Tootfinder

"Disclaimer: Der Text wurde teilweise von einem Menschen geschrieben." - https://www.vshn.ch/blog/was-ist-kubernetes-der-motor-der-digitalen-welt-einfach-erklaert/
Vielen Dank @…

Was ist Kubernetes? Der Motor der digitalen Welt einfach erklärt – VSHN AG
1. Für alle Neugierigen ohne Technik-Background – Was sind Container und was ist Kubernetes? Stell dir das weltberühmte Schweizer Logistiksystem […]

The National Research Platform: Stretched, Multi-Tenant, Scientific Kubernetes Cluster
Derek Weitzel, Ashton Graves, Sam Albin, Huijun Zhu, Frank W\"urthwein, Mahidhar Tatineni, Dmitry Mishin, John Graham, Elham E Khoda, Mohammad Firas Sada, Larry Smarr, Thomas DeFanti
https://arxiv.org/abs/2505.22864

The National Research Platform: Stretched, Multi-Tenant, Scientific Kubernetes Cluster
The National Research Platform (NRP) represents a distributed, multi-tenant Kubernetes-based cyberinfrastructure designed to facilitate collaborative scientific computing. Spanning over 75 locations in the U.S. and internationally, the NRP uniquely integrates varied computational resources, ranging from single nodes to extensive GPU and CPU clusters, to support diverse research workloads including advanced AI and machine learning tasks. It emphasizes flexibility through user-friendly interfaces…

A #visual guide on #troubleshooting #Kubernetes deployments

Inside Job: Defending Kubernetes Clusters Against Network Misconfigurations
Jacopo Bufalino, Jose Luis Martin-Navarro, Mario Di Francesco, Tuomas Aura
https://arxiv.org/abs/2506.21134

Inside Job: Defending Kubernetes Clusters Against Network Misconfigurations
Kubernetes has emerged as the de facto standard for container orchestration. Unfortunately, its increasing popularity has also made it an attractive target for malicious actors. Despite extensive research on securing Kubernetes, little attention has been paid to the impact of network configuration on the security of application deployments. This paper addresses this gap by conducting a comprehensive analysis of network misconfigurations in a Kubernetes cluster with specific reference to lateral…

Visualizing Cloud-native Applications with KubeDiagrams
Philippe Merle, Fabio Petrillo
https://arxiv.org/abs/2505.22879 https://arxiv…

Visualizing Cloud-native Applications with KubeDiagrams
Modern distributed applications increasingly rely on cloud-native platforms to abstract the complexity of deployment and scalability. As the de facto orchestration standard, Kubernetes enables this abstraction, but its declarative configuration model makes the architectural understanding difficult. Developers, operators, and architects struggle to form accurate mental models from raw manifests, Helm charts, or cluster state descriptions. We introduce KubeDiagrams, an open-source tool that trans…

Policy-Driven #CostOptimization with #OpenPolicyAgent and #Kubernetes

Conceptual conflation, in a bunch of paragraphs.
This is not how it works.
https://thenewstack.io/bare-metal-kubernetes-the-performance-advantage-is-almost-gone/
Supposed "hard" limits can as well be enforced with

Bare-Metal Kubernetes: The Performance Advantage Is Almost Gone
CIOs, platform teams, and architects today must seriously consider whether bare metal is still the right approach.

What do you suggest for pull-through container registry proxy with reliable(=persistent) cache for k8s? I know harbor, but it is too large and dependend on multi-container setup, to be just such cache.
#kubernetes #k8s

A post from the archive 📫:
Kubernetes mutating admission webhook for dotnet-monitor?
https://www.poppastring.com/blog/kubernetes-mutating-admission-webhook-for-dotnetmonitor

It's a bit of a bulky #LEGO build for now, but you can see the #RaspberryPi 3 inside it, and the actual #Kubernetes node behind it. Will merge them into one build at some po…

»June 7: Initial release – first github commit for Kubernetes«
This was June 7, 2014, so 11 years ago. For some people, in IT everything older then 10 years already counts as vintage.
Source: https://blog.risingstack.com/the-history-of-kubernetes/

The History of Kubernetes on a Timeline - RisingStack Engineering
To tell the story of how Kubernetes evolved into the great tool that we know today, we visualized the major milestones on an interactive timeline!

