Kubernetes Recipes
1137 production-ready recipes for every K8s challenge
What's New in Cluster API v1.14.3 (Kubernetes Cluster Lifecycle Management)
Cluster API v1.14.3 patch release: KCP/etcd and owner-reference bug fixes, expanded K8s support up to v1.37, upgrade steps with clusterctl.
What's New in Gateway API v1.7.0: HTTPRoute Retries Go Stable
Gateway API v1.7.0 promotes HTTPRoute retries to Standard, adds 5 experimental GEPs, and ships breaking changes to SessionPersistence and XBackend CRDs.
What's New in Tekton Pipelines v1.18.0: Upgrade Guide for Kubernetes CI/CD
Tekton Pipelines v1.18.0 adds step onError continueAndFail, immutable controller labels, and bundle/image fixes. Upgrade steps included.
Velero v1.18.4: What's New and How to Upgrade
Velero v1.18.4 patches a backup-queue deadlock bug. Minimal changelog — upgrade steps, verification, and notes for operators.
What's New in ExternalDNS v0.24.0: Breaking Changes and Upgrade Guide
ExternalDNS v0.24.0 upgrade guide: TCPRoute v1, admission-validated CRDs, multi-namespace support, and breaking changes.
What's New in KEDA v2.21.0 - Breaking Changes and Upgrade Guide
KEDA 2.21.0 fixes CVE-2026-77524, changes Azure Pipelines and Temporal scalers, and adds new scalers. Upgrade steps included.
What's New in Metrics Server v0.9.0: Upgrade Guide for Kubernetes Operators
Metrics Server v0.9.0 brings a readiness bug fix, quieter node-scrape logging, and CVE patches. Upgrade steps and verification included.
What's New in Tekton Pipelines v1.17.1
Patch release for Tekton Pipelines v1.17.1: Go 1.27.3 CVE fix, install/upgrade commands, and image attestation verification.
K3s v1.37.1+k3s1: What's New and How to Upgrade
K3s v1.37.1+k3s1 bumps Kubernetes to 1.37.1, hardens the supervisor API, and fixes etcd snapshot restore. Upgrade steps and verification included.
What's New in Flux v2.10.0: GitOps Toolkit Upgrade Guide
Flux v2.10.0 adds object identity GA, SPIFFE mTLS, notification v1 APIs, OCIRepository charts. Covers breaking changes and upgrade steps.
What's New in K9s v0.51.0: Performance Fixes, Plugin Inputs, and OSC52 Clipboard Support
K9s v0.51.0 release notes: QPS bump to 50, metrics pagination fix, plugin input fields, PVC resize plugin, and upgrade steps.
etcd v3.7.3 for Kubernetes: What's New and How to Upgrade Safely
Patch release etcd v3.7.3 for Kubernetes' control-plane datastore: upgrade steps, backup commands, and verification for operators.
What's New in kind v0.33.0: Kubernetes 1.37 Default and Key Fixes
kind v0.33.0 defaults to Kubernetes 1.37.0 nodes, fixes Docker proxy handling and LB config persistence, plus local-path-provisioner tweaks.
What's New in minikube v1.39.0: containerd Default, Kubernetes 1.37, Traefik Addon
minikube v1.39.0 switches default runtime to containerd, adds K8s 1.36/1.37 support and a Traefik ingress addon.
External Secrets Operator helm-chart-2.14.0: What's New and Upgrade Guide
Release notes for External Secrets Operator helm-chart-2.14.0 are thin; here's how to safely check changes and upgrade via Helm.
Karpenter v1.15.1: What's New and How to Upgrade
Karpenter v1.15.1 is a chores-only cherrypick release; see what changed and how to safely upgrade from v1.14.2.
What's New in containerd v2.4.2: Security Patches and Hardening
containerd 2.4.2 patch release fixes 3 CVEs, hardens CRI log handling, seccomp, and image pulls. Upgrade steps and verification included.
Karpenter v1.14.2: What's New (Patch Release Notes & Upgrade Guide)
Karpenter v1.14.2 patch release fixes NodeRepair label sync and capacity buffer workload watching. Upgrade steps and verification included.
What's New in Envoy Gateway v1.9.2 - Upgrade Guide
Envoy Gateway v1.9.2 release notes are thin on detail; how to check the full changelog, upgrade via Helm, and verify your install.
What's New in External Secrets Operator Helm Chart 2.13.0
Release notes for ESO helm-chart-2.13.0 are thin; practical helm upgrade steps and verification for operators.
Prometheus Operator v0.94.1: What's New and Upgrade Guide
Prometheus Operator v0.94.1 fixes a ClusterRole RBAC bug affecting owner-reference finalizer updates. Upgrade steps and verification included.
Cilium v1.20.2: What's New and How to Upgrade
Cilium v1.20.2 patch release: Gateway API hostNetwork node selector plus 30+ bugfixes for IPAM, BGP, ClusterMesh, and more.
What's New in Argo CD v3.5.4: Critical Security Patch Release
Argo CD v3.5.4 fixes multiple critical CVEs in repo-server (Kustomize, Jsonnet, OCI) plus upgrade steps and verification.
What's New in Gateway API v1.6.3: Conformance Test Fixes and Build Updates
Gateway API v1.6.3 release notes summary: conformance test fixes for TCPRoute/UDPRoute, build tooling updates, and upgrade steps.
cert-manager v1.21.2: Security Patch Release Notes and Upgrade Guide
cert-manager v1.21.2 fixes ACME/Vault response-body leaks, webhook panics, and bumps Go/gRPC for security CVEs. All users should upgrade.
What's New in Kubernetes v1.37.1: Patch Release Upgrade Guide
Kubernetes v1.37.1 is a patch release with thin release notes; covers upgrade steps, verification, and where to find real changelog details.
OpenShift EgressFirewall with Helm ApplicationSet
Generate tenant-specific OVN-Kubernetes EgressFirewall objects from inventory files using Helm and OpenShift GitOps ApplicationSet.
Fix OLM ResolutionFailed in Disconnected OpenShift
Fix ConstraintsNotSatisfiable and UnhealthyCatalogSourceFound errors when an OLM Subscription references a catalog that doesn't exist in your mirrored cluster.
CVE-2026-43284 "Dirty Frag": OpenShift Privilege Escalation
Mitigate CVE-2026-43284 'Dirty Frag' kernel privilege escalation on OpenShift 4 by disabling esp4, esp6, and rxrpc kernel modules via a GitOps DaemonSet.
Mirror the AI/GPU Platform Stack for Disconnected OpenShift
Configure ImageDigestMirrorSet and ImageTagMirrorSet to mirror Run:ai, Kubeflow, MPI Operator, and Dell CSM images for air-gapped GPU platforms.
OpenShift OIDC Claims Mapping Troubleshooting
Fix OpenShift OIDC login failures caused by claims mapping mismatches and wrong issuer URLs. Debug the OAuth CR openID identityProvider config.
Fix Ray Data PyTorch CPU Thread Oversubscription
Fix GPU starvation from Ray Data CPU preprocessing on Kubernetes. Pin torch.set_num_threads(1) per worker to stop thread oversubscription.
Run DOCA Bench on OpenShift with SR-IOV and Privileged SCC
Run NVIDIA DOCA Bench as a Kubernetes Job on OpenShift with SR-IOV VF allocation, privileged SCC, and huge pages to benchmark BlueField DPU from x86 pods.
NVIDIA DOCA Bench for DPU Performance Testing on Kubernetes
Benchmark NVIDIA BlueField DPU accelerators in Kubernetes with DOCA Bench: throughput/latency modes, RDMA, compression offload, and multi-core scaling.
H200 NVL 8-GPU Topology Bandwidth Tiers for Kubernetes
Map the three bandwidth tiers of 8× H200 NVL GPU nodes—NVLink (~337 GB/s), PCIe+UPI (~50 GB/s), RoCE (~35 GB/s)—for NCCL topology-aware NUMA scheduling.
Dell PowerScale NFS Access Zones for Kubernetes AI Storage
Configure Dell PowerScale (Isilon) access zones and SmartConnect pools for Kubernetes AI storage with per-environment NFS isolation and IP pool sizing.
Automate Kubernetes Day-2 Operations with Ansible
Use Ansible to automate Kubernetes day-2 operations — apply manifests, roll out upgrades, and reconcile cluster state with the kubernetes.core collection.
Disable GDS and Enable IOMMU Passthrough on K8s GPUs
Disable GPUDirect Storage (GDS) when not needed and configure IOMMU passthrough mode for GPU and NIC device assignment. Kernel parameters, BIOS settings, VFIO
GPU Operator ClusterPolicy RDMA and GDS Configuration
Configure NVIDIA GPU Operator ClusterPolicy to disable RDMA and enable GPUDirect Storage (GDS). Control nvidia-peermem, nvidia-fs modules, driver
GPUDirect RDMA Setup and Verification on Kubernetes
Enable and verify GPUDirect RDMA for GPU-to-NIC direct data transfer on Kubernetes. Install nvidia-peermem, configure DMA-BUF, verify RDMA paths, troubleshoot
IOMMU Kernel Parameters for Kubernetes GPU Nodes
Configure IOMMU kernel parameters for optimal GPU and RDMA performance on Kubernetes. Compare intel_iommu, amd_iommu, and iommu settings, passthrough vs off vs
Kubeflow MPIJob Worker SSH Setup for GPU Training
Configure SSH daemon in Kubeflow MPIJob worker pods for multi-node GPU training. Covers SSHD setup in containers, host key generation, authorized keys from MPI
Kubernetes Topology Manager for GPU and NUMA Alignment
Configure Kubernetes Topology Manager to align CPU, GPU, and NIC allocations on the same NUMA node. Covers policies, kubelet config, and GPU performance tuning.
MPI DNS Resolution and Hostfile for Kubernetes GPU Jobs
Troubleshoot MPI hostfile DNS resolution in Kubeflow MPIJob on Kubernetes. Covers headless Service creation, subdomain configuration, DNS wait loops, FQDN
NCCL Channel Routing and Transport Path Analysis
Interpret NCCL channel logs to understand GPU communication paths on Kubernetes. Decode P2P/CUMEM, SHM/direct, NET/IB/GDRDMA transport
NCCL Debug Subsystems for GPU Network Troubleshooting
Configure NCCL_DEBUG and NCCL_DEBUG_SUBSYS for targeted logging during multi-node GPU training. Covers INIT, NET, GRAPH subsystems, log
NCCL DMABUF Enable for GPUDirect RDMA on Kubernetes
Enable NCCL DMA-BUF support for GPUDirect RDMA in Kubernetes GPU clusters. Covers NCCL_DMABUF_ENABLE=1, kernel requirements, nvidia-peermem vs dmabuf, GPU
NCCL_NET_GDR_LEVEL Environment Variable Guide
NCCL_NET_GDR_LEVEL sets GPUDirect RDMA's max PCIe distance. Compare PIX, PXB, PHB, and SYS thresholds and pick the fastest safe level.
NCCL GPUDirect RDMA Distance Levels and PIX vs SYS
Understand NCCL GPU Direct RDMA distance-based enablement. When PIX mode disables GDRDMA for distant GPU-HCA pairs (distance 9 > 4) and when SYS mode enables
NCCL Network Validation Script for OpenShift GPU Clusters
Build a comprehensive NCCL network validation script for OpenShift GPU clusters with SR-IOV. Configure NCCL_IB_GID_INDEX, NCCL_NET_GDR_LEVEL=SYS, per-rank HCA
NCCL IB HCA Selection and QPS Tuning for RoCE
Configure NCCL_IB_HCA, NCCL_IB_GID_INDEX, NCCL_IB_QPS_PER_CONNECTION, and NCCL_IB_SPLIT_DATA_ON_QPS for optimal RoCE performance on Kubernetes GPU clusters.
NCCL Network Validation Troubleshooting Checklist
Complete troubleshooting checklist for NCCL multi-node GPU bandwidth validation. Covers SR-IOV VF allocation, /dev/infiniband visibility, RoCE GID
Production NCCL Network Validator for Kubeflow MPIJob
Deploy a production-ready NCCL network validation framework using Kubeflow MPIJob on OpenShift. Complete validate_network.sh script
NCCL RoCE Validation with Kubeflow MPIJob on Kubernetes
Validate NCCL over RoCE with a Kubeflow MPIJob: launcher/worker YAML, OpenMPI vs NCCL network planes, RDMA device requests, IB logs, and expected busbw.
Shared Memory Transport for NCCL Intra-Node GPU
Configure NCCL shared memory (SHM) transport for intra-node GPU communication on Kubernetes. Covers /dev/shm sizing with emptyDir and NVLink/PCIe P2P paths.
NVIDIA GPU Topology Matrix Interpretation on Kubernetes
Read and interpret nvidia-smi topo and nvidia-device-plugin topology matrices on Kubernetes GPU nodes. Understand X, NV, SYS, NODE, PIX, PXB, PHB connection
RDMA Configuration with NVIDIA Network Operator
Deploy and configure RDMA for GPU clusters using the NVIDIA Network Operator. NicClusterPolicy setup, MLNX_OFED driver container, shared and SR-IOV RDMA device
NVLink Bridge Architecture for GPU Kubernetes Nodes
Understand NVLink Bridge logical architecture in GPU servers for Kubernetes. Dual-socket PCIe Gen5 topology, NVL4 groups, GPU-NIC-NVMe placement, PCIe switch
OpenMPI Control Plane Separation for NCCL RDMA
Configure OpenMPI to use eth0 for MPI control traffic while NCCL uses net1 SR-IOV for data. Covers btl_tcp_if_include, pml, routed direct, plm_rsh_agent SSH
OpenShift SR-IOV Network with NVIDIA IPAM for GPU Fabric
Configure SriovNetwork resources on OpenShift with nv-ipam for GPU fabric IP allocation. SR-IOV Network Operator setup, Mellanox NIC resource targeting, IPAM
Run:ai GPU Scheduling with Kubeflow MPIJob
Integrate Run:ai GPU scheduler with Kubeflow MPIJob for multi-node NCCL workloads. Covers Run:ai project namespaces, GPU quota annotations, pod group
Shared RDMA Device Plugin for Kubernetes GPU Pods
Configure the RDMA shared device plugin to allow multiple pods to share RDMA-capable NICs on Kubernetes. K8s-rdma-shared-dev-plugin setup, resource
SR-IOV Multus Network Attachment for GPU RDMA Pods
Configure Multus CNI NetworkAttachmentDefinition for SR-IOV RDMA in Kubernetes GPU workloads. Covers k8s.v1.cni.cncf.io/networks annotation, IPAM
Grafana Kubernetes Monitoring Dashboards Guide
Deploy and configure Grafana dashboards for Kubernetes monitoring including dashboard 6417 for pod metrics, dashboard 315 for cluster overview, and custom
Helm Sprig Functions Complete Reference
Complete reference for Helm Sprig template functions including cat, print, join, tostring, add1, trim, quote, default, and more. Examples and common patterns
Kubernetes Audit Logging Configuration
Configure Kubernetes audit logging: audit policy levels and rules, kube-apiserver flags, webhook backend, OpenShift audit profiles, and jq queries.
Kubernetes Blue-Green and Canary Deployment Strategies
Implement blue-green and canary deployment strategies on Kubernetes. Zero-downtime releases using Service label switching, traffic splitting, progressive
Kubernetes EnvFrom ConfigMap Environment Variables
Inject all ConfigMap keys as environment variables using envFrom in Kubernetes pods. Configure configMapRef, secretRef, prefix options, and selective key
Kubernetes Ephemeral Containers: kubectl debug Guide
Debug running and distroless pods with kubectl debug ephemeral containers: --target, --copy-to for CrashLoopBackOff, node debugging, profiles and RBAC.
Sandboxed Runtimes on k3s: gVisor and Kata with RuntimeClass
Deploy sandboxed container runtimes on k3s and Kubernetes with RuntimeClass: gVisor (runsc), Kata Containers, WASM, and alternatives. Isolate untrusted
Kubernetes HPA Custom Metrics Prometheus Adapter
Configure Kubernetes Horizontal Pod Autoscaler with custom Prometheus metrics via the Prometheus Adapter. Scale on request latency, queue depth, GPU
Kubernetes Ingress TLS Certificate with cert-manager
Automate TLS certificate management on Kubernetes with cert-manager. Let's Encrypt integration, ClusterIssuer configuration, automatic renewal, wildcard
Kubernetes Init Containers: Patterns and Examples
Kubernetes init containers explained with YAML: wait for dependencies, migrations, git clone, permissions, certs, resource rules, sidecars and debugging.
Kubernetes Kind Local Development Cluster
Create local Kubernetes clusters with kind (Kubernetes in Docker). Multi-node clusters, ingress setup, local registry, port mapping, volume mounts, and CI/CD
Kubernetes Labels vs Annotations: Best Practices
Kubernetes labels vs annotations: when to use each, recommended app.kubernetes.io labels, naming rules, common annotations, and selector pitfalls.
Kubernetes Rate Limiting with Gateway API
Implement rate limiting for Kubernetes services using Gateway API, Istio, Kong, NGINX, and Envoy. Protect APIs from abuse
Kubernetes Service Types LoadBalancer ClusterIP NodePort
Understand Kubernetes Service types: ClusterIP, NodePort, LoadBalancer, and ExternalName. When to use each type, configuration examples, and traffic routing
StatefulSet Headless Service: serviceName and Pod DNS
Why a StatefulSet needs a headless Service: serviceName, per-pod DNS records, SRV lookups, publishNotReadyAddresses, and fixing pod names that won't resolve.
Kubernetes Vertical Pod Autoscaler (VPA) Guide
Install and configure Kubernetes VPA: Off, Initial, Recreate and in-place modes, min/max bounds, reading recommendations, and VPA with HPA.
Kubernetes Linkerd Service Mesh mTLS Guide
Deploy Linkerd service mesh on Kubernetes for automatic mTLS, traffic observability, and reliability features. Zero-config encryption, per-route
NCCL Environment Variables Complete Reference
NCCL environment variables reference for Kubernetes: NCCL_SOCKET_IFNAME, NCCL_IB_HCA, GID index, GDR level, socket tuning, algorithms, and NCCL_DEBUG.
OpenShift Versions, EOL & Kubernetes Mapping
OpenShift lifecycle: EOL dates for OCP 4.12–4.22, OpenShift to Kubernetes version mapping, EUS vs standard support, release cycle and upgrade paths.
Velero Kubernetes Backup, Restore and Schedules
Velero backup and disaster recovery for Kubernetes: install on S3/MinIO, velero backup create, schedules with TTL, PV snapshots vs Kopia, restore, migration.
NCCL and RCCL Networking Performance on Kubernetes
Optimize NCCL (NVIDIA) and RCCL (AMD) collective communication performance on Kubernetes GPU clusters. Network transport selection, bandwidth tuning, latency
Weights and Biases Experiment Tracking on Kubernetes
Deploy Weights & Biases (W&B) on Kubernetes for ML experiment tracking, model registry, and hyperparameter sweeps. Self-hosted W&B Server, agent-based
Integrate DisaggregatedSet with llm-d on Kubernetes
Deploy disaggregated LLM inference using DisaggregatedSet and llm-d on Kubernetes. Install LWS then DS controller, model prefill/decode roles, wire llm-d
DisaggregatedSet for Multi-Role LLM Inference
Deploy disaggregated LLM inference on Kubernetes with DisaggregatedSet and LeaderWorkerSet. Separate prefill and decode phases across GPU pools
Mirror OpenShift Releases to Disconnected Registry
Mirror OCP release images to an air-gapped Quay registry using oc adm release mirror. Auth setup, proxy config, ImageDigestMirrorSet, and disconnected updates.
NCCL Topology Dump and Tuning on Kubernetes
Use NCCL_TOPO_DUMP_FILE to export and inject GPU topology on Kubernetes for reproducible distributed training performance. Topology XML caching, environment
Container Image Security Scanning on Kubernetes
Implement container image security scanning in Kubernetes CI/CD pipelines. Trivy, Grype, and admission controllers to prevent vulnerable images from running.
Container Image Signing and Verification on Kubernetes
Sign container images with Sigstore cosign and verify signatures at admission time with Kyverno or Connaisseur. Supply chain security for Kubernetes
Hermes Agent Self-Hosted AI on Kubernetes
Deploy Hermes Agent (Nous Research) on Kubernetes as a persistent self-hosted AI agent with memory, automated skill creation, multi-platform
Kubernetes Image Pull Optimization: Faster Pod Starts
Speed up Kubernetes image pulls: pre-pull DaemonSets, containerd registry mirrors, lazy pulling with eStargz/SOCI, parallel pulls, and GC tuning for AI images.
Multi-Architecture Container Images for Kubernetes
Build and deploy multi-architecture container images for mixed Kubernetes clusters. Docker buildx, manifest lists, image indexes, platform-aware
NVIDIA CNS with Insight Operator for Network Diagnostics
Deploy NVIDIA Cloud-Native Stack (CNS) with the Insight Operator and NVIDIA Insight tools for deep GPU fabric diagnostics. Collect NIC firmware health, link
NVIDIA DOCA Telemetry for Network Monitoring on Kubernetes
Deploy NVIDIA DOCA Telemetry Service (DTS) to collect real-time network metrics from BlueField DPUs and ConnectX NICs. Export RoCE counters, port
NVIDIA Dynamo Production Tuning on Kubernetes
Tune NVIDIA Dynamo for production LLM inference: prefill/decode pool sizing, KV cache transfer optimization, NCCL backend selection, SLA-driven autoscaling
NVIDIA Nsight Operator for GPU Profiling on Kubernetes
Deploy NVIDIA Nsight Systems and Nsight Compute on Kubernetes for GPU workload profiling. Capture kernel traces, memory bandwidth, SM occupancy, and NCCL
NVIDIA OpenShell Sandboxed AI Agent Runtime on Kubernetes
Deploy NVIDIA OpenShell on Kubernetes for safe, private autonomous AI agent execution. Declarative YAML network policies, sandboxed containers
OCI Container Image Internals on Kubernetes
Understand OCI container image internals: layers as tar archive diffs, image configuration JSON, content-addressable storage with SHA-256, multi-platform image
OpenShift Cluster Update Process Explained
Complete guide to OpenShift Container Platform cluster updates. CVO workflow, Runlevels, Machine Config Operator node updates, update channels
Poolside AI Foundation Models on Kubernetes
Deploy Poolside AI foundation models for enterprise software agents on Kubernetes. On-prem and VPC deployment, multi-agent orchestration, sandboxed
Private Container Registry on Kubernetes
Deploy a private OCI container registry on Kubernetes with persistent storage, TLS, authentication, garbage collection, and high availability. Self-hosted
Red Hat AI Studio on OpenShift
Deploy Red Hat AI Studio on OpenShift for end-to-end LLM development. Model catalog, InstructLab fine-tuning, experiment tracking, model
Tabnine AI Code Assistant Self-Hosted on Kubernetes
Deploy Tabnine Enterprise self-hosted on Kubernetes for private AI code completion and chat. On-prem model serving, multi-model support (Tabnine
Canary Deployment with Gateway API Traffic Splitting
Implement canary deployments using Kubernetes Gateway API HTTPRoute traffic splitting. Gradually shift traffic from stable to canary version with weight-based
Validate CSI Storage Performance with FIO Kubernetes Job
Benchmark CSI storage performance using FIO inside a Kubernetes Job. Create a PVC backed by a CSI StorageClass, run sequential/random read/write
emptyDir Volumes: Sharing, Lifecycle, and Memory-Backed
Master emptyDir volumes for CKA/CKAD exam prep. Share data between containers, understand volume lifecycle across restarts vs Pod deletion, and configure
Chaos Mesh Fault Injection on Kubernetes
Deploy Chaos Mesh for chaos engineering on Kubernetes. Covers PodChaos, NetworkChaos, IOChaos, StressChaos experiments, scheduling, RBAC
GPUDirect Storage on Kubernetes
Configure NVIDIA GPUDirect Storage (GDS) for direct data path between NVMe/NFS storage and GPU memory bypassing CPU. Covers Magnum IO, cuFile API, GDS driver
InfiniBand Subnet Manager OpenSM on Kubernetes
Deploy and manage InfiniBand Subnet Manager (OpenSM) on Kubernetes for GPU cluster fabric management. Covers SM architecture, UFM integration, partition
LitmusChaos: Chaos Engineering on Kubernetes
Run LitmusChaos experiments on Kubernetes: install ChaosCenter, pod-delete ChaosEngine, HTTP/cmd/Prometheus probes, ChaosResult verdicts vs Chaos Mesh.
NMState Network Config for GPU Worker Nodes
Declaratively configure Ethernet bonding, VLANs, MTU, and static routes on GPU worker nodes using NMState on OpenShift. Covers bonding modes, LACP
NVIDIA PeerMem for GPU-Direct RDMA
Install and configure nvidia_peermem kernel module to enable GPU-Direct RDMA between NVIDIA GPUs and Mellanox RDMA NICs. Covers module
OpenShift Multus CNI Multiple Network Interfaces
Attach multiple network interfaces to Pods using Multus CNI on OpenShift. Covers NetworkAttachmentDefinitions, SR-IOV, macvlan, IPVLAN, traffic separation
RoCE PFC and ECN Lossless Ethernet for GPU Clusters
Configure RoCE v2 with Priority Flow Control (PFC) and ECN for lossless Ethernet RDMA on GPU clusters. Covers DSCP mapping, switch configuration, NIC
Strimzi Kafka Operator on Kubernetes
Deploy Apache Kafka on Kubernetes with Strimzi operator. Covers Kafka CR, KafkaTopic, KafkaUser, KafkaConnect, KafkaBridge, rack awareness, storage
Disable PCIe ACS for GPU-Direct P2P
Disable PCIe ACS so GPUs and RDMA NICs can use GPUDirect P2P DMA: BIOS setting, setpci and pcie_acs_override, IOMMU passthrough, and nvidia-smi topo checks.
