Learn Kubernetes Weekly issue 122

Super-scaling OPA with batch queries, Auto-scaling with KEDA using RED metrics, Power of preview Deployments, Performance testing

12 Mar 2025

This newsletter is brought to you by Akamai Cloud Computing — built for real cloud portability. Choose the right technologies for each workload. Avoid lock-in with proprietary services.

Articles

1. Super-scaling Open Policy Agent with batch queries

   Nicholaos Mouzourakis

   Scaling Open Policy Agent (OPA) with batch queries improves performance but requires balancing resource allocation and logging optimization to achieve high scalability in complex systems.

2. Workloads on any cloud: designing a cloud portability strategy

   Design cloud-native workloads that stay portable across any cloud.

   Learn to avoid vendor lock-in using containerization, load balancing, modular design, and GitOps for automation

   sponsored

3. Auto-scaling with KEDA using custom RED metrics from Prometheus

   Emre Bülbül

   In this article, you'll learn how to implement auto-scaling using KEDA and custom RED metrics from Prometheus, to create a user-centric and efficient scaling solution for your cloud-native applications.

4. Building a Reliable Notification Service: Solving Duplication and Scaling Issues

   Mahmoud Yasser

   This article will teach you how to build a reliable notification service by solving duplication and scaling issues.

   The article covers event-driven architecture, challenges with Kubernetes cron jobs, and solutions using BullMQ and Redis locks.

5. The power of preview Deployments: catching bugs before they bite using Argo CD

   Rasheedat Atinuke Jamiu

   In this article, you'll learn how to use Argo CD to create temporary preview environments for development purposes on Kubernetes.

6. Performance testing Kubernetes workloads

   Stephan Schwarz

   In this article, you will learn how to optimize your Kubernetes workloads with performance testing.

   You will test pod capacity, deployment scalability, and concurrent users and gather insights with telemetry events.

Articles worth checking out:

• Improving on prem Kubernetes & making it feel like managed Kubernetes

• Threat alert: TeamTNT’s Docker gatling gun campaign

• Kubernetes: Seccomp, AppArmor, SELinux & Pod Security Standards and Admission Control

• Injecting certificates into Kubernetes workloads

• Write your next Kubernetes controller in Rust

• Overview of Kubernetes: GPU Scheduling, Device Plugin, CDI, NFD, and GPU Operator

• Image Management on Kubernetes Node

• The Bootc revolution: one build language for VMs and containers

Real cloud portability – No vendor lock-in

Migrate workloads seamlessly between clouds using open standards & open-source tech.

Optimize costs, improve interoperability, and avoid being tied to a single provider.

Build, deploy, and scale with true flexibility.

Tutorials

1. [eBook] Cloud portability: building a cloud-native architecture

   Explore cloud portability with microservices, containers, CI/CD, and service mesh alternatives like Istio, Linkerd, and Consul.

   Learn open standards for monitoring (Prometheus), registries (Harbor), and serverless (Knative)

   sponsored

2. Learn Kustomize for Kubernetes

   Josip Matijašević

   In this guide, you will learn how to use Kustomize to customize manifest files without modifying originals.

   Discover how to use transformers, patches, and generators to customize your Kubernetes resources across environments

3. Automatic testing and rollback of your GitOps with Argo Rollouts

   Jason Umiker

   In this tutorial, you will learn about Argo Rollouts, a tool for safe and reliable Kubernetes deployments.

   Discover how to use automated testing and rollback to make deployments safer and more reliable.

4. Configuring Istio Authorization Policy in Kubernetes namespaces

   Ivan Franchin

   Learn how to secure your Kubernetes cluster with Istio Authorization Policy.

   This guide shows you how to deploy a Quarkus API and restrict access to allow only the test1 namespace while denying the test2 namespace.

5. Longhorn backup and restore

   In this tutorial, you will learn how to self-host backups and restores using Longhorn, Velero, and GitOps.

Kubernetes jobs

1. • Engineering Manager with Volkswagen Group of America

   • Salary: $245K to $265K a year

   • Location: based in the office (and remote from home) in Belmont, CA, USA

   • Tech stack: Kubernetes, AWS, Typescript, Kotlin, DynamoDB

2. • Software Engineer with Influur

   • Salary: $200K to $250K a year

   • Location: remote from the United States

   • Tech stack: Kubernetes, AWS, GCP, Docker, SQL, Javascript

3. • Software Engineer with Jobgether

   • Salary: $112.5K to $157K a year

   • Location: remote from the United States

   • Tech stack: Kubernetes, AWS, Kustomize, Helm, ArgoCD, Docker, Python, SQL, GraphQL, Mongo

4. • Software Engineer with Deutsche Bank

   • Salary: $85K to $120.75K a year

   • Location: based in the office (and remote from home) in Cary, NC, USA

   • Tech stack: Kubernetes, GCP, Docker, SQL, Java, Kafka

5. • Site Reliability Engineer with Kraken

   • Salary: $110K to $176K a year

   • Location: remote from the United States

   • Tech stack: Kubernetes, AWS, On-premise, Docker, Shell, Python, Rust, Spark, Airflow, Kafka

Discover more Kubernetes jobs on Kube Careers →

Code & tools

1. Kubernetes Resource Recommender

   Kubernetes Resource Recommender is a CLI tool for optimizing resource allocation in Kubernetes clusters.