Resilience Evaluation of Kubernetes in Cloud-Edge Environments via Failure Injection
Zihao Chen, Mohammad Goudarzi, Adel Nadjaran Toosi
https://arxiv.org/abs/2507.16109

Resilience Evaluation of Kubernetes in Cloud-Edge Environments via Failure Injection
Kubernetes has emerged as an essential platform for deploying containerised applications across cloud and edge infrastructures. As Kubernetes gains increasing adoption for mission-critical microservices, evaluating system resilience under realistic fault conditions becomes crucial. However, systematic resilience assessments of Kubernetes in hybrid cloud-edge environments are currently limited in research. To address this gap, a novel resilience evaluation framework integrates mainstream fault i…

The overlap of people trying to self-host authoritative DNS with nsd and integrate it with kubernetes via external-dns and cert-manager is extremely low.
#selfhosted #kubernetes #dns

Sharpening Kubernetes Audit Logs with Context Awareness
Matteo Franzil, Valentino Armani, Luis Augusto Dias Knob, Domenico Siracusa
https://arxiv.org/abs/2506.16328

Sharpening Kubernetes Audit Logs with Context Awareness
Kubernetes has emerged as the de facto orchestrator of microservices, providing scalability and extensibility to a highly dynamic environment. It builds an intricate and deeply connected system that requires extensive monitoring capabilities to be properly managed. To this account, K8s natively offers audit logs, a powerful feature for tracking API interactions in the cluster. Audit logs provide a detailed and chronological record of all activities in the system. Unfortunately, K8s auditing suf…

Getting Started with #Autoscaling in #Kubernetes with #KEDA

Are you running open-source databases on Kubernetes? At Berlin Buzzwords 2025, Peter Zaitsev discussed best practices for high availability, security, backups, and disaster recovery. Discover key pitfalls to avoid and learn how Operators can simplify database management for MySQL, MongoDB, and PostgreSQL in Kubernetes environments.
Watch the full session:

#kubriX: Your Out-of-the-Box Internal Developer Platform (#IDP) for #Kubernetes

Just published v0.14.0 of helmfile-nix, a wrapper around helmfile in go to allow you to use the #nix language to manage helm releases on kubernetes rather than yaml go templating. This release adds functionality to also write ad-hoc helm charts directly in nix. https://github.com/reMarkable/helmfile-nix/releases/tag/v0.14.0 we provide binaries as well as a docker image with static nix based on alpine. You can also use it as a flake.

The Kubernetes Network Driver Model: A Composable Architecture for High-Performance Networking
Antonio Ojea
https://arxiv.org/abs/2506.23628 https://

The Kubernetes Network Driver Model: A Composable Architecture for High-Performance Networking
Traditional Kubernetes networking struggles to meet the escalating demands of AI/ML and evolving Telco infrastructure. This paper introduces Kubernetes Network Drivers (KNDs), a transformative, modular, and declarative architecture designed to overcome current imperative provisioning and API limitations. KNDs integrate network resource management into Kubernetes' core by utilizing Dynamic Resource Allocation (DRA), Node Resource Interface (NRI) improvements, and upcoming OCI Runtime Specificati…

🚀 Join us for the next #CNCF Nuremberg Meetup on July 10!
Discover how to run cloud-native workshops with Educates on Kubernetes and get an intro to Flatcar Linux—a secure, minimal OS for container workloads.
📅 July 10, 2025 | 6:00 PM CEST
📍 NETWAYS GmbH, Nürnberg
Let’s connect, learn, and network with the cloud-native community!