Dual-Fabric Mellanox: GPU InfiniBand + Storage Ethernet
Design and configure dual-fabric network architecture with separate Mellanox NICs for GPU communication (InfiniBand) and storage traffic (Ethernet). Covers
IOMMU BIOS and Kernel Config for NCCL GPU-Direct
Configure IOMMU at BIOS and kernel level to enable NCCL GPU-Direct RDMA on Kubernetes. Covers Intel VT-d, AMD-Vi, kernel parameters, passthrough
NCCL PXN Cross-NIC Communication via NVLink
Configure NCCL PXN (PCIe cross-NIC via NVLink) for multi-node GPU training where not every GPU has a direct RDMA NIC. Covers topology
NVIDIA IPAM for GPU Fabric IP Address Allocation
Configure nv-ipam (NVIDIA IPAM) to assign IP addresses on GPU fabric SR-IOV networks in Kubernetes. Covers IPPool CRDs, per-node allocation, InfiniBand IPoIB
Fix SR-IOV 'Not Enough MMIO Resources' Error
Resolve the mlx5_core 'not enough MMIO resources for SR-IOV' error on OpenShift nodes with Mellanox ConnectX NICs. Covers BIOS settings, PCIe BAR
Run:ai Distributed Inference with SR-IOV RDMA
Deploy distributed vLLM inference on Run:ai using SR-IOV RDMA for NCCL inter-node communication. Covers extended-resource for Mellanox VFs, network annotation
Run:ai Distributed Inference with vLLM and NCCL
Deploy distributed LLM inference on Run:ai with vLLM tensor parallelism across multiple workers. Covers multi-node GPU splitting, NCCL configuration, PVC model
SR-IOV VF to Container Mapping and Lifecycle
How SR-IOV Virtual Functions are mapped to containers in Kubernetes. Covers VF allocation flow, link state management (VFs are down when unassigned), device
VT-x vs VT-d vs SR-IOV Explained
Understand the difference between CPU virtualization (VT-x/SVM), I/O virtualization (VT-d/AMD-Vi/IOMMU), and SR-IOV. Which to enable or disable for GPU
Debug Distributed vLLM Inference with NCCL Verbose Logging
Debug distributed vLLM inference using NCCL_DEBUG=INFO and NCCL_DEBUG_SUBSYS=ALL. Covers air-gapped deployment with TRANSFORMERS_OFFLINE, interpreting NCCL
Kubernetes AI Infrastructure Scaling
What changes when Kubernetes AI inference infrastructure grows from 10K to 100K requests per second, including routing, caching, autoscaling, GPUs, and SLOs.
Kubernetes for AI Search and Discoverability
Deploy AI-searchable services on Kubernetes: llms.txt implementation, RAG-optimized APIs, structured data for AI chatbots, and infrastructure patterns
ServiceAccount for Running Pods
Configure Kubernetes ServiceAccounts for Pods: token mounting, RBAC permissions, workload identity, automountServiceAccountToken control, and least-privilege
OpenShift SR-IOV RDMA InfiniBand Device Plugin
Configure and troubleshoot SR-IOV Network Operator with Mellanox ConnectX RDMA InfiniBand devices on OpenShift. Covers SriovNetworkNodePolicy, device
OpenShift User Account Management
Manage user accounts in OpenShift: create users, assign roles, configure identity providers, manage groups, and implement RBAC for multi-tenant clusters.
Kubernetes Cost Optimization Strategies
Comprehensive cost reduction strategies for Kubernetes clusters: right-sizing, spot instances, autoscaling, idle resource detection, namespace budgets, and GPU
Goldilocks VPA Dashboard for Resource Optimization
Deploy Goldilocks to visualize VPA recommendations across all workloads and identify over-provisioned or under-provisioned containers with actionable
Kyverno AI Workload Provenance Verification
Use Kyverno to verify software and content provenance for AI workloads: SBOM validation, model signing with Sigstore, dataset integrity, and supply chain
Kyverno CEL Policy Model Migration
Migrate Kyverno policies from YAML-based rules to CEL expressions for type-safe, performant validation. Covers CEL syntax, migration patterns, and comparison
Kyverno Drift Prevention for GitOps
Prevent configuration drift in GitOps workflows using Kyverno: block manual kubectl edits, enforce ArgoCD/Flux ownership, and detect out-of-band changes
Kyverno ISO 27001 Compliance Policies
Implement ISO 27001 and BSI IT-Grundschutz security controls in Kubernetes using Kyverno policies: access control, cryptography, operations security, and audit
Kyverno LLM Inference Cost and Security Guardrails
Implement policy-as-code guardrails for LLM inference workloads with Kyverno: GPU quota enforcement, model size limits, cost controls, prompt injection
Kyverno ReBAC Multi-Tenant RBAC Automation
Implement Relationship-Based Access Control (ReBAC) with Kyverno to automate multi-tenant RBAC at scale: dynamic RoleBindings, namespace
Kyverno Webhook Topology and Admission Latency
Optimize Kyverno webhook topology for minimal admission latency: webhook configuration tuning, failure policies, timeout settings, and lessons from migrating
OpenShift oc cp File Copy Guide
Use oc cp to copy files and directories between local machine and Pods. Covers tar-based transfer, container selection, large file handling, and comparison
OpenShift oc rsync File Transfer
Use oc rsync to copy files between local machine and Pods in OpenShift. Covers upload, download, live sync, filtering, and common patterns for debugging
Deep Learning with Large Datasets on K8s
Optimize deep learning training with large datasets on Kubernetes. Covers data loading, caching strategies, parallel prefetch, and storage architecture
Distributed Multi-GPU Inference on Kubernetes
Deploy distributed inference across multiple GPUs and nodes on Kubernetes. Covers tensor parallelism, pipeline parallelism, vLLM, and NIM multi-GPU serving.
External Secrets Operator on OpenShift
Manage Kubernetes secrets from external vaults using External Secrets Operator on OpenShift. Covers ExternalSecret CRD, SecretStore configuration, and GitOps
PScale NFS and SMB Storage Benchmarking
Benchmark NFS and SMB storage performance on Kubernetes using fio clients in Pods. Covers multi-client parallel testing, bandwidth measurement, and IOPS
FSDP LoRA Fine-Tuning LLMs on Kubernetes
Fine-tune large language models with FSDP and LoRA on Kubernetes. Covers memory-efficient loading, checkpoint strategies, and multi-node H200 training.
GenAI-Perf: Benchmark LLM Inference on Kubernetes
Benchmark Triton, vLLM and NIM endpoints with NVIDIA GenAI-Perf on Kubernetes: TTFT, ITL, throughput, concurrency sweeps, GPU telemetry, and AIPerf migration.
Mistral FSDP LoRA Complete Accelerate Config
Complete accelerate FSDP configuration for fine-tuning Mistral-Small-4 119B with LoRA on multi-GPU H200 clusters. Covers every FSDP2 setting with explanations.
Multi-Node Distributed Training on Kubernetes
Run distributed deep learning training across multiple GPU nodes on Kubernetes. Covers PyTorch DDP, DeepSpeed, Horovod, and MPI jobs with NCCL optimization.
NVIDIA GPUDirect Storage Benchmark on K8s
Benchmark NVIDIA GPUDirect Storage (GDS) on Kubernetes for direct NVMe-to-GPU data transfers. Covers gdsio, gds_stats, performance validation, and comparison
NVIDIA GPU Operator GitOps on OpenShift
Deploy NVIDIA GPU Operator on OpenShift via GitOps with ArgoCD. Covers ClusterPolicy configuration, DCGM exporter, drain settings, tolerations, and rolling
NVIDIA Network Operator NicClusterPolicy
Deploy NVIDIA Network Operator on OpenShift with NicClusterPolicy for DOCA telemetry, NIC feature discovery, RDMA IPAM, and OFED drivers. GitOps-managed
OpenShift GPU Node Resource Planning
Plan CPU, memory, and overhead budgets for GPU nodes running NVIDIA GPU Operator, Network Operator, Run:ai, and OpenShift infrastructure Pods. Understand what
Run:ai Backend Architecture on OpenShift
Understand the full Run:ai backend deployment on OpenShift with 40+ microservices including Keycloak, PostgreSQL, NATS, Thanos, Traefik, and workload
Run:ai Distributed PyTorch Training on OpenShift
Submit multi-node distributed PyTorch training jobs on OpenShift using Run:ai CLI. Covers DDP, FSDP, RDMA networking, and GPU scheduling.
FSDP Distributed Training on Run:ai
Run PyTorch FSDP distributed training workloads on Run:ai with GPU scheduling, event tracking, and GPU memory monitoring. Covers Mistral-class model
Run:ai GPU Metrics Pipeline with DCGM and Thanos
End-to-end GPU metrics pipeline on Run:ai: DCGM exporter collects GPU utilization, Prometheus scrapes, remote-writes to Thanos Receive, and Grafana dashboards
Run:ai Keycloak SSO Authentication Setup
Configure Run:ai SSO authentication with Keycloak on OpenShift: OIDC integration, user federation, role mapping, and troubleshooting login failures.
Run:ai Observability with OpenTelemetry
Configure Run:ai observability on OpenShift with OpenTelemetry Collector, Prometheus receivers, metrics enrichment, OAuth2 export, and GPU metric collection
Run:ai Platform Backend Components
Overview of Run:ai backend StatefulSets and components on OpenShift: Thanos receive/query, Keycloak, NATS, Redis, PostgreSQL, workload controllers, and their
Run:ai Training Job Submit Script Pattern
Production pattern for submitting Run:ai training jobs via shell scripts with GPU fractional allocation, NFS mounts, custom Python environments, and private
Run:ai Workload Controllers on OpenShift
Understand Run:ai cluster-level workload controllers on OpenShift: workload-controller, workload-overseer, workload-exporter, and status-updater components.
Thanos Receive Memory Sizing Guide
Calculate correct memory limits for Thanos Receive based on WAL segments, active series, retention, and ingestion rate. Prevent OOMKill crash loops
Fix Thanos Receive OOMKilled in Run:ai
Troubleshoot and fix Thanos Receive OOMKilled (exit code 137) with 143+ restarts in Run:ai backend on OpenShift. Covers memory tuning, TSDB
Thanos Receive OOMKilled CrashLoopBackOff
Debug and fix Thanos Receive StatefulSet OOMKilled CrashLoopBackOff caused by WAL replay exceeding memory limits. Covers ArgoCD conflict resolution, liveness
CVE-2026-31431 Linux Kernel Crypto Fix
Security advisory for CVE-2026-31431: Linux kernel crypto algif_aead vulnerability. Impact on Kubernetes nodes and how to patch container host kernels.
Kubernetes 1.36 Constrained Impersonation
Use constrained impersonation in Kubernetes 1.36 to limit which identities a user can impersonate. Tighter RBAC control for multi-tenant clusters.
Kubernetes 1.36 CSI Differential Snapshots
Use CSI differential snapshots in Kubernetes 1.36 to track changed blocks between snapshots. Enables incremental backups and faster disaster recovery.
Kubernetes 1.36 Declarative Type Validation
Kubernetes 1.36 introduces declarative validation for native API types using validation-gen. Replaces hand-written validation code with struct tag annotations.
Kubernetes 1.36 DRA for GPU and TPU Management
Use Dynamic Resource Allocation in Kubernetes 1.36 for advanced GPU/TPU management with partitionable devices, device taints, and tolerations.
Kubernetes 1.36 External SA Token Signing
Delegate ServiceAccount token signing to external KMS or HSM systems in Kubernetes 1.36. Improve security with hardware-backed key management.
Migrate from externalIPs in Kubernetes 1.36
Service externalIPs are deprecated in Kubernetes 1.36 due to CVE-2020-8554. Migrate to Gateway API, LoadBalancer services, or MetalLB for external access.
Kubernetes 1.36 Gang Scheduling
Use gang scheduling in Kubernetes 1.36 to schedule Pod groups atomically. Essential for distributed ML training, MPI jobs, and Spark workloads.
Migrate from gitRepo Volume in Kubernetes 1.36
The gitRepo volume plugin is permanently removed in Kubernetes 1.36. Migrate to init containers or OCI volumes to avoid broken deployments.
Kubernetes 1.36 Graceful Leader Transition
Configure graceful leader transitions in Kubernetes 1.36 control plane components. Eliminate brief outages during leader election failovers.
Kubernetes 1.36 L3 Cache Topology in CPU Manager
Configure L3 cache topology awareness in Kubernetes 1.36 CPU Manager. Allocate CPUs sharing L3 cache for better performance in latency-sensitive workloads.
Kubernetes 1.36 Memory QoS with cgroups v2
Configure memory quality of service with cgroups v2 in Kubernetes 1.36. Set memory.min and memory.high for guaranteed memory and throttling before OOM kills.
Kubernetes 1.36 Mixed Version Proxy
Use the Mixed Version Proxy in Kubernetes 1.36 to handle API version skew during rolling upgrades. Ensures API availability across mixed control plane versions.
Kubernetes 1.36 Native Histogram Metrics
Enable Prometheus native histograms in Kubernetes 1.36 for higher-resolution metrics with lower storage cost. Covers all control plane components.
Kubernetes 1.36 OCI Volume Source
Use OCI VolumeSource in Kubernetes 1.36 to pull OCI artifacts directly into Pod volumes. No init containers needed for ML models, configs, or data.
Kubernetes 1.36 Pod Certificates (mTLS)
Use Pod Certificates in Kubernetes 1.36 to authenticate Pods to the API server via mTLS. Built-in X.509 certificate provisioning without external tools.
Kubernetes 1.36 Pod-Level Resource Limits
Set resource requests and limits at the Pod level in Kubernetes 1.36 instead of per-container. Simplifies multi-container Pod resource management.
Kubernetes 1.36 RestartAllContainers for ML
Use the RestartAllContainers policy in Kubernetes 1.36 to restart all Pod containers in-place when a worker fails, avoiding costly ML training rescheduling.
Kubernetes 1.36 SELinux Mount-Time Labeling
Configure SELinux mount-time volume labeling in Kubernetes 1.36 to eliminate slow recursive relabeling and speed up Pod startup times dramatically.
Kubernetes 1.36 SPDY to WebSocket Migration
Kubernetes 1.36 continues migrating kubectl exec/attach/port-forward from SPDY to WebSockets. Understand the changes and troubleshoot connection issues.
Kubernetes 1.36 Statusz and Flagz Endpoints
Use /statusz and /flagz debug endpoints in Kubernetes 1.36 control plane components. Inspect runtime status and effective flag values without log parsing.
Kubernetes 1.36 Topology-Aware Scheduling
Use topology-aware workload scheduling in Kubernetes 1.36 to place Pods on nodes with optimal GPU, NUMA, and network topology for ML training.
Kubernetes 1.36 User Namespaces in Pods
Enable user namespaces in Kubernetes 1.36 for rootless containers and stronger Pod isolation. Map container root to unprivileged host UIDs.
Kubernetes 1.36 VolumeGroupSnapshot GA
Use VolumeGroupSnapshot in Kubernetes 1.36 to take crash-consistent snapshots of multiple volumes atomically. Now GA and production-ready.
Cilium: eBPF-Powered K8s Networking
Deploy Cilium CNI in Kubernetes for eBPF-based networking, network policies, service mesh, and observability with Hubble.
Knative: Serverless Workloads on Kubernetes
Run serverless containers with Knative Serving and Eventing on Kubernetes. Auto-scaling to zero, traffic splitting, revision management.
NATS: Lightweight Messaging for Kubernetes
Deploy NATS messaging in Kubernetes for pub/sub, request/reply, and JetStream streaming. A high-performance alternative to Kafka for cloud-native apps.
SPIFFE/SPIRE: Workload Identity for K8s
Deploy SPIRE for Kubernetes workload identity using SPIFFE standards. Automatic mTLS certificate issuance, cross-cluster identity federation.
NVIDIA GPU Feature Discovery for Kubernetes
Deploy GPU Feature Discovery (GFD) to auto-label Kubernetes nodes with GPU model, MIG capability, CUDA version, and driver info for intelligent scheduling.
OpenShift NVIDIA MIG Reconfiguration Without Reboot
Reconfigure NVIDIA MIG geometry on OpenShift without rebooting nodes. Use nvidia-mig-manager with node labels to dynamically switch GPU partitions.
Talos Linux MIG Configuration with GPU Operator
Configure NVIDIA MIG on Talos Linux Kubernetes clusters. Install GPU Operator, set MIG strategy, and dynamically partition A100 GPUs without node reboot.
DGX H100 nvidia-smi topo -m Guide
Read nvidia-smi topo -m output on DGX H100 systems. Understand NVLink, NVSwitch, PCIe topology, GPU-to-GPU bandwidth, and NUMA affinity for Kubernetes.
GPU Operator Node Validation Metrics
Monitor NVIDIA GPU Operator node validation with gpu_operator_node_driver_ready and status exporter metrics. Prometheus alerts for GPU node health.
Grafana Dashboard 6417 Kubernetes Pods
Import Grafana dashboard 6417 for Kubernetes pod monitoring. Configure Prometheus data source, visualize CPU, memory, network, and disk usage per pod.
Helm Install: Deploy Charts Guide
Install Helm charts on Kubernetes with helm install, upgrade, rollback, and values customization. Repository management, OCI registries, and release lifecycle.
Kata Containers RuntimeClass Kubernetes
Deploy Kata Containers with Kubernetes RuntimeClass for hardware-isolated pods. VM-based sandboxing, microVM configuration, and multi-runtime clusters.
kubectl apply vs create: Key Differences
Understand when to use kubectl apply vs kubectl create. Declarative vs imperative, last-applied annotation, server-side apply, and GitOps workflows.
kubectl Cheat Sheet: Essential Commands
Complete kubectl cheat sheet with essential commands for pods, deployments, services, debugging, and cluster management. Copy-paste ready examples.
kubectl describe: Read Pod Events Guide
Use kubectl describe pod to read events, conditions, and container states. Diagnose scheduling failures, image pulls, crashes, and probe failures.
kubectl exec: Run Commands in Pods
Use kubectl exec to run commands inside running pods. Interactive shell, multi-container pods, debugging techniques, and security considerations.
kubectl get pods: Output Formats Guide
Master kubectl get pods with output formats, label selectors, field selectors, and custom columns. Wide output, JSON, YAML, and jsonpath examples.
kubectl run: Create Pod from Command Line
Use kubectl run to create pods and deployments from the command line. Dry-run output, resource limits, environment variables, and CKA exam patterns.
K8s Admission Webhooks: Validate and Mutate
Build Kubernetes validating and mutating admission webhooks. Webhook configuration, TLS setup, failure policies, and common patterns for policy enforcement.
kubectl explain: API Resource Reference
Use kubectl explain and api-resources to discover Kubernetes API objects. Field documentation, resource versions, short names, and API group exploration.
Argo Workflows on Kubernetes: DAGs, Artifacts, Cron
Argo Workflows guide: install, steps vs DAG pipelines, artifact passing, parameters and conditionals, retries, CronWorkflow, WorkflowTemplates and RBAC.
K8s Certificate Rotation and Management
Manage Kubernetes cluster certificates with kubeadm. Check expiration, renew certificates, configure auto-rotation, and troubleshoot TLS errors.
cert-manager: Automated TLS Certificates
Automate TLS certificate management with cert-manager in Kubernetes. Let's Encrypt integration, Issuer configuration, wildcard certificates, and automatic
Cluster API: Declarative K8s Management
Manage Kubernetes cluster lifecycle with Cluster API. Provision, upgrade, and scale clusters declaratively using management and infrastructure providers.
Kubernetes ConfigMap: Create, Mount, Update
Create Kubernetes ConfigMaps from files, literals and directories, mount them as volumes or env vars, update them safely, and apply ConfigMap best practices.
K8s Container Runtimes: containerd vs CRI-O
Compare Kubernetes container runtimes containerd and CRI-O. Configuration, crictl debugging, runtime class for gVisor and Kata, and migration from Docker.
K8s Custom Resources: CRD Development
Create Kubernetes Custom Resource Definitions with schema validation, additional printer columns, subresources, and conversion webhooks.
Fix CreateContainerError in Kubernetes
Troubleshoot Kubernetes CreateContainerError with step-by-step debugging. ConfigMap mounts, Secret references, volume permissions, and container runtime issues.
K8s CSI Drivers: Container Storage Guide
Install and configure Kubernetes CSI drivers for persistent storage. CSI architecture, StorageClass provisioners, snapshots, and volume expansion patterns.
Kubernetes DaemonSet: One Pod Per Node Guide
Kubernetes DaemonSet: run one pod on every node (or a subset). Log collectors, node-exporter, GPU nodes, control-plane tolerations, maxSurge updates.
Dapr: Microservice Building Blocks on K8s
Deploy Dapr in Kubernetes for service invocation, state management, pub/sub messaging, and secrets using a language-agnostic sidecar architecture.
K8s DNS for Services: Resolution Guide
Understand Kubernetes DNS for Services and Pods. Service discovery patterns, FQDN format, headless services, DNS policies, ndots configuration.
K8s Volumes: emptyDir and hostPath Guide
Configure Kubernetes emptyDir and hostPath volumes for temporary storage and host filesystem access. Memory-backed tmpfs, size limits.
K8s EndpointSlice and Service Discovery
Understand Kubernetes EndpointSlice for scalable service discovery. DNS resolution, headless services, external services, and endpoint conditions.
etcd Deep Dive: K8s Data Store Operations
Master etcd operations for Kubernetes. Backup and restore, compaction, defragmentation, health checks, member management, and performance tuning for production.
K8s Graceful Shutdown & terminationGracePeriod
Kubernetes graceful shutdown: terminationGracePeriodSeconds (default 30s), preStop sleep, SIGTERM handlers, and fixing the endpoint-removal race for zero 502s.
Harbor: Private Container Registry on K8s
Deploy Harbor container registry in Kubernetes for private image hosting. Vulnerability scanning, image replication, RBAC, Helm chart repository.
K8s Horizontal Scaling: Manual and Auto
Scale Kubernetes workloads horizontally with kubectl scale, HPA, and KEDA. Covers replica management and event-driven scaling strategies.
K8s HPA: Autoscale on CPU and Memory
Configure Kubernetes HorizontalPodAutoscaler to scale on CPU and memory utilization. Target utilization, minReplicas, maxReplicas, and scaling behavior.
K8s Ingress NGINX: Routing and TLS
Configure Kubernetes Ingress with NGINX controller. Path-based routing, TLS termination, annotations, rate limiting, and multiple hosts with examples.
Kubernetes Jobs and CronJobs: Complete Guide
Kubernetes Jobs and CronJobs with YAML: run-to-completion, backoffLimit, parallelism, Indexed jobs, podFailurePolicy, TTL cleanup and cron scheduling.
K8s kubeadm Upgrade: Step-by-Step Guide
Upgrade Kubernetes clusters with kubeadm from one minor version to the next. Control plane upgrade, worker node drain, kubelet upgrade, and rollback procedures.
kubeadm init: Bootstrap K8s Cluster
Bootstrap a Kubernetes cluster with kubeadm init and join. Control plane setup, worker node joining, pod network installation.
kubectl debug: Advanced Pod Debugging
Use kubectl debug for ephemeral containers, node debugging, and pod copy debugging. Debug distroless images, share process namespaces, and node-level access.
kubectl Plugins: Extend with Krew
Install kubectl plugins with Krew package manager. Essential plugins for debugging, resource management, and cluster operations. Build custom kubectl plugins.
kubectl wait: Script K8s Operations
Use kubectl wait for scripting Kubernetes operations. Wait for pod ready, job completion, deployment rollout, and custom conditions in CI/CD pipelines.
K8s Kubelet Configuration and Tuning
Configure Kubernetes kubelet with KubeletConfiguration API. Resource reservation, eviction thresholds, image garbage collection, and node allocatable settings.
Kustomize Guide: Overlays, Patches, Generators
Kustomize for Kubernetes: base/overlay layout, kustomization.yaml (kustomize.config.k8s.io/v1beta1), patches, images, replicas, ConfigMap generators, fixes.
Kyverno: K8s Policy Engine Without Code
Enforce Kubernetes policies with Kyverno. Validate, mutate, and generate resources using YAML policies. Image verification, label enforcement.
Kubernetes Labels Best Practices (app.kubernetes.io)
Kubernetes labels best practices: recommended app.kubernetes.io labels (name, part-of, component), naming rules, selector patterns, cost-allocation labels.
Linkerd: Lightweight K8s Service Mesh
Deploy Linkerd service mesh in Kubernetes for mTLS, traffic splitting, retries, and observability. A lighter, zero-config alternative to Istio.
K8s Metrics Server: kubectl top Guide
Install Kubernetes Metrics Server for kubectl top and HPA. Resource usage monitoring, troubleshooting metrics, and custom metrics integration.
Kubernetes Namespaces: Management and Best Practices
Create and manage Kubernetes namespaces for teams and environments: naming strategy, ResourceQuota, LimitRange, RBAC, NetworkPolicy and a provisioning template.
Kubernetes NetworkPolicy Examples and Guide
Copy-paste Kubernetes NetworkPolicy examples: default deny, allow DNS, allow by label or namespace, ingress controller, database access and egress CIDRs.
K8s Node Affinity and Pod Scheduling
Configure Kubernetes node affinity, pod affinity, and anti-affinity rules. nodeSelector, requiredDuringScheduling, preferredDuringScheduling, and topology.
Fix Untolerated Taint node-role master
Fix 'node untolerated taint node-role.kubernetes.io/master' scheduling error. Remove or tolerate control plane taints to schedule pods on master nodes.
OpenTelemetry in Kubernetes: Traces and Metrics
Deploy OpenTelemetry Collector in Kubernetes for distributed tracing and metrics. Auto-instrumentation, OTLP export, Jaeger integration.
Kubernetes PV and PVC: Persistent Volume Guide
Kubernetes PersistentVolumes and PVCs: dynamic vs static (NFS) provisioning, access modes, reclaim policy, PV lifecycle, Block mode, and expansion.
K8s PersistentVolumeClaimSpec Reference
Complete PersistentVolumeClaimSpec reference for Kubernetes. accessModes, storageClassName, resources, selector, volumeMode, and dataSource explained.
K8s Pod Security Admission Standards
Configure Kubernetes Pod Security Admission with enforce, audit, and warn modes. Privileged, baseline, and restricted profiles for namespace-level pod security.
Kubernetes Liveness and Readiness Probes Guide
Configure Kubernetes liveness, readiness, and startup probes for health checks. HTTP, TCP, exec probes, timing parameters, and failure threshold tuning.
Prometheus Monitoring on Kubernetes: Setup Guide
Monitor Kubernetes with Prometheus: kube-prometheus-stack Helm install, ServiceMonitor/PodMonitor, PrometheusRule alerts, recording rules and key PromQL.
K8s QoS Classes: Guaranteed vs Burstable
Understand Kubernetes QoS classes for pod eviction priority. Guaranteed, Burstable, and BestEffort resource configurations and eviction behavior under pressure.
