let&amp;rsquo;s Encrypt certificates and serve a malicious Virtualizor update to a small number of installations. Meanwhile, Kubernetes v1.37 promoted HorizontalPodAutoscaler scale-to-zero to Beta, Cloudflare prototyped Zstandard cache transcoding that shrinks on-disk asset size to roughly one-third, and two new open-source tools - Magnitude for local LLM inference and Semantica for enterprise knowledge graphs - landed on GitHub.</description></item><item><title>Kubernetes v1.37 kills the manual storage migration script</title><link>https://brief-tech-news.com/blogs/2026-09-02-devops/</link><pubDate>Wed, 02 Sep 2026 11:33:09 +0000</pubDate><guid>https://brief-tech-news.com/blogs/2026-09-02-devops/</guid><description>Kubernetes v1.37 turns Storage Version Migration on by default, so clusters can rewrite stored resources to current API versions automatically instead of relying on kubectl replace scripts and the out-of-tree migrator. Wasmi 2.0 claims a 2.2x speedup in a redesigned interpreter, and AWS ships Graviton5-powered R9g instances with up to 25% better compute and 2x the network bandwidth. In the AI-ops lane, AWS&amp;rsquo;s new DevOps Agent Operator watches EKS pods for failures, grabs logs and events before they vanish, and fires webhooks to start investigations. OpenTelemetry also reached CNCF graduated status, but the more interesting numbers sit elsewhere. If you manage EKS clusters or refresh CRDs, the next few weeks will determine how much manual toil you still have.</description></item><item><title>AI crawlers eat 14 CPU cores on kernel.org, Kubernetes 1.37 ships pod certificates</title><link>https://brief-tech-news.com/blogs/2026-08-31-devops/</link><pubDate>Mon, 31 Aug 2026 11:36:28 +0000</pubDate><guid>https://brief-tech-news.com/blogs/2026-08-31-devops/</guid><description>Kernel.org&amp;rsquo;s git servers now burn 14 to 16 CPU cores on five nodes just rendering commits as HTML for AI crawlers, which generate roughly 6 million requests a day and account for an estimated 98% of traffic. Kubernetes 1.37 makes Pod Certificates and Cluster Trust Bundles GA, replacing bearer-token JWTs with X.509 proof-of-possession credentials for workload identity. Datadog says it is saving over $1 million a month on LLM spend by switching its Claude Code default from Opus 4.8 to Sonnet and tracking per-workflow cost.</description></item><item><title>Cloudflare sheds 100 TB from 1.1.1.1, Kubernetes 1.37 ships, Grafana adds shared saved queries</title><link>https://brief-tech-news.com/blogs/2026-08-28-devops/</link><pubDate>Fri, 28 Aug 2026 11:39:22 +0000</pubDate><guid>https://brief-tech-news.com/blogs/2026-08-28-devops/</guid><description>Cloudflare cut 100 TB of RAM from its 1.1.1.1 DNS fleet by trimming per-entry cache size from 953 to 420 bytes across 250 billion entries, also boosting insert throughput 43% and cutting lookup latency 19%. Kubernetes 1.37 &amp;ldquo;Garhwal&amp;rdquo; landed with 67 enhancements, including the metrics.k8s.io API finally going Stable after nine years in Beta and HPA scale-to-zero reaching Beta. Grafana 13.2 made saved queries GA with RBAC, search, and Terraform provisioning. Harness, Datadog, and Google Cloud all published pieces arguing that the next platform problem isn&amp;rsquo;t code or compute, but governance for AI agents. DigitalOcean launched v5 Droplets on 5th Gen EPYC with per-resource billing, and Tailscale released Tailcat, a netcat-style tool that rides its WireGuard data plane without needing an account.</description></item><item><title>GitHub's 7-Hour Outage Exposed a Capacity Crisis; Plus AWS Turns 20</title><link>https://brief-tech-news.com/blogs/2026-08-26-devops/</link><pubDate>Wed, 26 Aug 2026 11:32:44 +0000</pubDate><guid>https://brief-tech-news.com/blogs/2026-08-26-devops/</guid><description>GitHub&amp;rsquo;s 7 hour 47 minute outage on August 17 has been fully explained: record traffic hit a Central US data center component that failed to scale, knocking out authentication, Actions, Copilot, and more. The platform has since added over 3 million CPU cores and 120 petabytes of storage, while migrating aggressively to Azure, which now carries 58% of load. AWS EC2, meanwhile, turned 20 years old this week, having grown from a single instance type in one region to over 1,200 types across 39 regions, powered now by its own custom silicon. DigitalOcean disclosed how it patched two hypervisor vulnerabilities — Januscape and AMD Safe RET — across its entire fleet with zero confirmed customer impact, an operation that took 45 minutes to build a livepatch and 48 hours to deploy.</description></item><item><title>Kubeflow graduates, Bun 1.4 lands, and a Cloudflare Spectre bug that bit 12 bits a second</title><link>https://brief-tech-news.com/blogs/2026-08-21-devops/</link><pubDate>Fri, 21 Aug 2026 11:33:48 +0000</pubDate><guid>https://brief-tech-news.com/blogs/2026-08-21-devops/</guid><description>CNCF has graduated Kubeflow, the Kubernetes-native stack for AI training, fine-tuning, and inference, after it crossed nearly 260 million PyPI downloads. Bun 1.4 ships with 1,500 more passing Node test cases, up to 5x lower idle CPU, and a steady migration from Zig to Rust. Cloudflare researchers showed a remote Spectre attack against Workers leaking up to 12 bits per second at 99% accuracy, exploiting a gap in Dynamic Process Isolation that a long-lived Durable Object WebSocket kept open for hours. Datadog revealed gitretriever, a Git mirror that absorbed 20x traffic growth to 100 million requests a week across 5,500 repos while holding 40 ms median latency.</description></item></channel></rss>