Breaking the Bulkhead: Demystifying Cross-Namespace Reference Vulnerabilities in Kubernetes Operators
Andong Chen, Zhaoxuan Jin, Ziyi Guo, Yan Chen
https://arxiv.org/abs/2507.03387

Breaking the Bulkhead: Demystifying Cross-Namespace Reference Vulnerabilities in Kubernetes Operators
Kubernetes Operators, automated tools designed to manage application lifecycles within Kubernetes clusters, extend the functionalities of Kubernetes, and reduce the operational burden on human engineers. While Operators significantly simplify DevOps workflows, they introduce new security risks. In particular, Kubernetes enforces namespace isolation to separate workloads and limit user access, ensuring that users can only interact with resources within their authorized namespaces. However, Kuber…

Kogaro: Stop #Kubernetes Silent Failures
https://kogaro.com/

I am not worried about AI taking over in a self-aware doom scenario because it all runs on kubernetes and the moment it tries to self-modify, it'll do something that wedges itself and it'll just stop

KIS-S: A GPU-Aware Kubernetes Inference Simulator with RL-Based Auto-Scaling
Guilin Zhang, Wulan Guo, Ziqi Tan, Qiang Guan, Hailong Jiang
https://arxiv.org/abs/2507.07932

KIS-S: A GPU-Aware Kubernetes Inference Simulator with RL-Based Auto-Scaling
Autoscaling GPU inference workloads in Kubernetes remains challenging due to the reactive and threshold-based nature of default mechanisms such as the Horizontal Pod Autoscaler (HPA), which struggle under dynamic and bursty traffic patterns and lack integration with GPU-level metrics. We present KIS-S, a unified framework that combines KISim, a GPU-aware Kubernetes Inference Simulator, with KIScaler, a Proximal Policy Optimization (PPO)-based autoscaler. KIScaler learns latency-aware and resour…

#OWASP #Kubernetes Top Ten
https://owasp.org/www-project-kubernetes-top-ten/

Can't wait for Kubernetes version 1.33.7
#leet #kubernetes #1337 #k8s

📦 Works with #Docker, #Podman, #Kubernetes & supports multi-platform image building with #OCI

It's official! I'm speaking again at the International PHP Conference in Munich! 🎉
My talks:
"Content Management in the Age of AI: A Headless Approach" - How Headless CMS and AI are shaping the future of content
"Digital Souvereignity: Where to Put My Kubernetes?" - Practical experience with K8s on European infrastructure
Also looking forward to @…

Ever wondered how Kubernetes runs on a tractor? At Berlin Buzzwords 2025, Wieneke Keller & Sebastian Lenartowicz from Aurea Imaging presented their innovative AgTech journey! Discover how they built an edge device with Python microservices and K3s for precision farming, tackling unique rural challenges.
Watch the full session: https://

Had a weird ass poweroutage earlier today. Didn't last long, but long enough to be visible on my #Kubernetes cluster power usage graph:

Implementation and Evaluation of Fast Raft for Hierarchical Consensus
Anton Melnychuk, Bryan SebaRaj
https://arxiv.org/abs/2506.17793 https://

Implementation and Evaluation of Fast Raft for Hierarchical Consensus
We present the first open-source implementation and evaluation of Fast Raft, a hierarchical consensus protocol designed for dynamic, distributed environments. Fast Raft reduces the number of message rounds needed to commit log entries compared to standard Raft by introducing a fast-track mechanism and reducing leader dependence. Our implementation uses gRPC and Kubernetes-based deployment across AWS availability zones. Experimental results demonstrate a throughput improvement and reduced commit…

Build Your Own #Kubernetes based SaaS #CloudPlatform with #Kamaji and #GitOps

ADA: Automated Moving Target Defense for AI Workloads via Ephemeral Infrastructure-Native Rotation in Kubernetes
Akram Sheriff, Ken Huang, Zsolt Nemeth, Madjid Nakhjiri
https://arxiv.org/abs/2505.23805

ADA: Automated Moving Target Defense for AI Workloads via Ephemeral Infrastructure-Native Rotation in Kubernetes
This paper introduces the Adaptive Defense Agent (ADA), an innovative Automated Moving Target Defense (AMTD) system designed to fundamentally enhance the security posture of AI workloads. ADA operates by continuously and automatically rotating these workloads at the infrastructure level, leveraging the inherent ephemerality of Kubernetes pods. This constant managed churn systematically invalidates attacker assumptions and disrupts potential kill chains by regularly destroying and respawning AI …

Phew, managed to get rid of most of the #Kubernetes metrics I don't use in #Grafana. (And stay within the free tier.) Can strip off even more, but either need to do this on #Prometheus