Kubernetes Rate Limiting Guide
Implement rate limiting in Kubernetes with Ingress annotations, Gateway API, Envoy filters, and application-level middleware. Protect APIs from abuse.
K8s RBAC: Role and RoleBinding Guide
Configure Kubernetes RBAC with Role, ClusterRole, RoleBinding, and ClusterRoleBinding. Service account permissions, least privilege, and audit examples.
Kubernetes ReplicaSet Explained with Examples
What a Kubernetes ReplicaSet does, how selectors and ownerReferences work, pod-template-hash, scaling, and why you should use a Deployment instead.
Kubernetes Right-Sizing and Cost Optimization
Optimize Kubernetes resource allocation with right-sizing, VPA recommendations, bin packing, request-to-limit ratios, and cost reduction best practices.
Kubernetes ResourceQuota and LimitRange Examples
Kubernetes ResourceQuota and LimitRange YAML: namespace CPU/memory/GPU quotas, object counts, storage-class and priority scopes, default container limits.
K8s Secrets: Types and Usage Guide
Create and manage Kubernetes Secrets: Opaque, docker-registry, TLS, and basic-auth types. Mount as volumes, inject as env vars, and encrypt at rest.
K8s SecurityContext: Container Hardening
Configure Kubernetes SecurityContext for pods and containers. runAsNonRoot, readOnlyRootFilesystem, capabilities, seccomp profiles, and privilege escalation.
Istio Service Mesh: Traffic Management
Deploy Istio service mesh in Kubernetes for traffic management, mTLS, observability, and canary deployments. VirtualService, DestinationRule.
K8s Service Types: ClusterIP, NodePort, LoadBalancer
Kubernetes Service types explained: ClusterIP, NodePort, LoadBalancer, ExternalName and headless. When to use each, with YAML and traffic flow examples.
K8s ServiceAccount: Pod Identity Guide
Create Kubernetes ServiceAccounts for pod authentication. Token projection, RBAC binding, workload identity, automountServiceAccountToken, and OIDC federation.
Tekton Pipelines on Kubernetes: CI/CD Guide
Build CI/CD with Tekton on Kubernetes: Tasks, Pipelines, PipelineRuns, workspaces, resolvers for catalog tasks, Triggers on git push, and OpenShift Pipelines.
Trivy: K8s Security Scanning and SBOM
Scan Kubernetes clusters with Trivy for vulnerabilities, misconfigurations, and secrets. Trivy Operator for continuous scanning, SBOM generation.
NGINX Ingress limit-burst-multiplier
Configure nginx.ingress.kubernetes.io/limit-burst-multiplier for rate limiting burst control. Tune burst size, rate limits, and 429 response handling.
NVIDIA H300 vs H100 vs H200 GPU Setup on Kubernetes
Compare NVIDIA H300 (upcoming), H100, and H200 GPUs for Kubernetes. Specs, memory bandwidth, deployment with GPU Operator, and inference optimization.
NVIDIA PyTorch Container on Kubernetes
Deploy nvcr.io/nvidia/pytorch containers on Kubernetes for GPU training. Version selection, CUDA compatibility, multi-node DDP, and NCCL configuration.
Install VPA with hack/vpa-up.sh Script
Install Kubernetes Vertical Pod Autoscaler using hack/vpa-up.sh from the official repository. VPA components, prerequisites, and troubleshooting guide.
Air-Gap OpenShift Upgrade oc-mirror OSUS
Upgrade air-gapped OpenShift with oc-mirror and OSUS. Mirror release payloads and Cincinnati graph, configure IDMS, and drive CVO upgrades.
Cincinnati Graph OpenShift Upgrades
Understand Cincinnati upgrade graph for OpenShift. Query graph endpoints, decode channels, blocked edges, conditional updates, and debug upgrade paths.
containerd certs.d Registry CA Trust
Configure containerd to trust private registry CAs using /etc/containerd/certs.d. Set up hosts.toml for custom CA certificates and mirror registries.
GKE OIDC Issuer Workload Identity
Enable OIDC issuer on GKE with --enable-oidc-issuer. Configure workload identity federation for cross-cloud auth and external IdP integration.
Journald Verify Config Kubernetes Nodes
Validate journald configuration on Kubernetes nodes. Fix journal corruption, tune storage limits, configure persistence, and troubleshoot systemd-journald.
kubectl create secret docker-registry
Create Kubernetes Docker registry secrets with --docker-password-stdin. Authenticate to private registries and configure imagePullSecrets securely.
NMState Bond LACP Configuration OpenShift
Configure LACP bonding with NMState on OpenShift. NodeNetworkConfigurationPolicy for 802.3ad bonds, VLAN tagging, and storage network bonds.
NXDOMAIN DNS Troubleshooting Kubernetes
Fix NXDOMAIN errors in Kubernetes. Debug CoreDNS failures, ndots configuration, search domain issues, and external DNS lookup problems.
oc-mirror Troubleshooting: Fix Common Errors
Fix oc-mirror errors in disconnected OpenShift: unexpected EOF writing layers, registry 401/403, disk space, v1/v2 mismatch, graph image and delta issues.
OpenShift Cluster Operator Upgrade Debug
Debug degraded cluster operators during OpenShift upgrades. Identify stuck operators, decode status conditions, and unblock stalled rollouts.
OpenShift IDMS ITMS Mirror Rules Guide
Configure IDMS and ITMS mirror rules in OpenShift for disconnected registries. NeverContactSource vs AllowContactingSource and ICSP migration.
Convert Connected to Disconnected OCP
Convert a connected OpenShift cluster to disconnected. Mirror images, configure IDMS, update pull secrets, fix Insights Operator, and verify applications.
Disconnected Environments OpenShift
Complete guide to OpenShift disconnected and air-gapped environments. Mirror registry, oc-mirror, OLM, OSUS, IDMS, upgrades, and enclave support overview.
etcd Backup and Restore: Kubernetes and OpenShift
Back up and restore etcd on kubeadm and OpenShift: etcdctl/etcdutl snapshots, cluster-backup.sh, automated CronJobs to S3, test restores, and DR steps.
IDMS ITMS ICSP Disconnected OpenShift
Configure ImageDigestMirrorSet, ImageTagMirrorSet, and ImageContentSourcePolicy for disconnected OpenShift. Redirect image pulls to your mirror registry.
Kubernetes Ingress Fundamentals
Configure Kubernetes Ingress for HTTP routing, TLS termination, and path-based routing. NGINX Ingress Controller setup, annotations, and multi-service routing.
Kubernetes IPPool Management Guide
Configure IP address pools in Kubernetes with Whereabouts, NV-IPAM, MetalLB, and Calico IPPool for secondary networks and LoadBalancer IPs.
Kubernetes Probes Liveness Readiness
Configure liveness, readiness, and startup probes in Kubernetes. HTTP, TCP, exec, and gRPC probe types with real-world tuning for production workloads.
Kubernetes Logging Fluent Bit Guide
Deploy Fluent Bit for centralized Kubernetes logging. DaemonSet configuration, parsing, filtering, and forwarding logs to Elasticsearch, Loki, or S3.
kubectl cordon, drain and uncordon Nodes
Safely cordon, drain and uncordon Kubernetes nodes for maintenance: drain flags, PDB-blocked drains, bare pods, and a maintenance script.
Kubernetes RBAC Role ClusterRole
Configure RBAC in Kubernetes with Roles, ClusterRoles, RoleBindings, and ClusterRoleBindings. Least-privilege access for users, groups, and service accounts.
Mirror Registry Disconnected OpenShift
Set up a mirror registry for disconnected OpenShift installations. Deploy mirror-registry for Red Hat OpenShift, configure storage, TLS, and credentials.
MOFED Driver for Kubernetes: Setup Guide
Install and manage MOFED drivers in Kubernetes. Network Operator integration, NicClusterPolicy, driver versions, and RDMA troubleshooting.
MOFED Driver Operator Build Kubernetes
Let the NVIDIA Network Operator build MOFED drivers on-node via DKMS. Kernel header detection, compile flags, and DTK integration for OpenShift.
oc-mirror Plugin Disconnected OpenShift
Use oc-mirror to mirror OpenShift content for disconnected installations. ImageSetConfiguration, incremental mirrors, and operator catalog mirroring.
OLM Disconnected OpenShift Operators
Use Operator Lifecycle Manager in disconnected OpenShift clusters. Mirror catalogs, create CatalogSources, and manage Operators without internet access.
OpenShift MCP Validation Broken Rules
Validate MachineConfigPool rules before applying in OpenShift. Detect broken MachineConfigs, degraded MCPs, and implement pre-flight checks.
OSUS Direct vs Replicated OpenShift
Choose between direct and replicated OSUS graph data modes in OpenShift. Configure UpdateService for connected and disconnected environments.
Red Hat Quay Registry Kubernetes
Deploy and manage Quay container registry on Kubernetes. Mirror policies, robot accounts, security scanning, and integration with OpenShift.
SELinux SSH Login Failure Troubleshoot
Fix SSH login failures caused by SELinux enforcement. Diagnose AVC denials, restore file labels, fix custom SSH ports, and resolve PAM denials.
Skopeo Container Image Operations
Use skopeo to inspect, copy, sync, and delete container images across registries. Essential tool for disconnected Kubernetes and OpenShift environments.
SR-IOV Device Plugin PF Flag on Kubernetes
Configure SR-IOV device plugin PF flag in Kubernetes. Expose physical functions as allocatable resources for exclusive RDMA access.
cert-manager Cloudflare DNS01 K8s
Configure cert-manager with Cloudflare DNS01 challenge for wildcard TLS certificates on Kubernetes. API token secret, ClusterIssuer, and auto-renewal.
Cilium Debug Pod Troubleshooting
Debug Kubernetes networking with Cilium debug pods and containers. cilium-dbg, netshoot, hubble observe, and endpoint connectivity troubleshooting.
Continuous Batching LLM Inference K8s
Configure continuous batching for LLM inference on Kubernetes. vLLM and TRT-LLM batch scheduling, max-num-seqs tuning, and throughput optimization.
CUDA Version Compatibility K8s Guide
Match CUDA versions with GPU drivers and container images on Kubernetes. Forward compatibility, driver requirements, and container toolkit matrix.
Fix CUDA Out of Memory K8s Pods
Troubleshoot CUDA out of memory errors in Kubernetes GPU pods. Memory fragmentation, batch size tuning, gradient checkpointing, and resource limits.
DeepSpeed ZeRO Training Kubernetes
Deploy DeepSpeed ZeRO-1/2/3 for large model training on Kubernetes. Multi-node config, NCCL tuning, memory optimization, and 70B+ model training.
DGX H100 GPU Topology nvidia-smi
Inspect DGX H100 GPU topology with nvidia-smi topo -m. NVSwitch NV18 links, cross-socket detection, PCIe hierarchy, and NCCL performance validation.
DOCA Telemetry BlueField Kubernetes
Collect NVIDIA BlueField DPU telemetry in Kubernetes using DOCA Telemetry libraries. Monitor adaptive retransmission, PCC, diagnostics, and PCI metrics.
EDR Flexera Agents Kubernetes Deploy
Deploy EDR and Flexera agents on Kubernetes with DaemonSets. Priority classes, host path access, exclusion paths, and security agent lifecycle.
Flexera License Management Kubernetes
Manage software licenses in Kubernetes with Flexera. FlexNet Manager, container license tracking, GPU software metering, and compliance for enterprise K8s.
GPU Feature Discovery Node Labels
Configure NVIDIA GPU Feature Discovery for automatic node labeling on Kubernetes. GPU model, driver version, CUDA, and MIG labels for scheduling.
GPU Node Affinity Scheduling K8s
Schedule GPU workloads with node affinity and topology on Kubernetes. GPU type selection, multi-GPU locality, and NUMA-aware pod placement.
K8s GPU Limits Requests Configuration
Configure GPU resource limits and requests in Kubernetes pod specs. nvidia.com/gpu resource, fractional GPUs, MIG slices, and multi-GPU allocation.
HPA Prometheus Custom Metrics K8s
Configure HPA with custom Prometheus metrics using prometheus-adapter on Kubernetes. Custom and external metrics, query mapping, and scaling on business KPIs.
K8s Ingress Rate Limit NGINX Config
Configure rate limiting on Kubernetes NGINX Ingress. limit-rps, limit-burst-multiplier annotations, per-client limits, and webhook protection patterns.
LACP Storage Switch Kubernetes Guide
Configure LACP bond aggregation for NFS and iSCSI storage switches in Kubernetes clusters. 802.3ad setup, hash policies, switch config, and failure handling.
LoRA Adapter Serving vLLM on K8s
Serve multiple LoRA adapters with a single vLLM base model on Kubernetes. Dynamic loading, per-request routing, and multi-tenant fine-tuned models.
Multi-GPU PyTorch DDP on Kubernetes
Run PyTorch DistributedDataParallel across multiple GPUs on Kubernetes. torchrun, NCCL backend, pod topology, and scaling to multi-node training.
NFS Tenant Segregation Kubernetes
Implement NFS tenant segregation in Kubernetes with six-layer defense-in-depth. Exports, StorageClass, quotas, and admission policies.
NMState Operator Install OpenShift K8s
Install and configure the NMState operator on OpenShift and Kubernetes. Enable declarative node networking with NNCP, NodeNetworkState, and enactments.
NNCP NodeNetworkConfigurationPolicy
Master NodeNetworkConfigurationPolicy (NNCP) on OpenShift and Kubernetes. Configure VLANs, bonds, bridges, SR-IOV, MTU, static IPs, and DNS with NMState.
NVIDIA Driver Update K8s Nodes Guide
Safely update NVIDIA GPU drivers on Kubernetes nodes. Rolling updates, drain strategy, driver compatibility matrix, and GPU Operator upgrades.
NVIDIA GPU Operator Troubleshooting
Fix common NVIDIA GPU Operator issues on Kubernetes. Driver pod crashes, toolkit failures, device plugin not ready, and validation pod errors.
Fix modprobe nvidia_peermem Invalid Argument
nvidia-peermem won't load or ib_register_peer_memory_client is missing? Fix GPUDirect RDMA on Kubernetes: MOFED load order, GPU Operator settings, or DMA-BUF.
nvidia-smi Monitoring in K8s Pods
Run nvidia-smi inside Kubernetes pods for GPU monitoring. Memory usage, temperature, utilization, and automated health checks with liveness probes.
OpenShift ACS RHACS Security Guide
Deploy Red Hat Advanced Cluster Security (RHACS/ACS) on OpenShift. Vulnerability scanning, compliance, runtime threat detection, and policy enforcement.
OpenShift Upgrade Disconnected Cluster
Step-by-step guide to upgrading OpenShift in a disconnected air-gapped environment. Mirror releases, configure ICSP/IDMS, validate, and execute the upgrade.
OpenShift Upgrade Service Graph Guide
Use the OpenShift Upgrade Service (OSUS) and Cincinnati graph to plan safe upgrade paths. Channel selection, conditional edges, and air-gapped graph data.
OSUS Operator Disconnected OpenShift
Deploy the OpenShift Update Service (OSUS) operator for disconnected clusters. Local Cincinnati graph, graph-data image mirroring, and upgrade path serving.
Prefix Caching vLLM KV Cache K8s
Enable automatic prefix caching in vLLM on Kubernetes for shared-prompt workloads. KV cache reuse, memory savings, and chatbot latency optimization.
Quantize LLMs AWQ GPTQ for K8s Deploy
Deploy AWQ and GPTQ quantized LLMs on Kubernetes. 4-bit inference with vLLM, model conversion, accuracy trade-offs, and GPU memory savings guide.
RHACS NFS Tenant Security Kubernetes
Enforce NFS tenant isolation with RHACS policies. Detect direct NFS mounts, wrong StorageClass usage, privileged escalation, and cross-tenant violations.
Speculative Decoding with vLLM on Kubernetes
Enable speculative decoding in vLLM on Kubernetes for 2-3x faster LLM inference. Draft model selection, acceptance rates, and latency optimization.
TensorRT-LLM vs vLLM Benchmark 2026
Compare TensorRT-LLM vs vLLM for LLM inference on Kubernetes. TTFT, throughput, GPU utilization benchmarks, and when to use each inference engine.
vLLM Alternatives LLM Inference K8s
Compare vLLM alternatives for LLM inference on Kubernetes. TensorRT-LLM, SGLang, NVIDIA NIM, Ollama, and text-generation-inference feature comparison.
Ubuntu 26.04 LTS K8s Node Hardening
Harden Kubernetes nodes with Ubuntu 26.04 LTS Resolute Raccoon. sudo-rs Rust rewrite, APT rollback, Kernel 7.0 TDX, ROCm GPU, and secure base images.
Cilium ClusterMesh Multi-Cluster
Connect multiple K8s clusters with Cilium ClusterMesh. Shared services, global service discovery, and cross-cluster network policies.
Cilium Hubble Observability Guide
Monitor Kubernetes network flows with Cilium Hubble. CLI usage, Hubble UI, flow filtering, DNS visibility, and L7 HTTP observability.
crun vs runc: Memory and Performance Benchmarks 2026
Compare crun vs runc: 50% faster container startup and 10x lower memory footprint. Includes benchmarks, cgroup v2 support, and migration guide.
Fix etcd Leader Election Timeout
Troubleshoot etcd leader election timeouts in K8s. Disk latency, network partition, heartbeat interval, and recovery steps.
Fix Certificate Errors Kubernetes
Troubleshoot TLS certificate errors in K8s. x509 unknown authority, expired certs, cert-manager issues, and custom CA bundles.
Fix Pod cgroup Memory Errors K8s
Fix cgroup memory limit and OOM errors in Kubernetes pods. Covers cgroup v2 migration, memory.max, swap settings, and kernel tuning for stable workloads.
Fix Service Not Reachable in Kubernetes
Debug Kubernetes Service connectivity issues. Endpoint selection, kube-proxy rules, DNS resolution, and NetworkPolicy blocks.
Helm Chart Dependencies: Condition, Alias, Lock
Helm subchart dependencies in Chart.yaml: condition and tags flags, alias for multiple instances, import-values, Chart.lock, and dependency update vs build.
Helm Rollback and History Guide
Roll back Helm releases and manage revision history. Diagnose failed upgrades, compare revisions, and automate rollback.
Helm Values Override Patterns Explained
Master Helm values override patterns. CLI flags, multiple files, JSON values, and precedence rules for complex deployments.
K8s Admission Controllers List Guide
Complete list of Kubernetes admission controllers. Enable and disable controllers, PodSecurity, ResourceQuota, and custom validating webhooks guide.
Kubernetes API Versions Explained
Understand K8s API versions: alpha, beta, stable. API deprecation policy, migration strategy, and kubectl api-versions usage.
ArgoCD Sync Waves and Hooks Guide
Configure ArgoCD sync waves for ordered deployments. Wave ordering, sync hooks, resource health checks, and dependency management patterns.
Calico NetworkPolicy K8s Guide
Configure Calico NetworkPolicy for K8s. GlobalNetworkPolicy, host endpoints, application layer policies, and DNS policy rules.
Canary Deployment in Kubernetes: Step by Step
Canary deployments in Kubernetes: native replica-ratio canary, Gateway API and Istio weights, header routing, Argo Rollouts analysis and automated rollback.
Certificate Expiration Management K8s
Monitor and manage Kubernetes certificate expiration. kubeadm cert check, cert-manager alerts, auto-renewal, and preventing expired certificate outages.
Kubernetes CNI Comparison: Cilium vs Calico vs Flannel
Compare Kubernetes CNI plugins in 2026: Cilium, Calico, Flannel, OVN-Kubernetes and Multus. Dataplane, NetworkPolicy, encryption, BGP, and how to choose.
ConfigMap subPath Update Fix K8s
Handle ConfigMap subPath mount limitations in Kubernetes. Why subPath mounts don't auto-update, workarounds, and alternative patterns.
CoreDNS Custom Config Kubernetes
Customize CoreDNS on Kubernetes for advanced DNS needs. Forward zones, stub domains, custom records, caching tuning, and DNS debugging.
Docker Registry Secret kubectl
Create Kubernetes docker-registry secrets with kubectl. --docker-password-stdin, .dockerconfigjson format, and automating registry authentication.
Kubernetes Downward API: Complete Guide
Expose pod and container metadata to applications using the Downward API. Environment variables, volume files, fieldRef, resourceFieldRef, and common patterns.
Logging in Kubernetes with the EFK Stack
Set up EFK logging on Kubernetes: Elasticsearch (ECK or StatefulSet), Fluentd DaemonSet with CRI parsing and K8s metadata, Kibana, retention and KQL.
emptyDir tmpfs Kubernetes Guide
Configure emptyDir volumes with memory-backed tmpfs on Kubernetes. Size limits, memory accounting, sidecar sharing, and ephemeral cache patterns.
Env Variables from ConfigMap K8s
Inject environment variables from ConfigMaps and Secrets in Kubernetes. envFrom, valueFrom, configMapKeyRef, and secretKeyRef patterns.
envFrom ConfigMapRef Kubernetes
Inject all ConfigMap keys as environment variables using envFrom configMapRef in Kubernetes. Bulk injection, prefix, and selective key patterns.
etcd Performance Tuning Kubernetes
Tune etcd for Kubernetes cluster performance. Disk IOPS requirements, compaction, defragmentation, and monitoring etcd health metrics.
Falco Rules for Kubernetes: Complete Guide
Write custom Falco rules for K8s runtime security. Syscall detection, container escape alerts, and cryptomining detection.
Flux Sources Config Kubernetes
Configure Flux source controllers for GitOps on Kubernetes. GitRepository, HelmRepository, OCIRepository, and Bucket sources for multi-source deployments.
Grafana Dashboards for Kubernetes Guide
Import and customize Grafana dashboards for Kubernetes monitoring. Dashboard 315, 6417, kube-prometheus-stack, and custom panel creation.
hostPath vs PVC Kubernetes Guide
Compare hostPath and PVC storage options for Kubernetes. Security risks of hostPath, node affinity constraints, and when to use each storage type.
Trivy Image Scanning Kubernetes
Scan container images with Trivy on K8s. Admission webhook, CI/CD integration, CIS benchmarks, and vulnerability reporting.
imagePullSecrets Pod Config K8s
Configure imagePullSecrets for pulling from private container registries on Kubernetes. Docker registry secrets, service account default.
Ingress Path Routing Kubernetes
Configure Kubernetes Ingress for path-based and host-based routing. PathType Prefix vs Exact, rewrite rules, and multi-service routing patterns.
KEDA Scalers Guide for Kubernetes
Configure KEDA scalers for event-driven autoscaling on Kubernetes. Covers Kafka, RabbitMQ, Prometheus, and cron trigger configuration.
KIND Local Kubernetes Dev Guide
Use KIND for local Kubernetes development. Multi-node clusters, ingress setup, load balancer, persistent storage, and CI/CD integration.
Kubeflow PyTorchJob Training K8s
Run distributed PyTorch training on Kubernetes with Kubeflow PyTorchJob. ElasticPolicy, nproc_per_node, RDMA configuration, and multi-GPU scaling.
Let's Encrypt Ingress Kubernetes
Set up Let's Encrypt TLS certificates for Kubernetes Ingress with cert-manager. HTTP-01 challenge, automatic renewal, and HTTPS redirect configuration.
Local Persistent Volumes Kubernetes
Configure local persistent volumes on Kubernetes for high-performance storage. Node affinity, local-path-provisioner, and SSD-backed database workloads.
Fix Node NotReady Status in Kubernetes
Troubleshoot Kubernetes nodes in NotReady state. Kubelet issues, disk pressure, network problems, certificate expiration, and recovery procedures.
Kubernetes OIDC Authentication with kubelogin
Set up OIDC SSO for the Kubernetes API server with Keycloak, Dex, or Azure/Entra ID: API server flags, kubelogin kubeconfig, and RBAC bindings for IdP groups.
Kubernetes OOMKilled (Exit Code 137): Debug and Fix
Fix OOMKilled (exit code 137) in Kubernetes: find the killed container, container vs node OOM, memory limits, JVM/Node.js heap sizing, leaks, and VPA.
Pod Disruption Budget Best Practices
Configure PodDisruptionBudgets for high availability on Kubernetes. minAvailable vs maxUnavailable, voluntary disruptions, and upgrade coordination.
PersistentVolumeClaim PVC Guide K8s
Create and manage PersistentVolumeClaims on Kubernetes. Access modes, storage classes, volume expansion, and namespace-scoped PVC lifecycle.
RBAC Audit Review Kubernetes Guide
Audit Kubernetes RBAC permissions for security compliance. Identify over-permissioned roles, service account privileges, and least-privilege enforcement.
Readiness Liveness Startup Probes
Configure Kubernetes health probes correctly. When to use each probe type, common mistakes, and production-ready probe configurations.
Readiness Probe Kubernetes Guide
Configure readiness probes correctly on Kubernetes. HTTP, TCP, exec probes, failure threshold tuning, and why readiness probes should never check databases.
Resource Format 200m 256Mi Syntax
Understand Kubernetes resource format: CPU millicores (200m, 500m, 1) and memory units (256Mi, 1Gi). Syntax reference for requests, limits.
K8s Security Checklist 2026 Guide
Complete Kubernetes security checklist for 2026. RBAC audit, network policies, pod security standards, image scanning, and compliance hardening steps.
Service DNS Discovery Kubernetes
How Kubernetes DNS service discovery works. Service FQDN format, headless services, SRV records, and cross-namespace DNS resolution patterns.
Kubernetes StorageClass Complete Guide
Configure StorageClasses for dynamic provisioning on Kubernetes. Covers reclaim policies, volume binding modes, and cloud provider examples.
Velero Snapshot Locations on Kubernetes
Configure Velero snapshot locations for Kubernetes backup. Volume snapshots, file system backup, cross-region copies, and backup verification.
VPA Recommender Setup Kubernetes
Configure the VPA Recommender for Kubernetes resource right-sizing. Off mode recommendations, memory-only mode, and interpreting VPA suggestions.
When to Use Kustomize vs Helm
Choose between Kustomize and Helm for Kubernetes. Learn when to use each tool, key trade-offs, and how to combine both for optimal configuration management.
NVIDIA DCGM Exporter GPU Monitoring
Monitor GPU metrics with DCGM Exporter on K8s. Prometheus integration, Grafana dashboards, and alerting on utilization and temperature.
OpenShift OAuth Proxy Sidecar Guide
Protect K8s services with OpenShift OAuth proxy sidecar. Authentication, RBAC delegation, and SSO for internal dashboards.