   It gathers pod usage data from Prometheus and recommends requests and limits for CPU and memory.

   This reduces costs and improves performance.

2. InterLink: pods anywhere

   InterLink aims to provide an abstraction for executing a Kubernetes pod on any remote resource capable of managing a Container execution lifecycle.

3. Kubernetes-WithOut-Kubelet

   KWOK (Kubernetes-WithOut-Kubelet) is a toolkit that enables setting up a cluster of thousands of nodes in seconds.

   Under the scene, all Nodes are simulated to behave like real ones, so the overall approach employs a pretty low resource footprint.

4. Chart-testing: linting and testing charts

   ct is a tool for testing Helm charts.

   It is meant for linting and testing pull requests and automatically detects charts changed against the target branch.

5. Liqo: multi-cluster topologies

   Liqo is an open-source project that enables dynamic and seamless Kubernetes multi-cluster topologies, supporting heterogeneous on-premise, cloud and edge infrastructures.

Other interesting projects:

• Cloud Development Kit for Kubernetes

• VolSync: replicate PVs

• Headlamp: Kubernetes web UI

• paralus/paralus

• Trivy

• Kube-vip: virtual IP and load balancer

• Kubeshark: API traffic analyzer for Kubernetes

• Goldilocks: requests and limits

• KubeVirt

• ismet55555/certified-kubernetes-administrator-notes

• Retina: observability platform

• Kube bench

• Pinniped: authentication servicer

• KFtray: port-forward management

Upcoming Kubernetes events

1. Mar

   14

   T3chFest 2025

   In-person conference organized by Universidad Carlos III de Madrid.

   • Location: Madrid, ES

   • This event requires an entrance fee

2. Mar

   15

   Kubernetes Community Days Beijing 2025

   In-person conference organized by KCD Beijing.

   • Location: Beijing, CN

   • This is a free event.

3. Mar

   18

   Devopsdays Chicago

   In-person conference organized by Devopsdays.

   • Location: Chicago, IL, USA

   • This event requires an entrance fee

   • • Use KUBE-DISCOUNT-2025 to get 20% off

4. Mar

   18

   Kubernetes topic trends: February 2025 review

   Online webinar organized by KubeFM.

   • This is a virtual event

   • This is a free event.

5. Mar

   20

   Advanced Kubernetes course

   Online workshop organized by Learnk8s.

   • This is a virtual event

   • This event requires an entrance fee

Discover more Kubernetes events on Kube Events →

Kubernetes Call for Papers

1. expired

   ContainerDays

   The Call For Paper was open until 31 March 2025 at UTC. More info →

   • Location: Hamburg, DE

   • In-person conference organized by Looevent.

   • The conference starts on the 9 September 2025.

   • Apply here

2. expired

   Kubernetes Community Days Czech & Slovak 2025

   The Call For Paper was open until 15 March 2025 at UTC. More info →

   • Location: Prague, CZ

   • In-person conference organized by KCD Czech & Slovak.

   • The conference starts on the 5 June 2025.

   • Apply here

3. expired

   Kubernetes Community Days Bengaluru 2025

   The Call For Paper was open until 26 March 2025 at UTC. More info →

   • Location: Bangalore, IN

   • In-person conference organized by KCD Bengaluru.

   • The conference starts on the 7 June 2025.

   • Apply here

4. expired

   Kubernetes Community Days Utrecht 2025

   The Call For Paper was open until 6 April 2025 at UTC. More info →

   • This is a virtual event

   • Online conference organized by KCD Utrecht.

   • The conference starts on the 3 July 2025.

   • Apply here

5. 11

   days

   Kubernetes Community Days Taipei 2025

   The Call For Paper is open until 20 April 2025 at UTC. More info →

   • Location: Taipei, TW

   • In-person conference organized by KCD Taiwan.

   • The conference starts on the 5 July 2025.

   • Apply here

6. 11

   days

   Kubernetes Community Days Sofia 2025

   The Call For Paper is open until 21 April 2025 at UTC. More info →

   • Location: Sofia, BG

   • In-person conference organized by KCD Sofia.

   • The conference starts on the 18 September 2025.

   • Apply here

7. 20

   days

   DevOps Pro Europe

   The Call For Paper is open until 30 April 2025 at UTC. More info →

   • Location: Vilnius, LT and virtual

   • Online & in-person conference organized by Data Miner.

   • The conference starts on the 20 May 2025.

   • Apply here

8. expired

   GitOpsCon Europe 2025

   The Call For Paper was open until 23 March 2025 at UTC. More info →

   • This is a virtual event

   • Online conference organized by CNCF.

   • The conference starts on the 29 April 2025.

   • Apply here

9. 31

   days

   Devopsdays Eindhoven

   The Call For Paper is open until 10 May 2025 at UTC. More info →

   • Location: Eindhoven, NL

   • In-person conference organized by Devopsdays.

   • The conference starts on the 2 October 2025.

   • Apply here

Until next time!

— Dan

Subscribe and, every Wednesday, receive the latest Kubernetes news!