Microservices and Real-Time Processing in Retail IT: A Review of Open-Source Toolchains and Deployment Strategies
Aaditaa Vashisht (Department of Information Science,Engineering, RV College of Engineering, India), Rekha B S (Department of Information Science,Engineering, RV College of Engineering, India)
https://arxiv.org/abs/25…

Microservices and Real-Time Processing in Retail IT: A Review of Open-Source Toolchains and Deployment Strategies
With the rapid pace of digital transformation, the retail industry is increasingly depending on real-time, scalable, and resilient systems to manage financial transactions, analyze customer behavior, and streamline order processing. This literature review explores how modern event-driven and microservices-based architectures, particularly those leveraging Apache Kafka, Spring Boot, MongoDB, and Kubernetes are transforming retail and financial systems. By systematically reviewing academic public…

Closing the HPC-Cloud Convergence Gap: Multi-Tenant Slingshot RDMA for Kubernetes
Philipp A. Friese, Ahmed Eleliemy, Utz-Uwe Haus, Martin Schulz
https://arxiv.org/abs/2508.09663

Closing the HPC-Cloud Convergence Gap: Multi-Tenant Slingshot RDMA for Kubernetes
Converged HPC-Cloud computing is an emerging computing paradigm that aims to support increasingly complex and multi-tenant scientific workflows. These systems require reconciliation of the isolation requirements of native cloud workloads and the performance demands of HPC applications. In this context, networking hardware is a critical boundary component: it is the conduit for high-throughput, low-latency communication and enables isolation across tenants. HPE Slingshot is a high-speed network …

Frustration-Free #Kubernetes for #Spring Developers
https://www.youtube.com/watch?v=Qr9HWiM3aI

I'll be next week at @… to present a new talk about end-to-end Pull Request #testing when your target environment is #Kubernetes.
Come and let's chat!

Simplifying Root Cause Analysis in Kubernetes with StateGraph and LLM
Yong Xiang (Tsinghua University), Charley Peter Chen (Harmonic Inc), Liyi Zeng (Peng Cheng Laboratory), Wei Yin (Tsinghua University), Xin Liu (Tsinghua University), Hu Li (Unaffiliated), Wei Xu (Tsinghua University)
https://arxiv.org/abs/2506.02490

Simplifying Root Cause Analysis in Kubernetes with StateGraph and LLM
Kubernetes, a notably complex and distributed system, utilizes an array of controllers to uphold cluster management logic through state reconciliation. Nevertheless, maintaining state consistency presents significant challenges due to unexpected failures, network disruptions, and asynchronous issues, especially within dynamic cloud environments. These challenges result in operational disruptions and economic losses, underscoring the necessity for robust root cause analysis (RCA) to enhance Kube…

Enhancing Software Supply Chain Security Through STRIDE-Based Threat Modelling of CI/CD Pipelines
Sowmiya Dhandapani
https://arxiv.org/abs/2506.06478 https…

Enhancing Software Supply Chain Security Through STRIDE-Based Threat Modelling of CI/CD Pipelines
With the increasing adoption of Continuous Integration and Continuous Deployment pipelines, securing software supply chains has become a critical challenge for modern DevOps teams. This study addresses these challenges by applying a structured threat modeling approach to identify and mitigate risks throughout the CI/CD lifecycle. By modeling a representative pipeline architecture incorporating tools such as GitHub, Jenkins, Docker, and Kubernetes and applying the STRIDE framework, we systematic…

Exposing #OTelCollector in #Kubernetes with #GatewayAPI & #mTLS

Archetype-Aware Predictive Autoscaling with Uncertainty Quantification for Serverless Workloads on Kubernetes
Guilin Zhang, Srinivas Vippagunta, Raghavendra Nandagopal, Suchitra Raman, Jeff Xu, Marcus Pfeiffer, Shree Chatterjee, Ziqi Tan, Wulan Guo, Hailong Jiang
https://arxiv.org/abs/2507.05653