OpenShift Routes vs Ingress Guide
Compare OpenShift Routes and Kubernetes Ingress. Covers edge, passthrough, and re-encrypt TLS termination, and when to use each option.
OpenShift SCC Security Context Guide
Configure OpenShift Security Context Constraints for pods. Restricted, anyuid, privileged SCCs, custom SCC, and migration to PSA.
TensorRT-LLM Kubernetes Deployment
Deploy TensorRT-LLM on K8s for optimized inference. Engine building, model conversion, and serving with Triton Inference Server.
vLLM Deployment Kubernetes Guide
Deploy vLLM inference engine on K8s. Model loading, tensor parallelism, continuous batching, and OpenAI-compatible API setup.
AI Resource Allocation Optimization
Optimize GPU and memory allocation for AI workloads on Kubernetes. Right-size GPU requests, bin-packing strategies, gang scheduling.
AI ML Security and Compliance Kubernetes
Secure AI and ML workloads on Kubernetes with model encryption, data governance, audit logging, network isolation for training jobs.
CNCF AI Projects Landscape Kubernetes
A project-by-project tour of the CNCF AI ecosystem for Kubernetes, including Kubeflow, KServe, Katib, Feast, Volcano, Kueue, and KAITO.
Dell Switch RoCEv2 PFC ECN DSCP
Configure Dell OS10 switches for lossless RoCEv2 with PFC, ECN, WRED, and DSCP-to-traffic-class mapping. Priority 3 for RDMA traffic classes 24 and 26.
Distributed Training TensorFlow PyTorch
Run distributed training jobs on Kubernetes with TensorFlow and PyTorch. Training Operator, multi-worker strategies, NCCL configuration.
ECN MachineConfig OpenShift Nodes
Enable ECN (Explicit Congestion Notification) on OpenShift nodes via MachineConfig for lossless RoCEv2 RDMA networking. Sysctl and Mellanox NIC configuration.
Feast Feature Store Kubernetes
Deploy Feast feature store on Kubernetes for ML feature management. Offline and online stores, feature serving, point-in-time joins.
GitLab Runner Helm Kubernetes Executor
Deploy GitLab Runner on Kubernetes with Helm. Configure concurrent jobs, internal registry, PodMonitor metrics, scale-to-zero, security contexts.
KAITO AI Model Inference Kubernetes
Deploy AI models with KAITO (Kubernetes AI Toolchain Operator) for automated GPU provisioning, model serving, and inference workload management.
Katib Hyperparameter Tuning Kubernetes
Automate hyperparameter tuning with Katib on Kubernetes. Bayesian optimization, random search, grid search, early stopping.
KnativeServing for AI Inference OpenShift
Configure KnativeServing with scale-to-zero, GPU scheduling features, Kourier ingress, and custom domain templates for AI inference workloads on OpenShift.
KServe Model Serving Kubernetes
Deploy ML models with KServe for serverless inference on Kubernetes. InferenceService, scale-to-zero, canary rollouts, model transformers.
Kubeflow ML Platform Setup Kubernetes
Deploy Kubeflow as a production-ready ML platform on Kubernetes. Notebooks, pipelines, training operators, and model serving with KServe for end-to-end MLO.
AI Cost Management on Kubernetes
Control AI infrastructure costs on Kubernetes with GPU utilization tracking, chargeback per team, spot instance strategies, right-sizing recommendations.
AI Inference Optimization Kubernetes
Optimize AI inference performance on Kubernetes. Request batching, KV cache tuning, speculative decoding, continuous batching.
AI Workload Monitoring Kubernetes
Monitor AI and GPU workloads on Kubernetes with DCGM Exporter, Prometheus, and Grafana. GPU utilization, memory usage, inference latency.
API Priority and Fairness K8s Guide
Configure Kubernetes API Priority and Fairness to protect the API server. Covers FlowSchemas, PriorityLevelConfigurations, and request concurrency tuning.
Argo Rollouts Canary Blue-Green K8s
Progressive delivery with Argo Rollouts on Kubernetes. Canary, blue-green, analysis templates, and experiment-based promotion for safe deployments.
Canary Deployments with Flagger
Automate canary deployments in Kubernetes using Flagger with Istio, Linkerd, or NGINX ingress. Progressive traffic shifting, metric analysis.
cert-manager Advanced Configuration
Advanced cert-manager patterns for Kubernetes. Wildcard certificates, DNS-01 challenges, certificate rotation, cross-namespace sharing.
Cilium Network Policies Kubernetes
Advanced network policies with Cilium on Kubernetes. L7 HTTP-aware policies, DNS-based egress, identity-based security, cluster-wide policies.
ConfigMap Reload Patterns Kubernetes
Implement automatic ConfigMap reload in Kubernetes using volume projection, Reloader operator, checksum annotations, and inotify sidecars.
Immutable ConfigMaps and Secrets
Use immutable ConfigMaps and Secrets for performance and safety in Kubernetes. Reduce API server load, prevent accidental changes.
Container Runtime Comparison K8s
Compare Kubernetes container runtimes: containerd vs CRI-O vs Kata Containers. Performance, security, and use cases for each runtime in production.
CoreDNS Customization Guide Kubernetes
Customize CoreDNS with forward zones, rewrite rules, cache tuning, and stub domains. Troubleshoot DNS resolution failures and optimize query performance in.
Cosign Image Signing Kubernetes
Verify container image signatures with Cosign and Sigstore on Kubernetes. Policy enforcement with Kyverno, supply chain security, and SBOM attestation.
CRD Development Kubernetes Guide
Design and implement Kubernetes Custom Resource Definitions. Schema validation, status subresource, printer columns, conversion webhooks.
Kubernetes CronJob: Schedule, Timezone, Best Practices
Kubernetes CronJob guide: cron syntax, timeZone, concurrencyPolicy, startingDeadlineSeconds, history and TTL cleanup, manual runs, suspend and monitoring.
Crossplane Infrastructure as Code on Kubernetes
Provision AWS, GCP and Azure resources from Kubernetes with Crossplane: providers, ProviderConfig, XRDs, pipeline Compositions, claims and GitOps.
Build Custom CSI Drivers Kubernetes
Develop custom Container Storage Interface drivers for Kubernetes. CSI spec, controller and node plugins, volume lifecycle, and testing with csi-sanity.
Custom Metrics with Prometheus Adapter
Expose application metrics to Kubernetes HPA via Prometheus Adapter. Configure custom.metrics.k8s.io for HTTP requests per second, queue depth.
Custom Scheduler Kubernetes Guide
Build and deploy custom Kubernetes schedulers for specialized workloads. Scheduler profiles, extender webhooks, scoring plugins.
DaemonSet Update Strategies Kubernetes
Configure DaemonSet rolling updates with maxUnavailable, OnDelete strategy, partition rollouts, and canary updates for node-level workloads like log collec.
DNS Debugging Kubernetes Guide
Debug Kubernetes DNS issues systematically. CoreDNS troubleshooting, ndots configuration, search domains, and resolving slow DNS lookups.
EndpointSlices and Service Topology
Understand EndpointSlices for scalable service discovery in Kubernetes. Covers topology-aware routing and traffic localization for large clusters.
Ephemeral Storage Management Guide
Manage ephemeral storage in Kubernetes with emptyDir size limits, ephemeral-storage requests and limits, and eviction thresholds.
etcd Maintenance Operations Kubernetes
Perform etcd maintenance for Kubernetes clusters. Defragmentation, compaction, snapshot backup, member health checks, and performance monitoring with etcdctl.
ExternalDNS Automation Kubernetes
Automate DNS record management with ExternalDNS on Kubernetes. Route53, CloudDNS, and Azure DNS integration for Ingress, Service, and Gateway resources.
Gateway API HTTPRoute Kubernetes
Configure HTTPRoute for Kubernetes Gateway API. Path matching, header-based routing, traffic splitting, URL rewriting, and request mirroring.
GPU Node Provisioning Kubernetes
Automate GPU node provisioning for Kubernetes with Karpenter, Cluster Autoscaler, and cloud-specific node pools for AI and ML workloads.
GPU Operator Advanced Configuration
Advanced NVIDIA GPU Operator configuration on Kubernetes. Driver containers, CUDA toolkit, GDS, GPUDirect RDMA, MIG manager, DCGM Exporter.
Helm Chart Testing CI/CD Guide
Test Helm charts with helm test, helm lint, chart-testing, and conftest. Unit tests, integration tests, and CI/CD pipeline integration for chart quality.
DNS Autoscaling and CoreDNS Scaling
Scale CoreDNS horizontally with dns-autoscaler and proportional autoscaling. Tune cache size, configure node-local DNS cache.
HPA Custom Metrics Scaling Guide
Scale Kubernetes workloads on custom Prometheus metrics with HPA. Prometheus Adapter, external metrics, and request-rate-based scaling for web services.
Istio Traffic Management Kubernetes
Advanced Istio traffic management on Kubernetes. VirtualService routing, DestinationRule load balancing, traffic mirroring, fault injection.
Jaeger Tracing Kubernetes Guide
Deploy Jaeger for distributed tracing on Kubernetes. Collector, storage backends, sampling strategies, and trace analysis for microservice debugging.
Job Completion Patterns Kubernetes
Configure Kubernetes Jobs with indexed completions, work queues, parallel processing, backoff limits, and TTL cleanup for batch workloads.
Job TTL Cleanup Kubernetes Guide
Automate Kubernetes Job cleanup with TTL controller. ttlSecondsAfterFinished, CronJob history limits, and preventing completed Job accumulation.
KEDA: Event-Driven Autoscaling for Kubernetes
Install KEDA with Helm and scale on Kafka lag, RabbitMQ, Prometheus, cron or HTTP. ScaledObject, ScaledJob, TriggerAuthentication, scale-to-zero.
Kustomize Advanced Patterns Kubernetes
Advanced Kustomize patterns for Kubernetes configuration management. Strategic merge patches, JSON patches, components, replacements.
Kustomize Overlays Guide Kubernetes
Manage Kubernetes manifests with Kustomize overlays. Base and overlay patterns, strategic merge patches, JSON patches, ConfigMap generators.
MetalLB Bare Metal Load Balancer
Deploy MetalLB for LoadBalancer services on bare-metal Kubernetes. L2 mode, BGP mode, IP address pools, and integration with Cilium and Gateway API.
Multi-Cluster Service Mesh Kubernetes
Connect multiple Kubernetes clusters with service mesh federation. Istio multi-cluster, Linkerd multi-cluster, cross-cluster service discovery.
Multi-Tenancy Namespaces Kubernetes
Implement multi-tenancy on Kubernetes with namespaces. Resource quotas, network policies, RBAC isolation, and hierarchical namespaces for team separation.
Network Debugging Tools Kubernetes
Debug Kubernetes networking with tcpdump, netshoot, iptables tracing, conntrack inspection, and DNS resolution testing techniques.
NetworkPolicy Recipes Cookbook K8s
Common Kubernetes NetworkPolicy recipes. Default deny, allow DNS, namespace isolation, database access, and external egress patterns for zero-trust networking.
NetworkPolicy Zero Trust Kubernetes
Implement zero-trust networking with Kubernetes NetworkPolicies. Default-deny ingress and egress, namespace isolation, DNS egress rules, and Cilium L7 policies.
NFS Dynamic Provisioner Kubernetes
Deploy NFS dynamic provisioner for ReadWriteMany storage on Kubernetes. NFS CSI driver, StorageClass configuration, and performance tuning with nconnect.
Node Affinity Scheduling Kubernetes
Configure node affinity rules for Kubernetes pod scheduling. Required vs preferred affinity, label selectors, and combining with taints and tolerations.
Node Maintenance and Drain Operations
Safely drain Kubernetes nodes for maintenance with cordon, drain, and uncordon. Handle PodDisruptionBudgets, DaemonSets, and local storage.
OPA Gatekeeper Policy Enforcement
Enforce policies with OPA Gatekeeper on Kubernetes. ConstraintTemplates, Constraints, dry-run mode, audit, and common policies for security compliance.
OpenTelemetry Collector Kubernetes
Deploy the OpenTelemetry Collector on Kubernetes for unified observability. Traces, metrics, and logs pipeline configuration, auto-instrumentation.
PDB Rolling Update Coordination K8s
Coordinate PodDisruptionBudgets with rolling updates on Kubernetes. minAvailable vs maxUnavailable, voluntary disruptions, and upgrade-safe configurations.
Persistent Volume Expansion Kubernetes
Expand PersistentVolumeClaims online without downtime. allowVolumeExpansion, filesystem resize, StatefulSet PVC expansion.
Pod Affinity and Anti-Affinity Guide
Configure pod affinity and anti-affinity rules for Kubernetes scheduling. Co-locate cache with app, spread replicas across nodes.
Pod Disruption Budget Strategies
Configure PodDisruptionBudgets for zero-downtime maintenance. MinAvailable vs maxUnavailable strategies for stateful workloads, GPU training.
Pod Topology Spread Advanced Patterns
Advanced topology spread constraints for Kubernetes. Multi-zone HA, GPU rack awareness, combined with affinity rules, and minDomains for scaling clusters.
Prometheus Alerting Rules Kubernetes
Write effective Prometheus alerting rules for Kubernetes. Alertmanager routing, inhibition, silence, and production-ready alert templates for CPU, memory.
PV Reclaim Policy Retain vs Delete
Understand Kubernetes PersistentVolume reclaim policies. Retain vs Delete vs Recycle, recovering data from released PVs.
RBAC Least Privilege Kubernetes
Configure Kubernetes RBAC with least-privilege Roles, ClusterRoles, and service account bindings. Audit permissions, restrict secrets access.
Fix RBAC Permission Errors K8s
Debug Kubernetes RBAC permission errors. kubectl auth can-i, impersonation testing, ClusterRole aggregation, and common permission mistakes.
CPU and Memory Limits Deep Dive
Deep dive into Kubernetes CPU and memory management. CFS bandwidth throttling, OOMKill scoring, cgroup v2 behavior, memory.high vs memory.
Sealed Secrets Management Kubernetes
Manage secrets securely with Bitnami Sealed Secrets on Kubernetes. Encrypt secrets for Git storage, cluster-scoped and namespace-scoped sealing.
Service Accounts and Workload Identity
Configure Kubernetes service accounts with cloud workload identity for AWS IRSA, GCP Workload Identity, and Azure AD pod federation.
Service Mesh Comparison Kubernetes
Compare Istio, Linkerd, and Cilium service mesh for Kubernetes. mTLS, observability, traffic management, resource overhead.
Storage Classes and Provisioners
Configure Kubernetes StorageClasses for dynamic volume provisioning. CSI drivers, reclaim policies, volume expansion, topology-aware provisioning.
Grafana Tempo Tracing Kubernetes
Deploy Grafana Tempo for cost-effective distributed tracing on Kubernetes. Object storage backend, TraceQL queries, and Grafana integration.
Thanos HA Prometheus Kubernetes
Scale Prometheus with Thanos for high availability and long-term storage on Kubernetes. Sidecar, Store, Compactor, and Query frontend for multi-cluster metrics.
Topology-Aware Routing Kubernetes
Enable topology-aware routing for cost optimization on Kubernetes. Zone-local traffic, EndpointSlice hints, and reducing cross-zone data transfer costs.
Velero Backup and Restore Kubernetes
Back up and restore Kubernetes applications with Velero. Scheduled backups, cross-cluster migration, selective restore, and disaster recovery workflows.
VPA Resource Right-Sizing Kubernetes
Use Vertical Pod Autoscaler to right-size Kubernetes resource requests and limits. Off mode for recommendations, Auto mode for live adjustment.
Kueue Job Queuing Fair Sharing Kubernetes
Implement fair-share GPU job queuing with Kueue on Kubernetes. ClusterQueues, LocalQueues, ResourceFlavors, and cohort-based borrowing for multi-team AI cl.
LLM Deployment Challenges Kubernetes
The five common LLM deployment failure modes on Kubernetes: GPU memory, cold starts, latency, autoscaling, and multi-node inference, with worked YAML.
Mellanox RoCE DSCP QoS DaemonSet
Deploy a DaemonSet that configures DSCP trust, PFC priority 3, and RoCE ToS 106 on all Mellanox PFs. Uses DOCA driver image with ibdev2netdev, mlnx_qos.
ML Pipeline Automation Kubernetes
Automate ML pipelines on Kubernetes with Kubeflow Pipelines, Argo Workflows, and Tekton. Data preprocessing, training, evaluation, model registration.
ModelMesh Multi-Model Serving Kubernetes
Deploy hundreds of ML models on shared GPU infrastructure with ModelMesh. Intelligent model loading and unloading, memory management, routing.
Multi-Cloud AI Workloads Kubernetes
Run AI workloads across multiple cloud providers with Kubernetes. GPU instance availability, spot pricing arbitrage, model portability.
NCCL SR-IOV GDS PyTorch Configuration
Configure NCCL with SR-IOV RDMA and GPUDirect Storage on Kubernetes. PyTorch 25.11 container with NCCL 2.28, CUDA 13, MOFED 5.4, GDRCopy 2.
RDMA Network QoS Traffic Classes DCQCN
Complete RDMA network QoS architecture with traffic classes TC0-TC6, DSCP and dot1p mappings, PFC, ECN, WRED, and DCQCN congestion control for lossless RoC.
RoCEv2 End-to-End Lossless Stack
Complete RoCEv2 lossless fabric configuration from GPU node to switch and back. Dell OS10 switches, Mellanox NICs, OpenShift MachineConfig, PFC, ECN.
AIPerf Offline vLLM Benchmarking
Benchmark vLLM inference with AIPerf in air-gapped Kubernetes clusters. Use dummy tokenizers, offline mode, custom endpoints.
ib_write_bw RDMA Bandwidth Testing
Run ib_write_bw from perftest on Kubernetes GPU nodes: SR-IOV device selection, GPUDirect RDMA, multi-QP scaling, full CLI reference, and RoCE tuning.
Disable OperatorHub Default Sources
Disable default OperatorHub catalog sources in OpenShift for air-gapped clusters. Use OperatorHub CR to disable individual or all sources with Ansible auto.
Run:ai Distributed vLLM with NCCL
Deploy distributed vLLM inference on Run:ai with NCCL over NVLink and RDMA. Tensor parallelism across GPUs with NCCL debug logging, SR-IOV networking.
Databases on K8s: Memory Overcommit
Why vm.overcommit_memory must be disabled for production databases on Kubernetes. Configure guaranteed QoS, disable swap.
DOCA Perftest RDMA Benchmarking
Run NVIDIA DOCA perftest on Kubernetes to benchmark RDMA bandwidth and latency between GPU nodes. Traffic patterns, GPUDirect memory modes.
mlnx_qos QoS on MOFED Containers
Configure RDMA QoS with mlnx_qos from MOFED containers on Kubernetes. Set PFC, ETS, DSCP trust mode, and validate lossless RoCE traffic classes on ConnectX.
RetinaNet GPU Training on Kubernetes
Train RetinaNet object detection models on Kubernetes with unlimited memlock for RDMA, CRI-O ulimit configuration, and multi-GPU distributed training.
Kubernetes Certificate Signing Requests
Use the Kubernetes CSR API to issue, approve, and manage TLS certificates. Automate certificate workflows for services, users, and kubelet rotation.
Kubernetes startupProbe Configuration Guide
Configure startupProbe for slow-starting containers to prevent premature kills. Understand interaction with liveness and readiness probes.
Kubernetes DaemonSet Update Strategies
Configure DaemonSet rolling updates with maxUnavailable and maxSurge. Understand OnDelete vs RollingUpdate strategies for node-level workloads.
EndpointSlice Service Discovery
Understand Kubernetes EndpointSlices for scalable service discovery. Compare with legacy Endpoints and configure topology-aware routing.
HPA v2 Multiple Metrics Scaling Guide
Configure HorizontalPodAutoscaler v2 with CPU, memory, custom, and external metrics. Control scaling behavior with stabilization windows.
Kubernetes imagePullPolicy Guide
Configure imagePullPolicy correctly: Always, Never, and IfNotPresent behavior. Understand digest pinning and tag mutability implications.
Kubernetes LimitRange Defaults
Set default resource requests and limits per namespace with LimitRange. Enforce min/max constraints and prevent unbounded resource consumption.
Multi-Container Pod Patterns: Sidecar, Ambassador, Adapter
Kubernetes multi-container pod patterns with YAML: sidecar log shipper, ambassador DB proxy and pooler, adapter metrics/log transformer, native sidecars.
Kubernetes Egress Network Policies
Control outbound traffic from pods with egress NetworkPolicies. Allow DNS, block internet access, and restrict pod-to-pod communication by namespace.
Kubernetes Node Affinity Guide
Schedule pods to specific nodes with requiredDuringScheduling and preferredDuringScheduling node affinity. Control placement with expressions and weights.
PersistentVolume Reclaim Policies
Understand Retain, Delete, and Recycle reclaim policies for PersistentVolumes. Manage PV lifecycle after PVC deletion and recover bound volumes.
Kubernetes Projected Volumes Explained
Combine Secrets, ConfigMaps, Downward API and bound ServiceAccount tokens into one projected volume mount. YAML, permissions, token audience, gotchas.
Kubernetes Rolling Update: maxSurge & maxUnavailable
Kubernetes Deployment rolling update strategy: maxSurge and maxUnavailable math, zero-downtime settings, preStop drain, rollout status and rollback.
Topology-Aware Service Routing
Enable zone-aware traffic routing in Kubernetes to reduce cross-zone latency and egress costs. Configure topology hints and traffic distribution.
ValidatingAdmissionPolicy with CEL
Replace admission webhooks with ValidatingAdmissionPolicy and CEL expressions for in-process, low-latency Kubernetes policy enforcement.
SR-IOV NetworkNodePolicy for RDMA
Configure SriovNetworkNodePolicy on OpenShift to create RDMA-capable VFs on Mellanox ConnectX NICs for GPUDirect RDMA and high-performance AI networking.
cert-manager OVH DNS-01 Wildcard TLS
Configure cert-manager with OVH DNS-01 challenge for automated wildcard TLS certificates on k3s. Let's Encrypt production certificates with zero downtime r.
Cilium eBPF Gateway API Hubble k3s
Install Cilium with eBPF dataplane, Gateway API support, and Hubble observability on k3s. Replace kube-proxy with eBPF, configure GatewayClass.
Fix 502 Bad Gateway in Kubernetes Ingress
Fix 502 Bad Gateway in Kubernetes and NGINX Ingress: empty endpoints, selector/port mismatch, rollout termination races, timeouts, and protocol mismatch.
Full GitOps Pipeline k3s to Production
End-to-end GitOps pipeline: git push triggers Gitea Actions build, pushes to quay.io, Octopus Deploy creates release with ephemeral preview.
Gateway API HTTPRoutes TLS on k3s
Configure Gateway API HTTPRoutes with TLS termination on k3s using Cilium. Route traffic to multiple services with wildcard certificates and HTTP-to-HTTPS .
Gitea Actions Runner Push to Quay
Deploy Gitea Actions runner on k3s to build container images and push to quay.io. DinD-less builds with Kaniko, automated CI pipelines for every git push.
Gitea PostgreSQL Valkey on k3s
Deploy self-hosted Gitea with PostgreSQL and Valkey (Redis fork) on k3s. Complete Git forge with Actions CI runner, container registry, and package management.
Helm Hook Delete Policy Explained
Configure Helm hook delete policies: before-hook-creation, hook-succeeded, hook-failed. Control Job cleanup after install, upgrade, and test hooks.
Hugo nginx Static Site on a k3s Cluster
Deploy a Hugo static site with nginx on k3s. Multi-stage build, Brotli compression, security headers, and automated redeployment on git push via Gitea Actions.
Install Kubernetes on Fedora with kubeadm
Step-by-step guide to install Kubernetes on Fedora Linux using kubeadm. Disable swap, configure containerd, install kubeadm kubelet kubectl.
Kairos k3s on Hetzner CPX42: Immutable Bootstrap
Deploy an immutable Kairos-based k3s cluster on Hetzner Cloud CPX42. Automated provisioning with cloud-init, immutable OS upgrades.
kubectl cp Copy Files to and from Pods
Copy files between local machine and Kubernetes pods with kubectl cp. Supports containers, namespaces, tar-based transfer, and common troubleshooting.
kubectl logs View Pod Logs Guide
View and stream Kubernetes pod logs with kubectl logs. Multi-container pods, previous crashes, label selectors, timestamps, and log aggregation patterns.
kubectl rollout restart Deployment
Restart Kubernetes Deployments, StatefulSets, and DaemonSets with kubectl rollout restart. Zero-downtime rolling restart without changing pod spec.
Kubernetes Cluster Autoscaler: Setup and Tuning
Install and tune Kubernetes Cluster Autoscaler on EKS, GKE and AKS: scale-down flags, expanders, max-node-provision-time, GPU scale-to-zero.
Create ConfigMap from File in Kubernetes
Create Kubernetes ConfigMaps from files, directories, and env files with kubectl. Mount as volumes or inject as environment variables in pods.
Continuous Profiling with Pyroscope
Deploy Pyroscope on Kubernetes for continuous CPU and memory profiling. Identify performance bottlenecks in production without overhead.
Kubernetes CSI VolumeSnapshot: Create and Restore
Create and restore Kubernetes CSI volume snapshots: snapshot controller, VolumeSnapshotClass, restore to a new PVC, PVC cloning, scheduled snapshots.
Kubernetes DNS Policy ClusterFirstWithHostNet
Configure Kubernetes DNS policies: ClusterFirst, ClusterFirstWithHostNet, Default, and None. Fix DNS resolution for hostNetwork pods and custom nameservers.
Kubernetes Downward API: Pod Metadata in Env
Expose pod metadata to containers using Kubernetes Downward API. Access pod name, namespace, node name, labels, annotations.
Generic Ephemeral Volumes in Kubernetes
Use generic ephemeral volumes for per-pod temporary storage with CSI driver features. Scratch space, caching, and temp data without pre-provisioned PVCs.
Gateway API gRPC Routes on Kubernetes
Configure Kubernetes Gateway API GRPCRoute for gRPC traffic routing. Service-level matching, header-based routing, and traffic splitting for gRPC services.
Kubernetes hostPath Volume Guide
Use hostPath volumes to mount node filesystem paths into pods. Types, security risks, use cases for DaemonSets, and safer alternatives like local PVs.
HPA Behavior and Scaling Policies
Configure HPA scaling behavior with stabilization windows, scaling policies, and rate limiting. Fine-tune scale-up and scale-down speed.