Archetype-Aware Predictive Autoscaling with Uncertainty Quantification for Serverless Workloads on Kubernetes
High-performance extreme computing (HPEC) platforms increasingly adopt serverless paradigms, yet face challenges in efficiently managing highly dynamic workloads while maintaining service-level objectives (SLOs). We propose **AAPA**, an archetype-aware predictive autoscaling system that leverages weak supervision to automatically classify 300\,000\,+ workload windows into four archetypes (PERIODIC, SPIKE, RAMP, STATIONARY\_NOISY) with 99.8\% accuracy. Evaluation on publicly available Azure Func…

Replaced article(s) found for cs.CR. https://arxiv.org/list/cs.CR/new
[1/2]:
- Exploiting Kubernetes' Image Pull Implementation to Deny Node Availability
Luis Augusto Dias Knob, Matteo Franzil, Domenico Siracusa

Signalling Health for Improved Kubernetes Microservice Availability
Jacob Roberts, Blair Archibald, Phil Trinder
https://arxiv.org/abs/2507.02158 https://

Signalling Health for Improved Kubernetes Microservice Availability
Microservices are often deployed and managed by a container orchestrator that can detect and fix failures to maintain the service availability critical in many applications. In Poll-based Container Monitoring (PCM), the orchestrator periodically checks container health. While a common approach, PCM requires careful tuning, may degrade service availability, and can be slow to detect container health changes. An alternative is Signal-based Container Monitoring (SCM), where the container signals t…

Energy-Optimized Scheduling for AIoT Workloads Using TOPSIS
Preethika Pradeep, Eyhab Al-Masri
https://arxiv.org/abs/2506.04902 https://

Energy-Optimized Scheduling for AIoT Workloads Using TOPSIS
AIoT workloads demand energy-efficient orchestration across cloud-edge infrastructures, but Kubernetes' default scheduler lacks multi-criteria optimization for heterogeneous environments. This paper presents GreenPod, a TOPSIS-based scheduler optimizing pod placement based on execution time, energy consumption, processing core, memory availability, and resource balance. Tested on a heterogeneous Google Kubernetes cluster, GreenPod improves energy efficiency by up to 39.1% over the default Kuber…

Distributedness based scheduling
Paritosh Ranjan, Surajit Majumder, Prodip Roy, Bhuban Padhan
https://arxiv.org/abs/2506.02581 https://

Distributedness based scheduling
Efficient utilization of computing resources in a Kubernetes cluster is often constrained by the uneven distribution of pods with similar usage patterns. This paper presents a novel scheduling strategy designed to optimize the distributedness of Kubernetes resources based on their usage magnitude and patterns across CPU, memory, network, and storage. By categorizing resource usage into labels such as "cpu high spike" or "memory medium always," and applying these to deployed pods, the system cal…

Balancing Fixed Number of Nodes Among Multiple Fixed Clusters
Paritosh Ranjan, Surajit Majumder, Prodip Roy, Bhuban Padhan
https://arxiv.org/abs/2506.08715

Balancing Fixed Number of Nodes Among Multiple Fixed Clusters
Cloud infrastructure users often allocate a fixed number of nodes to individual container clusters (e.g., Kubernetes, OpenShift), resulting in underutilization of computing resources due to asynchronous and variable workload peaks across clusters. This research proposes a novel system and method for dynamic rebalancing of a fixed total number of nodes among multiple fixed clusters based on real-time resource utilization thresholds. By introducing a Node Balancing Cluster Group (NBCG), clusters …

The current #HeatWave is fun to see how it impacts my #kubernetes #cluster #node

Melding the Serverless Control Plane with the Conventional Cluster Manager for Speed and Compatibility
Leonid Kondrashov, Lazar Cvetkovi\'c, Hancheng Wang, Boxi Zhou, Dhairya Rungta, Dmitrii Ustiugov
https://arxiv.org/abs/2505.24551

Melding the Serverless Control Plane with the Conventional Cluster Manager for Speed and Compatibility
Modern serverless applications, often interactive with highly volatile traffic, challenge system scalability, demanding control planes that deliver low latency and cost efficiency. Analysis of production traces and existing systems reveals that current control plane designs (synchronous and asynchronous), particularly when built on conventional cluster managers like Kubernetes, struggle with this balance, often wasting significant CPU and memory resources on creating underutilized or idle insta…

Stop Using the Wrong #CNI in 2025: #Flannel vs #Calico vs #Cilium