HPA Container Resource Metrics
Configure HPA to scale based on individual container metrics instead of pod-level averages. Target specific containers in multi-container pods.
Kubernetes HPA Custom Metrics with Prometheus
Configure Kubernetes HPA with custom Prometheus metrics. Prometheus Adapter setup, custom and external metrics, scaling on request latency, queue depth.
Kubernetes kustomization.yaml Guide
Write kustomization.yaml files for Kubernetes resource management. Overlays, patches, generators, transformers, and multi-environment deployment patterns.
K8s Let's Encrypt Ingress with cert-manager
Automate TLS certificates for Kubernetes Ingress using cert-manager and Let's Encrypt. ClusterIssuer setup, HTTP-01 and DNS-01 challenges, and auto-renewal.
Kubernetes Liveness Probe Best Practices
Configure Kubernetes liveness probes correctly. Best practices for httpGet, exec, and tcpSocket probes. Avoid database checks, thundering herd.
Multidimensional Pod Autoscaler (MPA)
Configure Google's Multidimensional Pod Autoscaler to scale both horizontally and vertically simultaneously. Combines HPA and VPA logic in one controller.
Kubernetes NetworkPolicy Default Deny Egress
Implement Kubernetes NetworkPolicy default deny egress rules. Block all outbound traffic, then allow specific destinations: DNS, external APIs.
Check Kubernetes Node Status with kubectl
Check and troubleshoot Kubernetes node status with kubectl. Node conditions (Ready, MemoryPressure, DiskPressure), NotReady debugging, and capacity monitoring.
OpenTelemetry Auto-Instrumentation
Configure OpenTelemetry Operator auto-instrumentation to inject tracing into pods without code changes. Supports Java, Python, Node.js, .NET, and Go.
K8s PriorityClass and Missing Pod Priority
Fix missing pod priority in Kubernetes. PriorityClass configuration, preemption behavior, system-critical classes, and scheduling order for GPU workloads.
Kubernetes Release Cycle and Version Support
Kubernetes release cycle explained: 3 releases per year, 14-month support window, patch cadence, version skew policy, and upgrade planning timeline.
Kubernetes Service Account Tokens: kubectl create token
Create Kubernetes service account tokens after 1.24: kubectl create token, projected volumes, custom audiences, long-lived Secret tokens, and expiry limits.
Kubernetes Service DNS Resolution
How Kubernetes Service DNS works: naming conventions, FQDN format, headless services, cross-namespace resolution, and DNS debugging with nslookup.
Kubernetes Multi-Cluster Management: Fleet Patterns
Manage Kubernetes fleets: kubectl contexts/kubectx, Argo CD ApplicationSets, Rancher Fleet, OpenShift ACM, Cluster API, and cross-cluster service mesh.
Mutagen Kubernetes File Sync Guide
Sync files between local machine and Kubernetes pods with Mutagen. Real-time bidirectional sync for development, hot-reload workflows.
NCCL Topology Dump File for GPU Debugging
Use NCCL_TOPO_DUMP_FILE to capture and analyze GPU interconnect topology in Kubernetes. Debug NVLink, NVSwitch, and PCIe connection paths.
Octopus Deploy 2025.4 on Kubernetes
Deploy Octopus Deploy 2025.4 with MSSQL and Kubernetes agent on k3s. Release orchestration with ephemeral preview environments, approval gates.
Record kubectl Sessions for Kubernetes
Record and replay kubectl sessions for auditing, documentation, and training. Terminal recording with asciinema, script, and kubectl plugins for OpenShift.
Run:ai Distrib. vLLM Inference Multimodal LLMs
Deploy multimodal LLMs with Run:ai distributed inference and vLLM on Kubernetes. Tensor parallelism, NCCL over NVLink, GPUDirect RDMA.
DCB on Mellanox ConnectX for Lossless Ethernet
Configure Data Center Bridging (DCB) on Mellanox ConnectX NICs. DCBX negotiation, PFC, ETS, and CN for lossless RoCE Ethernet in Kubernetes AI clusters.
ETS, PFC & DSCP Trust on Mellanox Quickstart
Quick reference for enabling ETS queues, PFC, DSCP trust, and DSCP-to-priority mapping on Mellanox ConnectX NICs. Three commands for lossless RoCE Ethernet.
Kubernetes Day 2: Where the Leverage Kicks In
Why Kubernetes pays off after initial setup. Day 2 operations leverage: auto-scaling, self-healing, rolling updates, observability.
Deploy a New App in 5 Minutes on Kubernetes
Deploy a production-ready application in 5 minutes on an existing Kubernetes cluster. Deployment, Service, Ingress, TLS, autoscaling.
Namespace Templates: Instant Envs in K8s
Create production-ready namespace templates for instant environment provisioning. One command deploys namespace, RBAC, quotas, network policies, and monitoring.
Platform Engineering: Golden Paths in K8s
Build golden paths for developers on Kubernetes. Internal developer platform with Backstage, self-service namespaces, pre-built Helm charts.
Reusable CI/CD Pipeline Templates for K8s
Build once, deploy anything. Reusable CI/CD pipeline templates for Kubernetes using GitHub Actions, GitLab CI, and Tekton.
NMState & nmstatectl: Node Network Management
Manage node networking with NMState declarative API and nmstatectl CLI. Create NodeNetworkConfigurationPolicy manifests, verify with nmstatectl.
PFC Configuration on Mellanox ConnectX NICs
Enable Priority Flow Control on Mellanox ConnectX-6/7 NICs for lossless RoCE. mlnx_qos, cma_roce_mode, DSCP trust, ECN, and firmware-level PFC verification.
Access Zones on Scale-Out NAS for Kubernetes
Configure access zones on scale-out NAS (Dell PowerScale/Isilon) for Kubernetes persistent storage. Multi-tenant isolation, CSI driver setup.
Extended Resources & RDMA Shared Device Plugin
Kubernetes extended resources for RDMA devices using the shared device plugin. Advertise and schedule InfiniBand and RoCE NICs without SR-IOV using k8s-rdm.
Kubernetes Route and Ingress Management Guide
Manage OpenShift Routes and Kubernetes Ingress resources. TLS termination, path-based routing, weighted traffic splitting.
Automate Secret and Key Rotation in Kubernetes
Automate TLS certificate and secret key rotation in Kubernetes. CronJob-based rotation, external-secrets-operator, cert-manager auto-renewal.
Automate User Onboarding & Offboarding in K8s
Automate Kubernetes user onboarding and offboarding. RBAC provisioning, namespace creation, quota assignment, OIDC group sync, and access revocation scripts.
IOMMU on K8s: GPU Passthrough and SR-IOV
Enable and configure IOMMU for GPU passthrough, SR-IOV, and VFIO on Kubernetes. Kernel parameters, IOMMU groups, device isolation, and troubleshooting guide.
Kubernetes and OpenShift Major Version Upgrade
Upgrade Kubernetes minor versions (1.31→1.32) and OpenShift (4.16→4.17, EUS-to-EUS). API deprecation migration, etcd backup.
Kubernetes and OpenShift Patch Updates
Apply patch updates to Kubernetes and OpenShift clusters safely. Patch version upgrades for control plane, kubeadm, kubelet.
Kubernetes and OpenShift Upgrade Strategy
Complete upgrade strategy for Kubernetes and OpenShift clusters. Understand patch, minor, and major versions, upgrade paths.
Deploy MariaDB on OpenShift with SCC
Deploy MariaDB on OpenShift with proper Security Context Constraints. Configure anyuid SCC, persistent storage, custom my.
OpenShift 4.20: New Features and Upgrade Guide
OpenShift 4.20 (EUS) new features, Kubernetes 1.33 alignment, the upgrade path from 4.18, and what administrators need to know before upgrading.
OpenShift 4.21: New Features and Upgrade Guide
OpenShift 4.21 new features, K8s 1.34 alignment, upgrade from 4.20. Non-EUS release with latest innovations: in-place pod resize GA, DRA improvements.
OpenShift MachineConfig and MCP Deep Dive
Master MachineConfig and MachineConfigPool on OpenShift. Configure kernel args, files, systemd units, and manage rolling node updates with MCP strategies.
OpenShift SCC: Security Context Constraints
Configure Security Context Constraints on OpenShift. Manage SCCs for pods requiring privileged access, host networking, custom UID/GID, and volume types.
Configure PFC with NMState on Kubernetes
Enable Priority Flow Control (PFC) for lossless RDMA using NMState and NodeNetworkConfigurationPolicy. Configure DSCP-to-priority mapping, ECN, and RoCEv2 QoS.
Inter-Node Tensor Parallelism on Kubernetes
Split a single LLM across multiple physical servers using tensor parallelism. Configure vLLM, NIM, and Ray for inter-node TP with NCCL over RDMA or TCP.
kubectl Config: Manage Contexts and Clusters
Manage kubectl contexts with kubectl config commands. Switch clusters, delete contexts, rename entries, and merge multiple kubeconfig files safely.
K8s imagePullSecrets: Private Registry Auth
Configure imagePullSecrets for pulling container images from private registries. Create docker-registry secrets, attach to pods and ServiceAccounts.
Triton vs vLLM (and TensorRT-LLM) for LLM Serving
Triton Inference Server vs vLLM for LLM serving on Kubernetes: architecture, TensorRT-LLM vs vLLM backends, APIs, multi-model support, and when to pick each.
Verify NCCL RDMA Traffic with Debug Logging
Prove NCCL uses RDMA for GPU communication on Kubernetes. Use NCCL_DEBUG and NCCL_DEBUG_SUBSYS=ALL to verify InfiniBand, RoCE.
Cluster API on AWS: Provision EKS Clusters
Use Cluster API (CAPI) to provision and manage EKS clusters declaratively. Install clusterctl, configure CAPA provider, and automate cluster lifecycle on AWS.
ClusterClass: Reusable Cluster API Templates
Define reusable ClusterClass templates in Cluster API for consistent multi-cluster provisioning. Variables, patches, and topology-based cluster creation.
Cluster API on vSphere: On-Prem K8s Clusters
Provision on-premises Kubernetes clusters on vSphere using Cluster API (CAPV). VM templates, control plane HA, node scaling, and day-2 operations.
Hardware Attestation for Kubernetes Workloads
Implement remote attestation for Kubernetes workloads. Verify TEE integrity with attestation services, release secrets to verified enclaves.
Confidential Containers with Kata
Deploy confidential containers using Kata Containers and TEEs on Kubernetes. Hardware attestation, encrypted container images.
CVE-2026-3865: CSI SMB Driver Path Traversal
Fix CVE-2026-3865 Kubernetes CSI SMB driver path traversal vulnerability. Upgrade to v1.20.1, detect malicious PersistentVolumes.
Alertmanager Routing, Grouping, and Silences
Configure Alertmanager routing trees, receiver integrations, inhibition rules, silences, and alert grouping for production Kubernetes monitoring stacks.
K8s Golden Signals: SLI and SLO Monitoring
Implement Google SRE golden signals on Kubernetes. Define SLIs, set SLO targets, configure error budgets, and build SLO dashboards with Prometheus and Sloth.
Kubernetes Log Aggregation with Grafana Loki
Aggregate Kubernetes logs with Grafana Loki 3.x: Helm install, Alloy collector (Promtail replacement), S3 storage, retention, LogQL queries and log alerts.
K8s Metrics Server: Install and Configure
Install and configure Kubernetes Metrics Server for kubectl top, HPA autoscaling, and resource monitoring. Troubleshoot common metrics-server errors and TL.
Network Observability with Cilium Hubble
Monitor Kubernetes network traffic with Cilium Hubble. Service maps, DNS visibility, HTTP flow logs, network policy auditing, and Hubble UI dashboards.
K8s Pod Resource Monitoring with Grafana
Monitor Kubernetes pod CPU and memory with Grafana dashboards. Prometheus queries for resource usage, request vs limit tracking.
NCCL_IB_DISABLE Environment Variable
NCCL_IB_DISABLE environment variable explained. Set NCCL_IB_DISABLE=1 for Ethernet-only clusters, debug InfiniBand errors, and tune GPU communication.
vLLM Inference Optimization on Ascend NPU: K8s
Optimize vLLM inference on Huawei Ascend NPUs in Kubernetes: tensor parallelism sizing, memory tuning, and OOM prevention for Atlas 300I/910B.
Deploy vLLM OpenAI Container on Kubernetes
Deploy the vLLM OpenAI-compatible server container on Kubernetes. Pull ghcr.io/vllm-project/vllm-openai, configure GPU resources, model loading.
AI-Native Development Platforms on Kubernetes
Run AI coding assistants, AI review bots, automated test generation, and AI-driven CI/CD as private Kubernetes workloads.
AI Infrastructure Cost Optimization
Optimize AI infrastructure costs on Kubernetes. GPU sharing, spot instances, inference batching, model quantization, token economics.
AI Content Watermarking on Kubernetes
Deploy AI-generated content watermarking on Kubernetes. Invisible watermarks, SynthID integration, detection APIs, image and text watermarking pipelines.
Agentic AI and Multi-Agent Systems
Deploy autonomous AI agents and multi-agent orchestration on Kubernetes. LangGraph, CrewAI, AutoGen, tool-calling agents, agent-to-agent communication.
AI Security Platforms on Kubernetes
Secure AI workloads on Kubernetes. Model supply chain security, prompt injection defense, LLM output filtering, AI RBAC, GPU isolation.
AI Supercomputing on Kubernetes GPU Clusters
Build AI supercomputing platforms on Kubernetes. Multi-node GPU training, NVIDIA DGX SuperPOD, InfiniBand RDMA, NCCL tuning, Blackwell clusters.
Autonomous Industrial Systems on Kubernetes
Orchestrate autonomous factories and logistics with Kubernetes. Digital twins, robot fleet coordination, industrial IoT pipelines, predictive maintenance.
Cilium Service Mesh: eBPF-Powered Kubernetes
Deploy Cilium service mesh on Kubernetes with eBPF. Sidecar-free mTLS, L7 traffic management, network policies, Hubble observability, and Gateway API support.
Confidential Computing: SGX and SEV-SNP
Deploy confidential containers on Kubernetes with Intel SGX and AMD SEV-SNP. Encrypted memory, attestation, confidential VMs, Kata Containers.
Data Monetization Platforms on Kubernetes
Build data monetization platforms on Kubernetes. Data marketplace APIs, usage-based billing, data mesh architecture, secure data sharing, and catalog services.
Data Sovereignty and Geopatriation
Implement data sovereignty and geopatriation on Kubernetes. Multi-region clusters, data residency policies, sovereign cloud, GDPR compliance.
Digital Provenance and Content Authenticity
Implement digital provenance on Kubernetes with C2PA content credentials. Verify AI-generated content, sign media pipelines.
Domain-Specific Language Models on Kubernetes
Deploy and fine-tune domain-specific LLMs on Kubernetes. Legal, healthcare, finance, and code models with LoRA fine-tuning, NIM serving, and RAG pipelines.
Flux vs ArgoCD: Kubernetes GitOps Compared
Compare Flux and ArgoCD for Kubernetes GitOps. Architecture, multi-tenancy, Helm support, UI, scalability, and when to choose each for production GitOps de.
GitOps for AI Workloads on Kubernetes
Deploy AI models with GitOps on Kubernetes. Version ML models in Git, ArgoCD for model rollouts, Flux for GPU cluster sync.
Helm Sprig add1 trim merge Functions
Helm Sprig add1 function increments integers in templates. Plus trim for whitespace removal and merge for combining dictionaries in Helm charts.
Helm Sprig print quote default Functions
Helm Sprig print function concatenates without spaces, quote wraps in double quotes, default provides fallback values. Template examples and patterns.
KEDA vs HPA: Event-Driven Autoscaling Explained
Compare KEDA and HPA for Kubernetes autoscaling. Scale on Kafka lag, Prometheus metrics, queue depth, cron, and custom events. KEDA vs HPA decision guide.
Kubernetes 1.35 and 1.36 Upgrade Checklist
Kubernetes 1.35 and 1.36 upgrade checklist with deprecated APIs, removed features, new GA capabilities, and step-by-step migration guide for production clu.
K8s AI Gateway: Inference Extension Guide
Use the Kubernetes AI Gateway and Inference Extension to route LLM traffic. Model-aware routing, load balancing across inference backends.
K8s ConfigMap Hot Reload Without Restart
Reload Kubernetes ConfigMaps without pod restarts, and fix ConfigMap changes not applied to pods: volume auto-update, subPath, Reloader, checksums.
Dynamic Resource Allocation for GPUs
Use Kubernetes Dynamic Resource Allocation to schedule GPUs. DRA ResourceClaims, partitionable devices, GPU sharing, and structured parameters for accelerators.
fsGroupChangePolicy OnRootMismatch: Fix Slow Mounts
Fix slow pod starts from recursive fsGroup chown: set fsGroupChangePolicy OnRootMismatch, check CSI fsGroupPolicy, and handle OpenShift SCC fsGroup.
Kubernetes Job Completions and Parallelism
Kubernetes Job completions vs parallelism with YAML: indexed jobs, work queues, backoffLimit, backoffLimitPerIndex, podFailurePolicy and successPolicy.
Kubernetes NetworkPolicy Default Deny Examples
Kubernetes NetworkPolicy default deny examples for ingress and egress: deny all, allow DNS, ingress controller, namespace isolation and a zero-trust baseline.
Kubernetes Pod Priority and Preemption (PriorityClass)
Kubernetes pod priority and preemption: PriorityClass YAML, preemptionPolicy Never, system-critical classes, tier design, quotas and preemption monitoring.
Kubernetes CPU 200m Memory 256Mi: Limits Format
Use Kubernetes container resources limits with cpu 200m and memory 256Mi. Copy YAML syntax, convert millicores and Mi/Gi, and avoid Mi vs M mistakes.
Kubernetes Startup Probes for Slow Containers
Configure Kubernetes startup probes for containers with long initialization. Separate startup from liveness checks, failureThreshold tuning.
Kueue for Batch Jobs and GPU Queues
Use Kueue to manage batch job queues on Kubernetes. GPU quota, fair sharing, priority queues, ML training workloads, and multi-tenant cluster scheduling.
Llama 2 70B Parameters & Memory: FP16 140GB
Llama 2 70B requires 140GB VRAM in FP16 (70B params × 2 bytes). FP8 uses 70GB, INT4 uses 35GB. Complete GPU options and Kubernetes deployment guide.
NCCL_SOCKET_IFNAME Environment Variable Guide
NCCL_SOCKET_IFNAME documentation for GPU training on Kubernetes. Network interface selection, bonding, InfiniBand, and NCCL timeout troubleshooting.
OpenShift Upgrade Planning for 2026
Plan OpenShift upgrades for 2026. EUS-to-EUS paths, operator compatibility, pre-upgrade checks, canary node pools, and rollback strategy for OCP 4.14 to 4.18.
Physical AI and Robotics Orchestration
Orchestrate physical AI and robotics fleets with Kubernetes. ROS 2 on K8s, robot fleet management, edge-cloud hybrid, NVIDIA Isaac.
Platform Engineering on K8s: Build an IDP
Build an internal developer platform on Kubernetes. Backstage, Crossplane, ArgoCD, self-service templates, golden paths.
Post-Quantum Cryptography on Kubernetes
Prepare Kubernetes clusters for post-quantum cryptography. NIST PQC standards, hybrid TLS certificates, quantum-safe mTLS, Istio/Cilium integration.
Preemptive Cybersecurity on Kubernetes
Implement preemptive cybersecurity on Kubernetes. Threat prediction, automated vulnerability patching, runtime behavior analysis, CNAPP.
Quantum Computing on K8s: Hybrid Workflows
Run quantum computing workloads on Kubernetes. Qiskit, Cirq, PennyLane hybrid classical-quantum pipelines, quantum job scheduling, and QPU integration patterns.
Sovereign Air-Gapped Kubernetes Clusters
Deploy sovereign and air-gapped Kubernetes clusters. Offline installation, private registry mirrors, disconnected GitOps, sovereign cloud.
Troubleshooting Pods with GPU Devices
Fix GPU device issues in Kubernetes pods. Troubleshoot device plugin errors, DRA claims, CUDA failures, driver mismatches.
Run:ai Topology-Aware Scheduling Deep Dive
Configure Run:ai topology-aware scheduling for distributed AI workloads. Multi-level hierarchies, required vs preferred placement, LeaderWorkerSet.
NIM Model Profiles and Selection on Kubernetes
Configure NIM_MODEL_PROFILE for NVIDIA NIM deployments on Kubernetes. List profiles, select by ID or name, tune VRAM, and override with vLLM CLI args.
NIM Multi-Node Deployment with Helm on K8s
Deploy NVIDIA NIM across multiple Kubernetes nodes using Helm, LeaderWorkerSet, Ray, and vLLM. Run Llama 405B and DeepSeek-R1 on 16+ GPUs.
NIM LLM Support Matrix and GPU Compatibility
Complete NVIDIA NIM support matrix for Kubernetes. Supported models, profiles, precision formats, GPU compatibility, and hardware requirements per model.
NVIDIA Dynamo Distributed Inference
Deploy NVIDIA Dynamo on Kubernetes for disaggregated LLM inference. KV-aware routing, prefill/decode splitting, Grove operator, and zero-config deployment.
Rebuild NIM with Custom Model on Kubernetes
Step-by-step guide to deploy custom, fine-tuned, or self-hosted models with NVIDIA NIM on Kubernetes. Model-free NIM from HuggingFace, S3, NGC, or local path.
Run:ai + Dynamo Multi-Node Scheduling on K8s
Deploy NVIDIA Dynamo with Run:ai v2.23 for gang scheduling and topology-aware placement. Atomic pod launches, zone co-location, and disaggregated inference.
Copy NVIDIA NIM Images to Internal Quay Registry
Pull NIM container images from nvcr.io and push to an internal Quay registry. Covers authentication, tagging, air-gapped workflows, and curl token issues.
CVE-2026-4342: ingress-nginx Code Execution Fix
Patch CVE-2026-4342 in ingress-nginx — a CVSS 8.8 configuration injection vulnerability enabling arbitrary code execution. Upgrade to v1.13.9, v1.14.
Deploy Multinode NIM Models on Kubernetes
Run large language models across multiple GPU nodes with NVIDIA NIM. Tensor parallelism, NCCL, InfiniBand, and Kubernetes Job orchestration.
Distributed Inference with Run:ai
Deploy distributed AI inference with NVIDIA Run:ai on Kubernetes. Single-node Knative, multinode LeaderWorkerSet, NIM, autoscaling, and observability.
K8s-IO Benchmark CLI for fio and HammerDB
Run distributed fio and HammerDB storage benchmarks on Kubernetes with K8s-IO, a lightweight Go CLI tool that replaces heavy benchmark operators.
K8s Audit Logging for Enterprise Compliance
Configure API server audit logging for SOC2, HIPAA, and PCI-DSS compliance. Structured audit policies, log shipping, and alerting on suspicious activity.
K8s Change Mgmt for Enterprise Operations
Implement ITIL-aligned change management for Kubernetes with approval gates, maintenance windows, rollback procedures, and change audit trails.
Kubernetes Disaster Recovery for Enterprise
Kubernetes disaster recovery with Velero backup and restore. Cross-region replication, etcd snapshots, multi-cluster failover, and RTO/RPO strategies.
K8s Capacity Planning for Enterprise Clusters
Right-size enterprise clusters with data-driven capacity planning. Forecast resource needs, optimize bin-packing, and plan for growth with metrics.
Enterprise GitOps at Scale with Fleet Mgmt
Manage hundreds of Kubernetes clusters with ArgoCD ApplicationSets, Flux multi-cluster, and fleet-wide policy enforcement using GitOps principles.
Enterprise Container Image Governance
Enforce image policies with admission controllers. Require signed images, block public registries, and automate vulnerability scanning gates.
Automated Secret Rotation on Kubernetes
Implement zero-downtime secret rotation with External Secrets Operator, HashiCorp Vault dynamic secrets, and rolling restarts for enterprise compliance.
Enterprise Service Mesh mTLS & Observability
Deploy Istio service mesh for enterprise mTLS, traffic management, circuit breaking, and distributed tracing across microservices on Kubernetes.
Kubernetes Multi-Tenancy for Enterprise Teams
Implement secure multi-tenancy with namespace isolation, ResourceQuotas, NetworkPolicies, hierarchical namespaces, and vCluster for strong isolation.
K8s OIDC Integration with Enterprise SSO
Configure Kubernetes API server OIDC authentication with Keycloak, Azure AD, or Okta for enterprise single sign-on and group-based RBAC.
Run:ai NIM Distributed Inference Tutorial
Step-by-step guide to deploy DeepSeek-R1 distributed inference on Run:ai with LeaderWorkerSet, SGLang, PVC caching, and OpenShift security.
Distributed fio Storage Benchmark K8s
Run distributed fio benchmarks on Kubernetes and OpenShift to test storage performance at scale. Covers fio-distributed with k8s Jobs, Red Hat dbench.
External DNS for Kubernetes: Setup Guide
Automate DNS record management with ExternalDNS for Kubernetes. Sync Service and Ingress hostnames to Route53, CloudFlare, Google Cloud DNS, and 30+ providers.
Falco Runtime Security for Kubernetes
Deploy Falco for Kubernetes runtime threat detection: modern eBPF install, default rules, custom rules, Falcosidekick alert routing and automated response.
Helm Chart Testing & CI/CD Pipeline Integration
Test Helm charts automatically with ct (chart-testing), helm unittest, and GitHub Actions. Validate templates, lint values.
Helm Hooks: pre-install, post-upgrade, Weights
Helm hooks explained: pre-install, post-upgrade, pre-delete and test hooks for migrations and backups, ordered by hook weights, cleaned by hook-delete-policy.
Helm Library Charts: Reusable Templates Guide
Build a Helm library chart (type: library) to share Deployment, Service and label templates across charts, consume it as a dependency, and override safely.
Helm OCI Registry: Push, Pull and Install Charts
Push, pull and install Helm charts from OCI registries (GHCR, ECR, ACR, Harbor): helm registry login, helm push, Argo CD and Flux OCI sources, CI release.
Helm Secrets Mgmt with SOPS & Age Encryption
Encrypt Helm values files using SOPS with Age or GPG keys. Manage secrets in Git safely with helm-secrets plugin for transparent encrypt/decrypt workflows.
OpenShift Storage Benchmark fio Config Profiles
Benchmark OpenShift and Kubernetes storage using fio with reusable YAML config profiles for random and sequential read/write I/O patterns.
Kubeflow Operator: Full ML Platform
Deploy the complete Kubeflow platform on Kubernetes with the Kubeflow Operator. Covers Pipelines, Notebooks, KServe, Katib, and multi-tenant ML workflows.
Kubernetes Affinity and Anti-Affinity Guide
Schedule pods with Kubernetes node affinity, pod affinity, and anti-affinity rules. Spread across zones, co-locate related services, and optimize
Advanced Cluster Autoscaler Config & Tuning
Fine-tune the Kubernetes Cluster Autoscaler with expanders, priority-based scaling, mixed instance policies, and GPU node pool autoscaling for production c.
Kubernetes ClusterIP Service Explained
Understand Kubernetes ClusterIP services for internal communication. How kube-proxy routes traffic, DNS resolution, and when ClusterIP is the right service
Essential Kubernetes Commands Reference
Master the most used Kubernetes commands for daily operations. Complete kubectl reference for pods, deployments, services, debugging, and cluster management.
Kubernetes LoadBalancer Service Guide
Expose Kubernetes services with LoadBalancer type for production traffic. Covers cloud providers, MetalLB for bare-metal, health checks, and cost optimization.
Kubernetes NodePort Service Explained
Expose Kubernetes services externally with NodePort. Understand port ranges, security implications, and when to use NodePort vs LoadBalancer vs Ingress.
KubeVirt: Run VMs on Kubernetes
Run virtual machines alongside containers on Kubernetes with KubeVirt. Covers VM creation, live migration, GPU passthrough, and VM-to-container networking.
WebAssembly Runtime with Spin and SpinKube
Deploy WebAssembly workloads on Kubernetes using SpinKube and the Spin Operator. Run Wasm components alongside containers with sub-millisecond cold starts.
WASI and containerd Wasm Shims on Kubernetes
Run WebAssembly workloads using containerd Wasm shims with WASI support on Kubernetes. Configure runwasi, wasmtime, and WasmEdge as container runtimes.
Serverless Functions with WebAssembly
Build serverless functions using WebAssembly on Kubernetes with Fermyon Cloud, KEDA, and SpinKube. Achieve sub-millisecond scale-to-zero with Wasm cold starts.
Kubernetes Alerting Best Practices
Design effective Kubernetes alerts that reduce noise and catch real issues. Covers severity tiers, golden signals, runbook links, and fatigue prevention.
Blue-Green Deployment in Kubernetes
Implement blue-green deployments in Kubernetes for instant rollback. Covers Service selector switching, Argo Rollouts blue-green, and comparison with canary
Kubernetes Cost Monitoring with Kubecost
Monitor and optimize Kubernetes costs with Kubecost. Track per-namespace and per-deployment spend with cloud billing integration and savings tips.
Custom Metrics Autoscaling in Kubernetes
Scale Kubernetes pods on custom application metrics with Prometheus Adapter. Configure HPA with custom and external metrics beyond CPU and memory.
Debug Kubernetes Pods: Complete Guide
Debug Kubernetes pods with kubectl debug, ephemeral containers, and netshoot. Troubleshoot distroless images, network issues, and crashed pods step by step.
Kubernetes EndpointSlices Explained
Understand Kubernetes EndpointSlices for scalable service endpoint management. How they improve on Endpoints objects for large clusters with thousands of pods.
Kubernetes Headless Service Explained
Create Kubernetes headless services for StatefulSet DNS, direct pod addressing, and service discovery. Understand when clusterIP None is the right choice.
Kubernetes Health Checks Best Practices
Design effective Kubernetes health checks with liveness, readiness, and startup probes. Avoid common anti-patterns like database checks in liveness probes.
Kubernetes LimitRange and ResourceQuota
Configure LimitRange and ResourceQuota in Kubernetes namespaces. Set default resource requests, enforce limits, and prevent resource exhaustion across teams.
Kubernetes Sidecar Containers: Native Sidecars & Patterns
Kubernetes sidecar containers: native sidecars (initContainers + restartPolicy Always), startup/shutdown order, logging, Envoy, TLS proxy, Jobs, resources.
K8s Storage Best Practices for Production
Production storage best practices for Kubernetes. StorageClass selection, backup strategies, volume expansion, data migration, and performance tuning.
Kubernetes Troubleshooting Flowchart
Systematic Kubernetes troubleshooting guide with flowcharts. Debug pods, services, networking, storage, and node issues step by step with kubectl commands.
Virtual Kubelet for Serverless K8s Scaling
Deploy Virtual Kubelet to burst Kubernetes workloads to serverless backends like Azure ACI, AWS Fargate, and Hashicorp Nomad for infinite scaling.
Deployment vs StatefulSet in Kubernetes
Choose between Deployment and StatefulSet for your Kubernetes workloads. Compare identity, storage, ordering, scaling, and use cases for each controller.
Kubernetes Node and Pod Affinity Guide
Configure node affinity, pod affinity, and anti-affinity rules for advanced Kubernetes scheduling. Control pod placement across zones, nodes, and topologies.
Kubernetes Annotations Complete Guide
Use Kubernetes annotations for metadata, automation, and controller config. Common patterns for ingress annotations, Helm labels, and triggers.
Kubernetes CI/CD Pipeline with GitHub Actions
Build a complete CI/CD pipeline for Kubernetes with GitHub Actions. Covers Docker build, image push, Helm deploy, and automated rollback on failure.
Kubernetes Deployment Complete Guide
Create and manage Kubernetes Deployments for stateless applications. Covers replicas, selectors, rolling updates, rollback, and deployment strategies.
Kubernetes DNS: How Service Discovery Works
Understand Kubernetes DNS resolution with CoreDNS. Service discovery, pod DNS, headless services, custom DNS policies, and troubleshooting DNS failures.
Kubernetes Environment Variables Guide
Set Kubernetes environment variables with envFrom, configMapRef, secretKeyRef, and the Downward API. Variable ordering, fieldRef, and best practices.
kubectl exec: Run Commands Inside K8s Pods
Use kubectl exec to run commands inside Kubernetes pods. Covers interactive sessions, multi-container pods, and ephemeral container debugging.
Helm vs Kustomize: Which to Use
Compare Helm and Kustomize for Kubernetes configuration management. Covers templating vs overlays, use cases, pros and cons, and when to use both together.
Kubernetes Ingress Guide: Routing, TLS, Controllers
Kubernetes Ingress in practice: host/path routing, pathType, TLS with cert-manager, rewrites, canary, auth, NGINX annotations, and Ingress vs Gateway API.
Kubernetes Labels and Selectors Guide
Kubernetes labels and selectors: kubectl label, -l equality and set-based queries, matchLabels vs matchExpressions, field selectors, recommended labels.
Kubernetes Load Balancing Strategies
Configure Kubernetes load balancing with Services, Ingress, and Gateway API. Round-robin, session affinity, weighted routing, and traffic policy.
K8s Local Development with Minikube and Kind
Set up local Kubernetes clusters for development with Minikube, Kind, and k3d. Covers installation, configuration, local registries, and hot-reload workflows.
EFK Stack: Kubernetes Centralized Logging
Deploy EFK stack for Kubernetes centralized logging. Elasticsearch, Fluentd, Kibana setup, log collection, parsing, and retention policies.
K8s Monitoring with Prometheus and Grafana
Set up Kubernetes monitoring with Prometheus and Grafana. Covers kube-prometheus-stack, custom dashboards, alerting rules, and key metrics to monitor.
Kubernetes Multi-Tenancy Patterns
Implement multi-tenancy in Kubernetes with namespaces, RBAC, quotas, network policies, and virtual clusters. Covers soft and hard tenancy models.
Kubernetes Security Checklist for Production
Production security checklist for Kubernetes clusters. Covers RBAC, network policies, pod security, secrets encryption, audit logging, and image scanning.
Kubernetes Operator Pattern: CRDs and Controllers
The Kubernetes operator pattern explained: CRDs, reconcile loops, owner references, finalizers, status, and building operators with Kubebuilder or Operator SDK.
Kubernetes Pod Lifecycle: Phases and States
Kubernetes pod lifecycle explained: pod phases (Pending, Running, Succeeded, Failed, Unknown), container states, restart policies, hooks, and stuck pods.
kubectl Port-Forward: Access Pods and Services
Use kubectl port-forward to access Kubernetes pods, services, and deployments from your local machine. Debug, test, and access internal services securely.
K8s RBAC: Roles, ClusterRoles, and Bindings
Configure Kubernetes RBAC with Roles, ClusterRoles, RoleBindings, and service accounts. Least privilege access control for users, groups, and applications.
Kubernetes Resource Requests and Limits Guide
Set CPU and memory requests and limits in Kubernetes: QoS classes, CPU throttling vs OOMKilled, LimitRange defaults, GPUs, and right-sizing.
Kubernetes Taints and Tolerations Guide
Kubernetes taints and tolerations: kubectl taint syntax, NoSchedule vs NoExecute, tolerationSeconds, built-in taints, and dedicating GPU nodes.
Kubernetes Volume Types Explained
Compare all Kubernetes volume types: emptyDir, hostPath, PVC, ConfigMap, Secret, NFS, CSI, and projected volumes. When to use each type with examples.
Air-Gapped Image Import for OpenShift Clusters
Import container images into disconnected OpenShift clusters. Use podman save/load and internal registries when DNS and TLS block external pulls.
Fix API Server Timeout and Overload
Debug kubectl timeouts, API server overload, and connection refused errors. Covers etcd latency, webhook timeouts, and rate limiting.
Backstage on Kubernetes: Deploy the Developer Portal
Deploy Backstage on Kubernetes with Helm or your own image, PostgreSQL, catalog-info.yaml, software templates and the Kubernetes plugin with RBAC.
Fix Kubernetes Certificate Expiry Issues
Debug and renew expired Kubernetes certificates for API server, kubelet, and etcd. Covers kubeadm cert renewal, OpenShift auto-rotation, and monitoring expiry.
Cluster API for K8s Lifecycle Management
Manage Kubernetes cluster lifecycle with Cluster API. Declarative cluster creation, upgrades, scaling, and multi-cloud infrastructure provisioning as code.
Confidential Computing on Kubernetes
Deploy confidential containers with encrypted memory using Intel SGX, AMD SEV-SNP, and Kata Containers. Protect data in use from even the cluster admin.
CoreDNS Troubleshooting: Fix Kubernetes DNS
Fix CoreDNS resolution failures in Kubernetes: NXDOMAIN, SERVFAIL, i/o timeouts, loop detected, ndots latency, and NetworkPolicy blocking port 53.
How to Fix CrashLoopBackOff in Kubernetes
Fix CrashLoopBackOff in Kubernetes with step-by-step troubleshooting. Debug OOMKilled, failed probes, missing configs, and image errors causing pod crash loops.
Fix etcd High Latency and Slow API Server
Debug etcd performance issues causing slow kubectl responses and API server timeouts. Covers disk I/O, compaction, defragmentation, and leader elections.
Fix fio libaio Silent Exit on OpenShift crun
Debug fio instantly exiting with no output on crun-based OpenShift nodes. The root cause is seccomp blocking libaio syscalls — fix with psync or unconfined.
Helm Chart Development from Scratch
Build production-ready Helm charts with templates, values, helpers, hooks, tests, and CI validation. Complete guide from chart create to publishing.
Fix Helm Upgrade Failed and Rollback
Debug failed Helm releases stuck in pending-upgrade or failed state. Covers atomic upgrades, manual rollback, secret storage cleanup, and history limits.
Fix ImagePullBackOff and ErrImagePull in Kubernetes
Fix ImagePullBackOff, ErrImagePull and Back-off pulling image: wrong tags, pull secrets, Docker Hub rate limits, registry CA and network errors.
Fix Ingress 502 and 503 Gateway Errors
Debug 502 Bad Gateway and 503 Service Unavailable from Kubernetes ingress controllers. Fix backend health and timeout issues.
Install ArgoCD on AlmaLinux: Step-by-Step
Deploy ArgoCD on Kubernetes running on AlmaLinux. GitOps continuous delivery with automated sync, self-healing, and multi-cluster support.
Install ArgoCD on Amazon Linux
Deploy ArgoCD on Kubernetes running on Amazon Linux. GitOps continuous delivery with automated sync, self-healing, and multi-cluster support.
Install ArgoCD on CentOS Stream
Deploy ArgoCD on Kubernetes running on CentOS Stream. GitOps continuous delivery with automated sync, self-healing, and multi-cluster support.
Install ArgoCD on Arch Linux: Step-by-Step
Deploy ArgoCD on Kubernetes running on Arch Linux. GitOps continuous delivery with automated sync, self-healing, and multi-cluster support.
Install ArgoCD on Debian: Step-by-Step Guide
Deploy ArgoCD on Kubernetes running on Debian. GitOps continuous delivery with automated sync, self-healing, and multi-cluster support.
Install ArgoCD on Fedora: Step-by-Step Guide
Deploy ArgoCD on Kubernetes running on Fedora. GitOps continuous delivery with automated sync, self-healing, and multi-cluster support.
Install ArgoCD on openSUSE: Step-by-Step
Deploy ArgoCD on Kubernetes running on openSUSE. GitOps continuous delivery with automated sync, self-healing, and multi-cluster support.
Install ArgoCD on Oracle Linux
Deploy ArgoCD on Kubernetes running on Oracle Linux. GitOps continuous delivery with automated sync, self-healing, and multi-cluster support.
Install ArgoCD on RHEL: Step-by-Step Guide
Deploy ArgoCD on Kubernetes running on RHEL. GitOps continuous delivery with automated sync, self-healing, and multi-cluster support.
Install ArgoCD on Rocky Linux Step-by-Step
Deploy ArgoCD on Kubernetes running on Rocky Linux. GitOps continuous delivery with automated sync, self-healing, and multi-cluster support.
Install ArgoCD on SUSE SLES: Step-by-Step
Deploy ArgoCD on Kubernetes running on SUSE SLES. GitOps continuous delivery with automated sync, self-healing, and multi-cluster support.
Install ArgoCD on Ubuntu: Step-by-Step Guide
Deploy ArgoCD on Kubernetes running on Ubuntu. GitOps continuous delivery with automated sync, self-healing, and multi-cluster support.
Install Helm on AlmaLinux: Setup Guide
Install Helm 3 on AlmaLinux and configure chart repositories. Covers package manager install, script install, and shell completion for AlmaLinux 8/9.
Install Helm on Amazon Linux: Setup Guide
Install Helm on Amazon Linux 2023 and AL2. Three install methods, chart repository setup, shell completion, and troubleshooting for Amazon Linux environments.
Install Helm on Arch Linux: Setup Guide
Install Helm 3 on Arch Linux and configure chart repositories. Covers package manager install, script install, and shell completion for Arch Linux rolling.
Install Helm on CentOS Stream Setup Guide
Install Helm 3 on CentOS Stream and configure chart repositories. Covers package manager install, script install, and shell completion for CentOS Stream 9.
Install Helm on Debian: Setup Guide
Install Helm 3 on Debian and configure chart repositories. Covers package manager install, script install, and shell completion for Debian 11/12.
Install Helm on Fedora: Setup Guide
Install Helm 3 on Fedora and configure chart repositories. Covers package manager install, script install, and shell completion for Fedora 39/40.
Install Helm on openSUSE: Setup Guide
Install Helm 3 on openSUSE with package manager or script. Configure chart repos and shell completion for openSUSE Leap 15 / Tumbleweed.
Install Helm on Oracle Linux: Setup Guide
Install Helm 3 on Oracle Linux and configure chart repositories. Covers package manager install, script install, and shell completion for Oracle Linux 8/9.
Install Helm on RHEL: Complete Setup Guide
Install Helm 3 on RHEL and configure chart repositories. Covers package manager install, script install, and shell completion for RHEL 8/9.
Install Helm on Rocky Linux: Setup Guide
Install Helm 3 on Rocky Linux and configure chart repositories. Covers package manager install, script install, and shell completion for Rocky Linux 8/9.
Install Helm on SUSE SLES: Setup Guide
Install Helm 3 on SUSE SLES and configure chart repositories. Covers package manager install, script install, and shell completion for SLES 15.
Install Helm on Ubuntu 22.04/24.04 (2 Methods)
Install Helm 3 on Ubuntu with the official script or apt repository. Step-by-step commands, verification, and shell completion for Ubuntu 22.04 and 24.04.
Install Kubernetes on AlmaLinux
Step-by-step guide to install Kubernetes on AlmaLinux with kubeadm. Covers containerd, kubeadm init, CNI setup, and worker node joining for AlmaLinux 8/9.
Install Kubernetes on Amazon Linux
Install Kubernetes on Amazon Linux with kubeadm. Covers containerd setup, kubeadm init, Calico CNI, and worker node joining for Amazon Linux 2023.
Install Kubernetes on Arch Linux
Step-by-step guide to install Kubernetes on Arch Linux with kubeadm. Covers containerd, kubeadm init, CNI setup, and worker node joining for Arch Linux rolling.
Install Kubernetes on CentOS Stream
Step-by-step guide to install Kubernetes on CentOS Stream with kubeadm. Covers containerd, kubeadm init, CNI setup, and worker node joining for CentOS Stream 9.
Install Kubernetes on Debian: Setup Guide
Step-by-step guide to install Kubernetes on Debian with kubeadm. Covers containerd, kubeadm init, CNI setup, and worker node joining for Debian 11/12.
Install Kubernetes on Fedora: Setup Guide
Step-by-step guide to install Kubernetes on Fedora with kubeadm. Covers containerd, kubeadm init, CNI setup, and worker node joining for Fedora 39/40.
Install Kubernetes on openSUSE
Install Kubernetes on openSUSE with kubeadm. Covers containerd setup, kubeadm init, Calico CNI, and worker node joining for openSUSE Leap 15 / Tumbleweed.
Install Kubernetes on Oracle Linux
Step-by-step guide to install Kubernetes on Oracle Linux with kubeadm. Covers containerd, kubeadm init, CNI setup, and worker node joining for Oracle Linux 8/9.
Install Kubernetes on RHEL: Setup Guide
Step-by-step guide to install Kubernetes on RHEL with kubeadm. Covers containerd, kubeadm init, CNI setup, and worker node joining for RHEL 8/9.
Install Kubernetes on Rocky Linux
Step-by-step guide to install Kubernetes on Rocky Linux with kubeadm. Covers containerd, kubeadm init, CNI setup, and worker node joining for Rocky Linux 8/9.
Install Kubernetes on SUSE SLES
Step-by-step guide to install Kubernetes on SUSE SLES with kubeadm. Covers containerd, kubeadm init, CNI setup, and worker node joining for SLES 15.
Install Kubernetes on Ubuntu: Setup Guide
Step-by-step guide to install Kubernetes on Ubuntu with kubeadm. Covers containerd, kubeadm init, CNI setup, and worker node joining for Ubuntu 22.04/24.04.
Fix Kubernetes Job Failures and Retries
Debug Kubernetes Jobs stuck in backoff or hitting retry limits. Covers backoffLimit, activeDeadlineSeconds, and CronJob overlap.
Karpenter Node Autoscaling on EKS (v1 API)
Install Karpenter v1 on EKS: NodePools, EC2NodeClass, spot fallback, consolidation, GPU pools, and how it compares to Cluster Autoscaler.
Fix Kubelet NotReady and Node Pressure Issues
Debug kubelet NotReady status, node pressure conditions, and eviction issues. Covers disk pressure, memory pressure, PID pressure, and network not ready.
Kubernetes Admission Controllers and Webhooks
Build validating and mutating admission webhooks for Kubernetes. Policy enforcement with OPA Gatekeeper, Kyverno, and custom webhooks.
Kubernetes API Deprecation Migration Guide
Migrate deprecated Kubernetes APIs before cluster upgrades. Detect deprecated resources with pluto, kubent, and kubectl convert.
Kubernetes Debugging Toolkit and Commands
Essential kubectl debugging commands and tools for Kubernetes troubleshooting. Covers ephemeral containers, debug pods, network debugging, and log analysis.
Kubernetes Disaster Recovery Planning
Build a Kubernetes disaster recovery plan with etcd backups, Velero, cross-region replication, and RTO/RPO targets for production clusters.
Kubernetes etcd Operations and Maintenance
Manage etcd for Kubernetes: backup, restore, compaction, defragmentation, member management, and disaster recovery procedures.
GPU Sharing on Kubernetes: Time-Slicing vs MIG vs MPS
Compare NVIDIA GPU sharing on Kubernetes: time-slicing vs MIG vs MPS vs full GPU. Isolation, supported GPUs, GPU Operator config, and when to use each.
Run Windows Containers on Kubernetes
Deploy Windows workloads on Kubernetes with mixed Linux and Windows node pools. Covers taints, node selectors, and Windows-specific networking.
Longhorn Distributed Storage on Kubernetes
Install Longhorn distributed block storage on Kubernetes: prerequisites, Helm install, replicated PVCs, RWX, snapshots, recurring S3 backups and DR restore.
Node Feature Discovery Operator for Kubernetes
Install and configure Node Feature Discovery (NFD) Operator to auto-detect hardware features like GPUs, NICs, CPU flags, and USB devices on Kubernetes nodes.
crun vs runc: Container Runtimes in OpenShift
Understand why pods behave differently on GPU vs CPU nodes in OpenShift. Compare crun and runc container runtimes, seccomp profiles, and syscall filtering.
OpenTelemetry Complete Setup on Kubernetes
Deploy OpenTelemetry Collector, auto-instrumentation, and exporters on Kubernetes. Unified traces, metrics, and logs pipeline to Jaeger, Prometheus, and Loki.
Fix PVC Resize Stuck or Failed
Debug PVC expansion failures in Kubernetes. Covers allowVolumeExpansion, filesystem resize, and offline vs online expansion.
Fix Pod Stuck in Pending State
Debug pods stuck in Pending status. Covers insufficient resources, node affinity mismatches, taint/toleration issues, and PVC binding failures.
Fix Podman TLS x509 Behind Corporate Proxy
Resolve podman pull x509 certificate signed by unknown authority errors caused by corporate TLS-intercepting proxies. Extract and install the proxy CA.
Fix PVC Stuck in Pending State
Debug PersistentVolumeClaims stuck in Pending status. Covers storage class issues, provisioner failures, capacity problems, and access mode mismatches.
Fix RBAC Permission Denied Errors
Debug RBAC forbidden and unauthorized errors in Kubernetes. Covers ClusterRole vs Role scope and service account permissions.
Fix Deploy Rollout Stuck at Partial Progress
Debug deployments stuck with unavailable replicas during rollout. Covers readiness probes, resource constraints, and rollback.
Rook Ceph on Kubernetes: Block, File and S3 Storage
Deploy Rook Ceph on Kubernetes: operator Helm install, CephCluster, RBD and CephFS StorageClasses, S3 object store, toolbox health checks and sizing.
Fix Service Mesh Sidecar Injection Failures
Debug Istio and Envoy sidecar injection issues. Covers missing sidecars, port conflicts, init container failures, and mTLS connection errors.
Run WebAssembly Workloads on Kubernetes
Deploy WASM workloads on Kubernetes using SpinKube and containerd-shim. Sub-millisecond cold starts, polyglot runtimes, and sandboxed edge computing.
Fio NFS Benchmark on OpenShift Nodes
Run fio NFS storage benchmarks on OpenShift using parallel pods with hostPath mounts. Measure IOPS, bandwidth, and latency across multiple NFS endpoints.
MachineConfig NFS Mount on OpenShift Nodes
Mount NFS shares on OpenShift worker nodes using MachineConfig systemd mount units. The only production-safe way to persist NFS mounts on RHCOS nodes.
OpenShift oc debug Mount Limitation
Why NFS and filesystem mounts via oc debug node disappear after the debug pod exits. Understand the container namespace isolation and use MachineConfig instead.
KubeCon EU 2026 Book Giveaway Recap
Recap of the Kubernetes Recipes book giveaway at KubeCon EU 2026 Amsterdam. Photos from the signing sessions, community highlights, and how to get your copy.
Configure Knative Ingress Networking
Set up Knative Serving ingress with Kourier, Istio, or Contour. Custom domains, TLS, path routing, and external visibility.
Detect ArgoCD Shadow Updates Out-of-Band
Detect and prevent ArgoCD shadow updates where manual kubectl changes bypass GitOps. Configure self-heal, sync, and drift detection.
Migrate Ingress to Gateway API ingress2gateway
Migrate Ingress to Gateway API using ingress2gateway. Convert HTTPRoute and TLSRoute with zero-downtime parallel migration.
Build a K8s Operator with Docker Testing
Build a Kubernetes operator with Operator SDK and Kubebuilder. Test with Docker, Kind, and envtest. Full TDD workflow to OLM bundle.
Fix the Kubernetes ConfigMap Too Large Error
Resolve the 1MB ConfigMap size limit error. Split configs, use Secrets for binary data, mount volumes, or use external stores.
Debug CRI-O Container Runtime Errors
Troubleshoot CRI-O issues on OpenShift nodes. Fix image pull failures, container start errors, storage driver problems, and CNI networking plugin failures.
Debug Degraded MachineConfigPool Nodes
Fix nodes stuck Degraded after MachineConfig updates. Check MCD logs, on-disk validation, and recovery for degraded workers.
Kubernetes Pod Evicted: Causes, Debugging, Prevention
Why Kubernetes evicts pods: MemoryPressure, DiskPressure, ephemeral storage, preemption, NoExecute taints and drains. Diagnose, clean up, prevent.
Debug DNS Resolution Failures in Pods
Troubleshoot pods unable to resolve DNS names. Check CoreDNS health, ndots configuration, search domains, and NetworkPolicies blocking UDP port 53 DNS traffic.
Debug etcd Performance Issues in Kubernetes
Diagnose slow etcd causing API latency and leader election storms. Check disk IOPS, compaction, defrag, and network latency.
Fix Expired Certificates in Kubernetes
Renew expired certificates causing API server failures and kubelet disconnections. Manual and automatic renewal for kubeadm and OpenShift.
Enable GPUDirect Storage in ClusterPolicy
Enable NVIDIA GPUDirect Storage (GDS) in the GPU Operator ClusterPolicy for direct GPU-to-NVMe data paths. Driver module configuration and verification.
Configure GPU Time-Slicing on Kubernetes
Configure NVIDIA GPU time-slicing with the GPU Operator: device plugin ConfigMap, replicas, per-node profiles, verification, and memory-sharing caveats.
Helm before-hook-creation Hook
Use Helm before-hook-creation for database migrations and pre-install checks. Complete hook lifecycle, delete policies, and ordering.
Helm Sprig cat Function: Concatenate Strings
Helm Sprig cat function concatenates strings with spaces between arguments. Syntax, why cat inserts spaces, conditionals, and template examples.
Helm Sprig join Function: List to String
Helm Sprig join function converts lists to delimited strings. Join list example with CSV output, label values, and multi-value template patterns.
Helm Sprig toString Function Guide
Helm Sprig toString function converts values to strings in templates. Handle integers, booleans, lists, and nil values safely in Helm charts.
Fix OpenShift ImageStream Import Errors
Debug ImageStream import failures in OpenShift. Resolve DNS errors, auth issues, TLS problems, and registry rate limiting.
ITMS Race Condition with Ingress Controllers
Resolve the ITMS race condition where ImageTagMirrorSet rollouts deadlock with hostNetwork ingress controllers during MCO drain.
Kubernetes Resiliency Patterns Guide
Build resilient Kubernetes apps with PDBs, topology spread, anti-affinity, health probes, and graceful shutdown patterns.
K8s Resource Optimization Strategies
Kubernetes resource optimization strategies and best practices. Right-size pods with VPA, Goldilocks dashboards, and resource allocation techniques.
Harden Kubernetes Security Posture
Kubernetes security hardening: Pod Security Standards, RBAC least-privilege, network policies, secret encryption, and audit logging.
Inspect MachineConfig Annotations on Nodes
Read and interpret MachineConfig annotations on OpenShift nodes. Check desired vs current config, node state, and rendered config hashes to diagnose MCP issues.
Configure NTP Chrony via MachineConfig
Set custom NTP servers on OpenShift RHCOS nodes using MachineConfig. Fix time drift, configure chrony, and verify time synchronization across your cluster.
Set Kernel Parameters via MachineConfig
Tune kernel sysctl parameters on OpenShift nodes using MachineConfig. Set networking, memory, and performance sysctls on RHCOS.
Configure Container Registries via MachineConfig
Set up mirror registries and blocked registries on OpenShift nodes using MachineConfig to control CRI-O image pull on RHCOS.
Fix Stale MachineConfigPool Updates
Debug and resolve stale OpenShift MachineConfigPool updates. Identify blocked nodes, check MachineConfigDaemon logs, and unblock stuck MCP rollouts.
MCP Drain Blocked by PDB: Workaround
Resolve OpenShift MachineConfigPool drain failures caused by PodDisruptionBudget violations. Scale down and restore after update.
Configure MCP maxUnavailable for Rollouts
Control how many nodes the MachineConfig Operator updates simultaneously. Set maxUnavailable for faster rollouts or safer one-at-a-time updates in production.
Pause and Unpause MCP Rollouts
Temporarily pause MachineConfigPool rollouts to batch multiple MachineConfig changes or coordinate with maintenance windows. Unpause to resume node updates.
Automate MCP Updates with Drain Script
Bash script to automate OpenShift MachineConfigPool updates when drains are blocked by PDB violations. Auto-detects blockers, scales down, drains, and restores.
Separate Worker and Infra MachineConfigPools
Create dedicated MachineConfigPools for infrastructure and GPU nodes. Isolate MCP rollout blast radius and control update order for different node types.
Fix Kubernetes Namespace Stuck in Terminating
Fix a Kubernetes namespace stuck in Terminating: find leftover resources, finalizers and broken APIServices, then force-remove the namespace finalizer safely.
Debug NetworkPolicy Connectivity Issues
Troubleshoot pods unable to communicate despite correct Services. Verify NetworkPolicy rules, label selectors, and default deny.
Node Drain Blocked by hostNetwork Port Conflict
Debug and fix OpenShift node drains that fail because hostNetwork pods cannot schedule replacements due to port exhaustion across the cluster.
Debug Node NotReady Status in Kubernetes
Diagnose Kubernetes nodes stuck in NotReady state. Check kubelet logs, container runtime, network, disk pressure, and certificates.
NVIDIA Open GPU GPUDirect RDMA with DOCA-OFED
Deploy NVIDIA AI networking on Kubernetes: Open GPU driver with DMA-BUF, GPUDirect RDMA, DOCA-OFED, and SR-IOV VF isolation.
Use oc adm drain Dry-Run for Diagnostics
Preview node drain impact without evicting pods. Identify PDB violations, unmanaged pods, and local storage blockers before maintenance.
OpenClaw GitOps Deployment with ArgoCD
Deploy OpenClaw on Kubernetes using ArgoCD for GitOps automation. Application definition, sync policies, drift detection, and secrets.
OpenClaw API Keys External Secrets Operator
Manage OpenClaw API keys and gateway tokens using External Secrets Operator with AWS Secrets Manager, Vault, or GCP Secret Manager on Kubernetes.
OpenClaw Helm Chart with Chromium Sidecar
Deploy OpenClaw using the community Helm chart with Chromium browser sidecar for web automation, declarative skill installation, and custom values overlays.
Expose OpenClaw via K8s Ingress with TLS
Configure Kubernetes Ingress with TLS to expose OpenClaw gateway securely. Covers cert-manager, NGINX Ingress, and allowed origins.
OpenClaw Local Development with Kind
Set up a local Kind cluster for OpenClaw development and testing. Auto-detect Docker or Podman, create a single-node cluster, and deploy OpenClaw in minutes.
OpenClaw Multi-Env Deploy with Kustomize
Deploy OpenClaw across dev, staging, and production Kubernetes environments using Kustomize overlays for configs and secrets.
OpenClaw Health Probes on Kubernetes
Configure liveness and readiness probes for OpenClaw on Kubernetes. Custom Node.js health checks against /healthz and /readyz endpoints with proper timing.
OpenClaw Multi-Agent Team Deployment
Deploy multiple specialized OpenClaw agents as Kubernetes pods. Dedicated DevOps, security, and writing agents with shared workspace.
OpenClaw Multi-Model Provider Setup
Configure OpenClaw with multiple AI providers on Kubernetes. Anthropic, OpenAI, Gemini, OpenRouter with fallback chains and cost control.
OpenClaw Node Pairing for IoT and Edge Devices
Pair phones, Raspberry Pi, and edge devices with OpenClaw on Kubernetes. Camera, location, screen control, and remote command execution.
OpenClaw on OpenShift with SCCs and Routes
Deploy OpenClaw on OpenShift with Security Context Constraints, Routes for TLS termination, and OpenShift-specific considerations for non-root containers.
OpenClaw Operator for Kubernetes
Deploy OpenClaw AI agents on Kubernetes using the official operator. CRD-based lifecycle, Chromium sidecar, auto-update, and backup.
OpenClaw Persistent State Management
Manage OpenClaw agent state and workspace data with Kubernetes PVCs. Init container config seeding, backups, and storage classes.
OpenClaw Resource Limits and Tuning
Size CPU, memory, and storage for OpenClaw on Kubernetes. Tuning profiles for light usage, browser automation, and production deployments.
OpenClaw Pod Security Hardening on Kubernetes
Harden OpenClaw pods with read-only filesystem, dropped capabilities, non-root user, seccomp profiles, and resource limits.
OpenClaw Webhook Automation on Kubernetes
Configure OpenClaw webhooks on Kubernetes for GitHub, Jira, and PagerDuty event-driven automation. Ingress routing, HMAC validation, and hook handler patterns.
OpenShift Ingress Router Troubleshooting
Debug OpenShift HAProxy router issues: pods stuck Pending, hostPort conflicts, PDB violations during maintenance, and custom router deployment scaling problems.
Debug MachineConfigDaemon Logs
Read and interpret OpenShift MachineConfigDaemon logs to diagnose node update failures. Common error patterns, drain issues, and config application problems.
Debug OpenShift OAuth Login Failures
Troubleshoot OpenShift console and CLI login failures. Check OAuth server pods, identity provider config, and expired tokens.
Configure PDBs for OpenShift Routers
Set PodDisruptionBudgets for OpenShift IngressController routers. Balance availability during maintenance with node drain ability.
Enable User Workload Monitoring OpenShift
Enable user workload monitoring on OpenShift. Deploy ServiceMonitor, PodMonitor, alerting rules, and Grafana dashboards.
Fix Stuck OLM Operator Subscriptions
Debug Operator Lifecycle Manager subscriptions stuck in pending or failed state. Resolve catalog source issues, approval policies, and CSV dependency conflicts.
PDB Allowed Disruptions Zero: Debugging
Debug PodDisruptionBudgets stuck at zero allowed disruptions. Understand minAvailable vs maxUnavailable, fix eviction failures, and plan for maintenance.
Fix PV Stuck in Terminating State
Resolve PVs and PVCs stuck in Terminating status. Remove finalizers safely, check volume detachment, and handle storage issues.
Manage hostNetwork Pod Port Allocation
Plan and manage host port usage for hostNetwork pods. Prevent port conflicts, track allocations, and handle port exhaustion.
Fix ResourceQuota Exceeded Errors
Debug resource quota violations preventing pod scheduling. Understand LimitRange defaults, ResourceQuota, and namespace management.
Restore Scaled Deployments After Node Drain
Restore deployments scaled down for maintenance. Verify node health, check pod scheduling, and confirm service availability.
Scale Deployments to Unblock Node Drains
Safely scale down deployments that block node drains due to PDB violations. Record original replicas, scale to zero, drain, then restore after the node returns.
Debug Service with No Ready Endpoints
Troubleshoot Services showing zero endpoints. Verify label selectors, readiness probes, pod status, and port configuration.
Fix Node Untolerated Taint Scheduling Errors
Fix node untolerated taint errors causing pods stuck in Pending. NoSchedule, PreferNoSchedule, NoExecute effects, and toleration syntax guide.
Fix Admission Webhook Timeout Errors
Debug admission webhook failures blocking pod creation. Identify failing webhooks, check timeouts, and set failurePolicy.
ITMS External-to-External Registry Mirroring
Configure OpenShift ImageTagMirrorSet to map external registries to your private registry. Mirror Docker Hub, GHCR, Quay.io, and NVIDIA NGC.
ITMS Updates registries.conf via MachineConfig
How ITMS and IDMS update /etc/containers/registries.conf on immutable CoreOS nodes via MCO and MachineConfig. Full chain deep-dive.
400 Kubernetes Recipes Milestone Recap
Kubernetes Recipes reaches 400 articles. Explore new AI/GPU infrastructure, NVIDIA networking, ArgoCD GitOps, OpenShift, and RHACS security recipes.
AI Model Storage: hostPath vs PVC Inference
Deploy AI models on Kubernetes using hostPath and PVC storage. Compare performance, security trade-offs, and production patterns for model serving.
Quay Default Permissions for Robot Accounts
Configure Quay Registry default permissions to auto-grant read access to robot accounts on every new repository. API and team patterns.
KubeCon EU 2026 Book Signing Events
Join Luca Berton at two KubeCon Amsterdam events: Signal Overflow at Booking.com HQ (Mon 23 Mar) and book signing at vCluster booth #521 (Tue 24 Mar).
Volcano Job minAvailable Gang Scheduling
Configure Volcano job minAvailable for gang scheduling on Kubernetes. Batch AI training, fair-share queues, job plugins, and GPU preemption guide.
Configure SR-IOV agent-config.yaml Device by Path
Use agent-config.yaml to select network devices by PCI path for SR-IOV VF creation, ensuring deterministic NIC targeting across OpenShift nodes.
AIPerf: Benchmark LLM Inference on Kubernetes
Benchmark vLLM, NIM, Triton and SGLang endpoints on Kubernetes with NVIDIA AIPerf: TTFT, ITL, throughput, request rates, datasets, goodput and GPU telemetry.
AIPerf Concurrency Sweep on K8s
Run AIPerf concurrency sweeps on Kubernetes to find optimal LLM serving capacity. Automate 1-128 concurrent user benchmarks with batch Jobs.
AIPerf Goodput and SLO Benchmarks
Measure LLM goodput with AIPerf on Kubernetes. Define SLOs for TTFT and ITL, calculate effective throughput, and benchmark with timeslice analysis.
AIPerf Multi-Model Benchmark on K8s
Compare multiple LLM models and backends with AIPerf on Kubernetes. Benchmark vLLM vs TGI vs Triton with automated multi-run confidence intervals.
AIPerf Trace Replay Benchmarks on K8s
Replay production traffic traces with AIPerf on Kubernetes. Use moon_cake format, ShareGPT datasets, and fixed schedules for realistic LLM benchmarks.
Air-Gapped OpenShift with Quay Mirror
Deploy OpenShift in air-gapped environments with local Quay registry mirror, ImageDigestMirrorSet, and custom CatalogSources.
ArgoCD App of Apps Pattern Explained
Implement the ArgoCD App of Apps pattern to manage multiple applications from a parent Application for cluster bootstrapping.
ArgoCD App of Apps with Helm Values
Use the ArgoCD App of Apps pattern with Helm value overrides per environment, enabling templated Application manifests and DRY multi-environment configurations.
ArgoCD App of Apps with Sync Waves
Combine the ArgoCD App of Apps pattern with sync waves to bootstrap entire clusters in dependency order, from CRDs and operators to application workloads.
ArgoCD ApplicationSets for Multi-Tenant GPUs
Use ArgoCD ApplicationSets to auto-discover and provision GPU tenant overlays from Git directories with per-tenant sync policies.
ArgoCD Declarative Application Setup
Define ArgoCD Applications, Projects, and repository credentials declaratively using Kubernetes manifests for reproducible GitOps configuration.
ArgoCD Multi-Cluster App of Apps
Manage multiple Kubernetes clusters with ArgoCD App of Apps, deploying shared infrastructure and cluster-specific workloads from a single GitOps repository.
Manage OperatorGroups with ArgoCD
Deploy and manage OLM OperatorGroup resources via ArgoCD for GitOps-driven operator lifecycle management in OpenShift namespaces.
ArgoCD PreSync and PostSync Hooks
Use ArgoCD PreSync hooks for database migrations and PostSync hooks for smoke tests, with SyncFail hooks for automated rollback and cleanup.
ArgoCD Sync Waves for Canary Deployments
Use ArgoCD sync waves for canary deployments with Istio traffic splitting, automated validation, and progressive rollout strategies.
ArgoCD Sync Waves for CRD & Operator Ordering
Use ArgoCD sync waves to deploy Custom Resource Definitions before operators and custom resources, preventing CRD race conditions in GitOps pipelines.
ArgoCD Sync Waves for Ordered Deployments
Use ArgoCD sync waves to control the order of Kubernetes resource deployment, ensuring dependencies like namespaces and CRDs are created before workloads.
ArgoCD Sync Waves for Database Migrations
Use ArgoCD sync waves and PreSync hooks to run database migrations before deploying application code, with rollback strategies.
ClusterPolicy MOFED Upgrade Strategy
Configure safe MOFED driver upgrade policies in the NVIDIA GPU Operator ClusterPolicy with rolling updates, node draining, and rollback procedures.
CNPG Disaster Recovery and Replication
Set up cross-region PostgreSQL disaster recovery with CloudNativePG using replica clusters, WAL shipping, and automated failover.
CloudNativePG (CNPG): PostgreSQL Operator on Kubernetes
Run HA PostgreSQL on Kubernetes with CloudNativePG: operator install, Cluster CR, anti-affinity, S3 WAL backups, PITR, PgBouncer Pooler and monitoring.
CNPG Cluster Scaling and Upgrades
Scale CloudNativePG clusters, perform rolling PostgreSQL major upgrades, and manage storage expansion without downtime in Kubernetes.
Add Custom CA Certificates in Kubernetes
Configure custom Certificate Authority trust in vanilla Kubernetes using ConfigMap mounts, node-level trust stores, and containerd registry configuration.
Add Custom CA Certificates in OpenShift
Configure custom Certificate Authority trust across an OpenShift cluster using proxy config, image config, and automatic CA bundle injection into pods.
Decode and Inspect Kubernetes Docker Secrets
Decode base64-encoded dockerconfigjson secrets to verify registry credentials, troubleshoot ImagePullBackOff errors, and audit pull secret configurations.
Dell PowerEdge XE7740 GPU Node Setup
Configure Dell PowerEdge XE7740 GPU nodes with H200 GPUs for OpenShift and Kubernetes including BIOS, power, cooling, and network setup.
Deploy Fish Audio TTS on Kubernetes
Deploy Fish Audio S2-Pro 5B text-to-speech model on Kubernetes for high-quality voice synthesis with multi-speaker support and streaming audio.
Deploy GLM-5 754B on Kubernetes
Deploy Zhipu AI GLM-5 754B model on Kubernetes with vLLM. One of the largest open-weight models with multi-node tensor parallelism across 8+ GPUs.
Deploy Granite 4.0 Speech on Kubernetes
Deploy IBM Granite 4.0 1B Speech model on Kubernetes for automatic speech recognition. Lightweight 2B model runs on CPU or small GPU for STT workloads.
Deploy Kimi K2.5 1.1T MoE on Kubernetes
Deploy Moonshot AI Kimi-K2.5 1.1T MoE multimodal model on Kubernetes. The largest open MoE model with 2.69M downloads for frontier AI tasks.
Deploy Llama 3.1 8B Instruct on K8s
Deploy Meta Llama 3.1 8B Instruct on Kubernetes with vLLM. Production-ready single-GPU deployment with 128K context, tool calling, and autoscaling.
Deploy Llama 2 70B on Kubernetes
Deploy Meta Llama 2 70B on Kubernetes with multi-GPU tensor parallelism, vLLM serving, and production-ready health checks and resource limits.
Deploy LTX Video Generation on K8s
Deploy Lightricks LTX-2.3 image-to-video model on Kubernetes for AI video generation with batch processing and S3 output storage.
Deploy MiniMax M2.5 229B on Kubernetes
Deploy MiniMax M2.5 229B model on Kubernetes with vLLM. High-performance LLM with 485K downloads, optimized for multi-turn conversation and long context.
Deploy NVIDIA Nemotron 120B MoE on K8s
Deploy NVIDIA Nemotron-3-Super-120B-A12B MoE model on Kubernetes. 120B total parameters with 12B active for enterprise-grade inference.
Deploy Microsoft Phi-4 on Kubernetes
Deploy Microsoft Phi-4 small language model on Kubernetes with vLLM. Efficient 14B model with GPT-4 level reasoning on a single GPU.
Deploy Phi-4 Reasoning Vision on K8s
Deploy Microsoft Phi-4-reasoning-vision-15B on Kubernetes for multimodal chain-of-thought reasoning with visual understanding on a single GPU.
Deploy Qwen3 Coder 80B on Kubernetes
Deploy Qwen3-Coder-Next 80B on Kubernetes for code generation, review, and refactoring. Production-ready AI coding assistant with multi-GPU serving.
Deploy Qwen3 235B MoE on Kubernetes
Deploy Alibaba Qwen3-235B-A22B mixture-of-experts model on Kubernetes. Only 22B parameters active per token for efficient 235B-class inference.
Deploy Qwen3 TTS on Kubernetes
Deploy Qwen3-TTS-12Hz-1.7B-CustomVoice on Kubernetes for text-to-speech with custom voice cloning. 1.13M downloads, lightweight single-GPU deployment.
Deploy Qwen3.5 35B MoE on Kubernetes
Deploy Alibaba Qwen3.5-35B-A3B mixture-of-experts multimodal model on Kubernetes. 35B total parameters with only 3B active for ultra-efficient inference.
Deploy Qwen3.5 9B Multimodal on K8s
Deploy Alibaba Qwen3.5-9B vision-language model on Kubernetes with vLLM. Process images and text with a single GPU deployment.
Deploy Qwen3.5 397B MoE on Kubernetes
Deploy Alibaba Qwen3.5-397B-A17B MoE multimodal model on Kubernetes. 397B total parameters with only 17B active per token for frontier VLM inference.
RetinaNet Object Detection on K8s
Deploy RetinaNet object detection model on Kubernetes with Triton Inference Server, TensorRT optimization, and batch processing pipelines.
Deploy Sarvam 105B on Kubernetes
Deploy Sarvam 105B multilingual LLM on Kubernetes with vLLM. India's largest open language model with native support for 10+ Indic languages.
Stable Diffusion XL on Kubernetes
Deploy Stable Diffusion XL for image generation on Kubernetes with TensorRT acceleration, queued batch processing, and S3 output storage.
Deploy Whisper Speech-to-Text on K8s
Deploy OpenAI Whisper for speech-to-text on Kubernetes with faster-whisper, batch transcription Jobs, and real-time streaming endpoints.
Distributed Inference Kubernetes
Deploy distributed LLM inference with tensor parallelism across multiple GPUs and pipeline parallelism across nodes on Kubernetes.
NVIDIA DOCA Driver Container in Kubernetes
Deploy and configure NVIDIA DOCA Driver containers via NicClusterPolicy for RDMA, NFS-RDMA, and precompiled driver builds.
DOCA Driver on OpenShift with DTK
Build and deploy precompiled NVIDIA DOCA Driver containers on OpenShift using DriverToolKit, MachineConfig, and upgrade lifecycle.
GPU Operator GDS with NVMe and NFS RDMA
Configure GPUDirect Storage for local NVMe drives and NFS over RDMA in Kubernetes, including cuFile verification and performance benchmarking.
GitOps Bootstrap for Bare-Metal GPU Clusters
Bootstrap bare-metal GPU clusters with ArgoCD and Kustomize in air-gapped environments with NVIDIA GPU and Network Operators.
GPU Operator ClusterPolicy Complete Reference
Complete reference for the NVIDIA GPU Operator ClusterPolicy CRD covering driver, toolkit, device plugin, MOFED, GDS, MIG, and DCGM configuration options.
GPU Operator GPUDirect Storage GDS Module
Enable the GPUDirect Storage GDS module in the NVIDIA GPU Operator ClusterPolicy for direct GPU-to-storage data transfers bypassing CPU and system memory.
NVIDIA GPU Operator MOFED Driver Configuration
Configure the NVIDIA GPU Operator to deploy Mellanox OFED drivers for high-performance RDMA networking on Kubernetes GPU nodes with InfiniBand and RoCE support.
GPU Operator Canary Upgrade Strategy
Safely upgrade NVIDIA GPU Operator using canary node pools, 48-hour bake periods, validation gates, and Git-based rollback.
GPU Tenant Bootstrap Bundle for Kubernetes
Provision GPU tenants with a single Kustomize bundle containing namespace, RBAC, NetworkPolicy, quotas, and HAProxy VIP config.
Per-Tenant GPU Monitoring and Chargeback
Build per-tenant GPU monitoring dashboards with queue time, utilization, thermal metrics, and GPU-hour chargeback on Kubernetes.
GPU Tenant SLO Observability on Kubernetes
Define and monitor GPU tenant SLOs for queue time, inference latency, GPU utilization, and job completion rate with Prometheus alerting.
GPU Cluster Upgrade Version Matrix
Maintain a version compatibility matrix for GPU Operator, Network Operator, drivers, firmware, CUDA, and OpenShift for safe upgrades.
GPUDirect RDMA via DMA-BUF on Kubernetes
Configure GPUDirect RDMA using DMA-BUF kernel subsystem for zero-copy GPU-to-GPU transfers over InfiniBand and RoCE networks.
HAProxy Keepalived Multi-Tenant GPU Ingress
Configure HAProxy with Keepalived VIPs for per-tenant GPU cluster ingress with Jinja2 templates and per-tenant access logging.
InfiniBand vs Ethernet for AI on Kubernetes
Compare InfiniBand and Ethernet networking for GPU AI workloads on Kubernetes, including RDMA, RoCE, latency, and throughput considerations.
Distrib. Training Kubeflow Training Operator
Run multi-node distributed PyTorch and TensorFlow training jobs using Kubeflow Training Operator with NCCL, RDMA, and shared storage.
Kubeflow Training Operator on Kubernetes
Install Kubeflow Training Operator for distributed ML training with PyTorchJob, TFJob, and MPIJob on GPU-enabled Kubernetes clusters.
LeaderWorkerSet (LWS) on Kubernetes and OpenShift
Deploy LeaderWorkerSet on Kubernetes or OpenShift for multi-node LLM inference and distributed training: install, vLLM example, env vars, restart policy.
Llama Stack on Kubernetes with NVIDIA NIM
Deploy Meta Llama Stack on Kubernetes for unified inference, RAG, agents, and safety APIs using NVIDIA NIM as the inference backend.
MariaDB Operator on Kubernetes
Deploy highly available MariaDB clusters on Kubernetes using MariaDB Operator with Galera replication, automated backups, and connection pooling.
MLPerf Benchmarking on Kubernetes
Run MLPerf inference and training benchmarks on Kubernetes GPU clusters to validate AI workload performance and compare hardware configurations.
Shared Model Caching Across Pods on Kubernetes
Optimize LLM inference startup and reduce storage costs by sharing model weights across pods using emptyDir, hostPath, ReadWriteMany PVCs, and init.
MOFED and DOCA Driver Building for OpenShift
Build NVIDIA MOFED and DOCA drivers for OpenShift using DriverToolKit, Buildah, and MachineConfig for RDMA and GPU networking.
MPI Operator for Distributed Training
Deploy MPI Operator on Kubernetes for distributed GPU training with Horovod and NCCL. Run multi-node MPI jobs natively in Kubernetes pods.
Multi-Tenant GPU Namespace Isolation
Isolate GPU workloads across tenants using namespaces, RBAC, NetworkPolicy, and ResourceQuotas on OpenShift and Kubernetes.
NetworkPolicy Deny-Default for GPU Tenants
Implement deny-by-default NetworkPolicy for GPU tenant namespaces with NCCL port exceptions and DNS egress on Kubernetes.
NFSoRDMA Bond with Access Mode Switch
Configure bonded NICs for NFS over RDMA using switch access mode for VLAN assignment. Aggregation on untagged interfaces for RDMA redundancy.
NFSoRDMA Dedicated NIC Configuration
Configure dedicated NICs for NFS over RDMA on Kubernetes worker nodes. NFSoRDMA requires untagged interfaces — no VLAN tagging supported.
NFSoRDMA Jumbo Frames MTU Configuration
Configure 9000 MTU jumbo frames for NFSoRDMA interfaces using NNCP to maximize RDMA throughput on Kubernetes worker nodes.
NFSoRDMA Multi-VLAN Switch Access Mode
Design multi-VLAN NFSoRDMA networks using switch access mode ports. Separate storage, replication, and backup traffic with dedicated NICs per VLAN.
NFSoRDMA Persistent Volume for Kubernetes
Create PersistentVolumes and StorageClasses for NFSoRDMA storage with RDMA transport, optimized mount options, and ReadWriteMany access.
NFSoRDMA Troubleshooting and Performance
Troubleshoot NFS over RDMA connectivity issues, diagnose TCP fallback, tune performance, and benchmark RDMA throughput on Kubernetes workers.
NFSoRDMA Worker Node Setup Guide
Complete worker node setup for NFS over RDMA including kernel modules, NFS client configuration, PersistentVolume mounts, and RDMA transport verification.
NicClusterPolicy MOFED Affinity & Node Selection
Configure NicClusterPolicy node selectors and affinity rules to deploy MOFED drivers only on RDMA-capable nodes in Kubernetes clusters.
NNCP Bond Interfaces on Worker Nodes
Create bonded network interfaces on Kubernetes worker nodes using NodeNetworkConfigurationPolicy for NIC redundancy and link aggregation.
NNCP DNS and Static Routes on Workers
Configure static routes, DNS servers, and policy-based routing on worker nodes using NodeNetworkConfigurationPolicy for multi-network setups.
NNCP Linux Bridge on Worker Nodes
Create Linux bridges on Kubernetes worker nodes using NodeNetworkConfigurationPolicy for KubeVirt VM networking and pod bridging.
NNCP MTU and Jumbo Frames on Workers
Set MTU and enable jumbo frames on worker node interfaces using NodeNetworkConfigurationPolicy for high-throughput storage and AI networking.
NNCP Multi-NIC Architecture for Workers
Design a complete multi-NIC worker node architecture with NNCP for separated management, storage, tenant, and GPU traffic using bonds, VLANs, and bridges.
NNCP OVS Bridge on Worker Nodes
Configure Open vSwitch bridges on Kubernetes worker nodes using NodeNetworkConfigurationPolicy for advanced SDN and DPDK networking.
NNCP Rollback and Troubleshooting
Troubleshoot NodeNetworkConfigurationPolicy failures, monitor enactments, configure rollback timeouts, and recover from bad network configurations.
NNCP SR-IOV and Macvlan on Workers
Configure SR-IOV virtual functions and macvlan interfaces on worker nodes using NodeNetworkConfigurationPolicy for high-performance networking.
NNCP Static IP Assignment on Worker Nodes
Use NodeNetworkConfigurationPolicy to assign static IPv4 and IPv6 addresses to worker node interfaces with nodeSelector targeting.
NNCP VLAN Tagging on Worker Nodes
Configure VLAN interfaces on Kubernetes worker nodes using NodeNetworkConfigurationPolicy for network segmentation and traffic isolation.
NodePort Raw Traffic vs HTTPS Ingress
Route raw GPU inference traffic via NodePort for low-latency gRPC and HTTPS model serving via OpenShift ingress controller.
Deploy NVIDIA Clara on Kubernetes
Deploy NVIDIA Clara medical AI and drug discovery platform on Kubernetes. Run digital biology and medtech inference workloads with GPU acceleration.
NVIDIA H200 GPU Workloads on Kubernetes
Deploy and optimize AI workloads on NVIDIA H200 GPUs with 141GB HBM3e memory for large model inference and training on Kubernetes.
NVIDIA NeMo Training on Kubernetes
Deploy NVIDIA NeMo framework on Kubernetes for large language model pre-training, fine-tuning, and RLHF with multi-node GPU clusters.
NVIDIA NIC Driver Container Entrypoint
Understand and customize the NVIDIA NIC driver container entrypoint for MOFED and DOCA driver lifecycle on Kubernetes and OpenShift.
NVIDIA Pyxis and Enroot for SLURM
Use NVIDIA Pyxis and Enroot to run GPU containers in SLURM jobs. Bridge SLURM HPC scheduling with container-native AI workloads and NGC images.
OpenClaw Auto-Scaling with KEDA
Scale OpenClaw agents based on message queue depth using KEDA event-driven autoscaling for Discord, Telegram, and Slack.
OpenClaw Backup Restore Command Guide
OpenClaw backup and restore command guide. VolumeSnapshots, CronJobs to S3, disaster recovery procedures, and session state management on Kubernetes.
OpenClaw Blue-Green Deployment
Implement zero-downtime OpenClaw upgrades using blue-green deployments with traffic switching and rollback in Kubernetes.
OpenClaw Cron Jobs and Heartbeats
Configure OpenClaw's built-in cron scheduling and heartbeat system on Kubernetes for proactive notifications, periodic checks, and automated background.
Build a Custom OpenClaw Docker Image for K8s
Create an optimized Docker image for OpenClaw with pre-installed dependencies, custom skills, and workspace files for faster Kubernetes deployments.
Run an OpenClaw Discord Bot on Kubernetes
Deploy OpenClaw as a Discord bot on Kubernetes with channel routing, mention handling, group chat rules, and persistent conversation memory.
High Availability OpenClaw with Kubernetes
Run OpenClaw in a high-availability configuration on Kubernetes with health checks, automatic restarts, backup strategies, and monitoring for.
Deploy OpenClaw AI Gateway on Kubernetes
Deploy the OpenClaw multi-channel AI gateway on Kubernetes with persistent storage, TLS ingress, and high availability for WhatsApp, Telegram, Discord.
OpenClaw Logging with EFK Stack
Collect and analyze OpenClaw agent logs using Elasticsearch, Fluent Bit, and Kibana (EFK stack) for debugging and audit trails.
Monitor OpenClaw with Prometheus and Grafana
Set up monitoring for OpenClaw AI gateway on Kubernetes with Prometheus metrics, Grafana dashboards, and alerting for uptime, message throughput, and.
Multi-Agent Routing with OpenClaw
Configure multiple isolated AI agents in a single OpenClaw gateway on Kubernetes with per-agent workspaces, channel bindings, and session isolation.
OpenClaw Network Policies: Default-Deny & Gradual Rollout
Default-deny NetworkPolicies for OpenClaw: restrict egress to APIs, test with audit mode, and handle edge cases before enforcement.
OpenClaw with Persistent Storage
Configure persistent storage for OpenClaw workspaces using PVCs, StorageClasses, and backup strategies in Kubernetes clusters.
OpenClaw RBAC and Multi-Tenant Isolation
Configure OpenClaw RBAC policies and namespace isolation for multi-tenant Kubernetes clusters with per-team agent access controls.
Secure Secrets Management for OpenClaw
Manage API keys, bot tokens, and credentials for OpenClaw on Kubernetes using Kubernetes Secrets, External Secrets Operator, and Sealed Secrets.
Deploy an OpenClaw Signal Messenger Bot
Run OpenClaw as a Signal messenger AI assistant on Kubernetes with linked device pairing, end-to-end encryption, and persistent sessions.
Manage OpenClaw Skills on Kubernetes
Deploy and manage OpenClaw agent skills (tools, automations, integrations) on Kubernetes using ConfigMaps, PVCs, and git-sync for dynamic capability.
Deploy an OpenClaw Telegram Bot on Kubernetes
Run OpenClaw as a Telegram bot on Kubernetes with BotFather setup, webhook configuration, inline commands, and persistent conversation history.
Self-Host an OpenClaw WhatsApp AI Assistant
Deploy OpenClaw on Kubernetes to run a personal WhatsApp AI assistant with QR code pairing, persistent sessions, media support, and allow-list security.
GitOps for OpenClaw Workspaces on Kubernetes
Manage OpenClaw agent workspaces (SOUL.md, skills, memory) with GitOps using Flux or ArgoCD, enabling version-controlled AI persona management on.
OpenShift ACS Security for Kubernetes
Deploy and configure Red Hat Advanced Cluster Security (ACS/RHACS) for vulnerability scanning, compliance, network policies, and runtime threat detection.
OpenShift BuildConfig with ImageStream
Build container images on OpenShift using BuildConfig with ImageStream triggers, pushing to internal registry or local Quay.
OpenShift BuildConfig with Local Quay Registry
Build container images on OpenShift and push to a local Quay registry using BuildConfig, ImageStream, and robot account credentials.
Create Custom CatalogSources for OLM Operators
Configure CatalogSource in OpenShift to serve custom operator catalogs from private registries or air-gapped environments.
Filter CatalogSource Operators by Package
Curate a minimal CatalogSource with only approved operators using opm index pruning and file-based catalog filtering for security and compliance.
Troubleshoot CatalogSource and OLM Issues
Debug CatalogSource failures including pod crashes, gRPC errors, stale caches, and operator install problems in OpenShift OLM environments.
OpenShift Cluster-Wide Pull Secret Setup
Replace admin credentials in the OpenShift cluster-wide pull secret with a Quay robot account for secure, auditable container image pulls across all namespaces.
OpenShift Custom CA for Private Registries
Configure OpenShift to trust a custom Certificate Authority for private container registries using additionalTrustedCA and image.config.openshift.io settings.
Kustomize Deployments with OpenShift GitOps
Use Kustomize overlays with the OpenShift GitOps Operator (ArgoCD) to manage environment-specific configurations across dev, staging, and production clusters.
OpenShift IDMS & install-config.yaml Mirroring
Configure ImageDigestMirrorSet and install-config.yaml imageContentSources for OpenShift disconnected installations with mirror registries.
OpenShift ITMS ImageTagMirrorSet
Configure ImageTagMirrorSet in OpenShift 4.13+ for tag-based image mirroring. Mirror container images by tag instead of digest for disconnected clusters.
OpenShift MachineConfigPool After ITMS
Monitor and manage MachineConfigPool rollouts after applying ImageTagMirrorSet in OpenShift. Handle node restarts, paused pools, and degraded states.
OpenShift Project Request Template Pull Secret
Configure an OpenShift Project Request Template so every new namespace automatically gets a ServiceAccount with imagePullSecrets for your private Quay registry.
OpenShift Serverless KnativeServing
Deploy and configure OpenShift Serverless Operator with KnativeServing for autoscaling, scale-to-zero, and traffic splitting on Kubernetes.
PriorityClasses for GPU Workloads
Configure Kubernetes PriorityClasses for GPU workloads with training, serving, batch, and interactive tiers and preemption policies.
Quay Robot Accounts for Kubernetes Image Pulls
Create Quay robot accounts and configure Kubernetes imagePullSecrets for automated container image pulls from private registries.
ResourceQuota and LimitRange for GPUs
Configure ResourceQuota and LimitRange for GPU workloads with per-tenant caps on GPU, CPU, memory, and object counts in Kubernetes.
RHACS Compliance Scanning in OpenShift
Run CIS, NIST, PCI DSS, and HIPAA compliance scans with Red Hat Advanced Cluster Security and automate reporting for audits.
RHACS Custom Security Policies Guide
Create and manage custom security policies in Red Hat Advanced Cluster Security for image scanning, deployment config, and runtime enforcement.
RHACS Multi-Cluster Management
Manage security across multiple Kubernetes clusters with RHACS Central hub, secured cluster registration, and unified policy enforcement.
RHACS CI/CD Pipeline Integration
Integrate Red Hat Advanced Cluster Security into CI/CD pipelines with roxctl for image scanning, policy checks, and deployment validation.
RHACS Network Segmentation Policies
Use Red Hat Advanced Cluster Security network graph to discover traffic flows, generate NetworkPolicies, and enforce micro-segmentation.
RHCOS Node Management for OpenShift
Understand and manage Red Hat Enterprise Linux CoreOS (RHCOS) for OpenShift nodes including MachineConfig, ignition, OS updates, and node customization.
Rotate Quay Robot Tokens in Kubernetes
Automate Quay robot account token rotation across Kubernetes namespaces with zero-downtime credential updates and validation scripts.
Run:AI GPU Quotas on OpenShift
Configure Run:AI scheduler quotas for fair GPU sharing with guaranteed, over-quota borrowing, and per-tenant GPU allocation policies.
SLURM and Kubernetes Integration
Integrate SLURM HPC workload manager with Kubernetes for hybrid AI and scientific computing. Bridge HPC batch scheduling with container orchestration.
SR-IOV Mixed NICs for GPU Nodes
Configure SR-IOV with mixed ConnectX-7 and ConnectX-6 NICs for RDMA data plane and management traffic on GPU worker nodes.
SR-IOV NicClusterPolicy for VF Configuration
Configure SR-IOV Virtual Functions on Mellanox ConnectX NICs using the NVIDIA Network Operator NicClusterPolicy for high-performance Kubernetes networking.
SR-IOV VF Networking for AI Workloads
Deploy SR-IOV Virtual Functions with RDMA support for distributed AI training on Kubernetes, including multi-NIC pod configuration and NCCL tuning.
SR-IOV VF Troubleshooting on Kubernetes
Diagnose and fix SR-IOV Virtual Function issues including VF creation failures, device plugin errors, RDMA problems, and network attachment failures.
Triton Autoscaling with GPU Metrics
Autoscale Triton Inference Server on Kubernetes using GPU utilization, request queue depth, and inference latency metrics with KEDA and HPA.
Triton Multi-Model Serving on Kubernetes
Serve multiple LLMs simultaneously on Triton Inference Server using TensorRT-LLM and vLLM backends with model routing and GPU scheduling.
Triton TensorRT-LLM on Kubernetes
Deploy NVIDIA Triton Inference Server with TensorRT-LLM backend on Kubernetes for optimized large language model serving with GPU acceleration.
Triton with vLLM Backend on Kubernetes
Deploy NVIDIA Triton Inference Server with vLLM backend on Kubernetes for flexible LLM serving with PagedAttention and continuous batching.
Update CA Certificates in Kubernetes
Rotate and update Certificate Authority (CA) certificates in Kubernetes clusters including kube-apiserver, etcd, kubelet, and custom CA bundles for TLS.
Deploying Vector Databases on Kubernetes
Deploy and operate vector databases (Milvus, Weaviate, Qdrant) on Kubernetes for RAG pipelines, semantic search, and AI applications with persistent.
Configure ClusterPolicy kernelModuleType for GPU
Understand and configure the driver.kernelModuleType field in the NVIDIA GPU Operator ClusterPolicy to choose between auto, open, and proprietary kernel.
Configure GPUDirect RDMA with NVIDIA GPU Operator
Set up GPUDirect RDMA on Kubernetes using the NVIDIA GPU Operator with either DMA-BUF or legacy nvidia-peermem, including Network Operator integration.
Diagnose NVIDIA Memory-Only Kernel Modules
Understand why lsmod shows NVIDIA modules loaded but modinfo fails, and how the GPU Operator's proprietary driver container inserts modules without.
Enable GPUDirect Storage on OpenShift
Configure GPUDirect Storage (GDS) with the NVIDIA GPU Operator on OpenShift, including the Open Kernel Module requirement and nvidia-fs verification.
Fix NVIDIA Peer Memory Driver Not Detected
Diagnose and resolve the 'NVIDIA peer memory driver not detected' error when running GPU workloads with RDMA on Kubernetes and OpenShift.
SELinux and SCC Config for GPU Operator
Understand SELinux device relabeling and Security Context Constraints (SCC) requirements for the NVIDIA GPU Operator driver pods on OpenShift.
Switch to Open NVIDIA Kernel Modules on OpenShift
Step-by-step guide to migrate the NVIDIA GPU Operator from proprietary to open kernel modules on OpenShift, enabling DMA-BUF and GPUDirect Storage support.
Fix nvidia-fs Module Conflict on OpenShift
Diagnose and fix the 'insmod: ERROR: could not insert module nvidia-fs.ko: File exists' error when enabling GPUDirect Storage with the NVIDIA GPU Operator.
Validate GPUDirect RDMA Performance DMA-BUF
Run ib_write_bw with CUDA DMA-BUF to verify GPUDirect RDMA data transfer rates between GPU pods and validate network operator configuration.
Automate NCCL Preflight Checks in CI/CD Pipelines
Run NCCL smoke benchmarks automatically in CI/CD pipelines before promoting GPU cluster changes to production, catching regressions early.
Compare NCCL Intra-Node vs Inter-Node Speed
Build a repeatable comparison between local and cross-node NCCL throughput to validate GPU cluster interconnect scaling and identify bottlenecks early.
Debug NCCL Timeouts and Hangs in Kubernetes
Systematically troubleshoot NCCL runs that stall or timeout across multi-GPU and multi-node Kubernetes jobs with step-by-step diagnostic commands.
Monitor NCCL Benchmarks with Prometheus & Grafana
Track NCCL benchmark outcomes and GPU telemetry over time with Prometheus and Grafana dashboards to detect communication regressions early.
Run NCCL AllGather Benchmarks for Model Parallel
Use all-gather NCCL tests to evaluate GPU communication behavior and throughput for tensor-parallel and model-parallel distributed AI workloads on Kubernetes.
Diagnose GPU Peer-to-Peer Latency NCCL Tests
Use NCCL point-to-point and collective tests to isolate GPU peer-to-peer latency issues between GPU pairs in multi-node Kubernetes clusters.
Run NCCL Tests on Kubernetes (all_reduce_perf)
Run nccl-tests all_reduce_perf on Kubernetes or OpenShift, single-node and multi-node with MPIJob, and read algbw/busbw to validate GPU interconnect bandwidth.
NCCL Env Vars: Force InfiniBand/RoCE and GDR
Force NCCL onto InfiniBand or RoCE instead of TCP sockets: set NCCL_IB_HCA, NCCL_SOCKET_IFNAME, NCCL_IB_GID_INDEX and NCCL_NET_GDR_LEVEL on Kubernetes.
Validate GPU & NIC Topology Before NCCL
Inspect node-level GPU, NIC, and PCI topology on Kubernetes workers to predict and explain NCCL benchmark performance before running tests.
Check Bonding and Interface Status for SR-IOV
Inspect bond membership, interface state, and link aggregation to confirm which NICs can be correctly targeted by SR-IOV network policies on Kubernetes.
Configure SriovNetwork with NVIDIA nv-ipam
Create a SriovNetwork resource that auto-generates a Multus NetworkAttachmentDefinition using nv-ipam for high-performance SR-IOV secondary interfaces.
Create an NVIDIA nv-ipam IPPool for SR-IOV
Define a valid nv-ipam IPPool and node-aware sizing strategy so SR-IOV workloads can reliably obtain secondary interface IP addresses on Kubernetes.
Deploy Mistral 7B with NVIDIA NIM
Step-by-step guide to deploy Mistral-7B using NVIDIA NIM with TensorRT-LLM backend on Kubernetes for optimized GPU inference.
Deploy Mistral 7B with vLLM on Kubernetes
Step-by-step guide to deploy Mistral-7B-v0.1 using vLLM as an OpenAI-compatible inference server on Kubernetes with GPU fractioning.
Enable NIC Feature Discovery on Kubernetes
Enable NIC Feature Discovery through NicClusterPolicy and verify the node labels required by SR-IOV and RDMA GPU networking workflows on Kubernetes.
Identify Mellanox NIC Models from Linux
Map interface names to PCI addresses and Mellanox model generations to build accurate SR-IOV policies and GPU networking configurations on Kubernetes.
Autoscale LLM Inference on Kubernetes
Configure Horizontal Pod Autoscaling and KEDA for LLM workloads using GPU utilization, request queue depth, and custom metrics.
Quantize LLMs for Efficient GPU Inference
Run quantized LLM models (GPTQ, AWQ, GGUF) on Kubernetes to reduce GPU memory requirements and serve models on smaller GPUs.
Kubernetes LLM Serving Frameworks Compared
Compare vLLM, NVIDIA NIM, Triton, Ollama, and llama.cpp for serving LLMs on Kubernetes — features, performance, and when to use each.
Push a Podman-Saved Image to Local Quay
Load a Podman image tar archive, tag it for your Local Quay registry, authenticate with robot accounts, and push it safely to your private repo.
Retag and Push an Image in Local Quay
Pull an existing container image from Local Quay, retag it for a new repository path or version, and push the updated tag back to the registry.
Multi-GPU and Tensor Parallel LLM Inference
Deploy large language models across multiple GPUs using tensor parallelism with vLLM and NVIDIA NIM on Kubernetes for high-throughput inference serving.
Install NVIDIA GPU Operator on Kubernetes
Deploy the NVIDIA GPU Operator to automate GPU driver, container toolkit, and device plugin management across your Kubernetes cluster.
Deploy a New Certificate Each OpenShift Tenant
Replace and activate new TLS certificates tenant by tenant in OpenShift IngressController deployments with verification steps and rollback guidance.
OpenShift Multi-Tenant TLS per IngressController
Set up tenant-isolated TLS in OpenShift by assigning a dedicated certificate Secret to each IngressController for multi-tenant routing security.
Create SR-IOV VFs on OpenShift Operator
Use the OpenShift SR-IOV Network Operator to create and manage Virtual Functions from selected Physical Functions on GPU worker nodes.
Rotate OpenShift Tenant Secrets Safely
Implement low-risk secret rotation in OpenShift multi-tenant environments using versioned Secrets and controlled rollouts.
Build a RAG Pipeline on Kubernetes
Deploy a Retrieval-Augmented Generation pipeline on Kubernetes using a vector database, embedding model, and LLM inference server.
Configure S3 Storage Permissions for ML Models
Set up S3 bucket ACLs, IAM roles, and PVC permissions so Kubernetes inference pods can securely read large ML model weights from object storage.
Test LLM Inference Endpoints with curl
Validate Kubernetes-hosted LLM inference services using curl against OpenAI-compatible /v1/models, /v1/completions, and /v1/chat/completions endpoints.
Fix NVIDIA NIM TensorRT-LLM Initialization Errors
Diagnose and fix common NIM TensorRT-LLM executor failures including DecoderState mismatch, version incompatibilities, and engine build errors.
Fix 'No Supported NIC Is Selected' in SR-IOV
Diagnose SR-IOV operator webhook rejections by validating node state, label selectors, PF eligibility, and SriovNetworkNodePolicy configuration.
Fix nv-ipam 'Pool Not Found' Errors in Multus
Fix nv-ipam IPPool lookup failures in Multus by aligning SriovNetwork, NetworkAttachmentDefinition, and IPPool names and namespaces correctly.
Validate SR-IOV Operator Health Across Nodes
Run a full checklist to confirm SR-IOV discovery, VF creation, scheduler resources, and pod attachment on multiple nodes.
Verify Which Interface Carries OVN Underlay
Confirm the actual OVN underlay network path by checking ovn-encap-ip, bridge port ownership, and physical route associations on Kubernetes nodes.
Kubernetes CronJob concurrencyPolicy: Forbid, Replace
Kubernetes CronJob concurrencyPolicy explained: Allow vs Forbid vs Replace, how Forbid interacts with startingDeadlineSeconds and activeDeadlineSeconds.
Multi-Node NVLink with ComputeDomains
Configure ComputeDomains for robust and secure Multi-Node NVLink (MNNVL) workloads on NVIDIA GB200 and similar systems using DRA
Dynamic Resource Allocation for NVIDIA GPUs
Learn to use Kubernetes Dynamic Resource Allocation (DRA) for flexible GPU allocation, sharing, and configuration with the NVIDIA DRA Driver
MIG GPU Partitioning with DRA on Kubernetes
Dynamically partition NVIDIA A100 and H100 GPUs using Multi-Instance GPU (MIG) technology with Dynamic Resource Allocation for flexible workload isolation
Mixed Accelerator Workloads with DRA
Orchestrate heterogeneous accelerator workloads combining GPUs, TPUs, FPGAs, and custom AI chips using Dynamic Resource Allocation
TPU Allocation Dynamic Resource Allocation
Configure Google Cloud TPUs in Kubernetes using DRA for flexible allocation, multi-slice workloads, and optimized machine learning training
gVisor on Kubernetes: RuntimeClass Sandbox (runsc)
Run sandboxed pods with gVisor on Kubernetes: install runsc, configure containerd, create the gvisor RuntimeClass, GKE Sandbox, enforcement, verification.
How to Integrate HashiCorp Vault with K8s
Securely manage secrets with HashiCorp Vault in Kubernetes. Learn to inject secrets into pods using the Vault Agent Injector and CSI Provider.
GPU Sharing and Bin Packing with KAI Scheduler
Maximize GPU utilization with KAI Scheduler GPU sharing, fractional GPUs, and bin packing strategies for Kubernetes AI workloads.
Installing NVIDIA KAI Scheduler AI Workloads
Deploy KAI Scheduler for optimized GPU resource allocation in Kubernetes AI/ML clusters with hierarchical queues and batch scheduling
Batch Scheduling PodGroups in KAI Scheduler
Implement gang scheduling for distributed training jobs using KAI Scheduler PodGroups to ensure all-or-nothing pod scheduling
KAI Scheduler Hierarchical Queues & Fairness
Configure hierarchical queues in KAI Scheduler for multi-tenant GPU clusters with quotas, limits, and Dominant Resource Fairness (DRF)
Kubernetes API Aggregation Layer
Extend the Kubernetes API with custom API servers using the aggregation layer to add new resource types and functionality without modifying core components
Kubernetes Cluster Upgrade with kubeadm: Step-by-Step
Upgrade Kubernetes safely: version skew, etcd backup, kubeadm control plane and worker upgrades, drain/uncordon, EKS/AKS/GKE commands, and rollback.
Kubernetes Gateway API: HTTPRoute Examples
Gateway API examples: GatewayClass, Gateway listeners, HTTPRoute, GRPCRoute, TLSRoute, canary weights, HTTPS redirect, ReferenceGrant, Ingress migration.
How to Troubleshoot Kubernetes Networking
Debug and resolve Kubernetes networking issues systematically. Learn to diagnose DNS problems, service connectivity, network policies, and CNI issues.
How to Set Up Node Problem Detector
Detect and report node-level issues automatically with Node Problem Detector. Learn to identify kernel problems, hardware failures, and container.
Pod Readiness Gates for Custom Conditions
Implement Pod Readiness Gates to add custom conditions that must be satisfied before a pod is considered ready for traffic, enabling integration with.
Kubernetes Scheduler Configuration and Tuning
Customize the Kubernetes scheduler with scheduling profiles, plugins, and advanced placement strategies for optimal pod placement and resource utilization
How to Use Workload Identity for Cloud Access
Securely access cloud services from Kubernetes pods without static credentials. Configure Workload Identity for AWS, Azure, and GCP with IRSA, Workload.
How to Implement A/B Testing with Kubernetes
Route traffic between application versions for A/B testing. Use service mesh, ingress, and custom routing rules to validate features with real users.
How to Configure Kubernetes API Access Control
Set up secure API server access with authentication and authorization. Configure RBAC, API groups, and audit logging for cluster security.
Argo CD GitOps: Install, Apps and ApplicationSets
Argo CD GitOps on Kubernetes: install, Application and ApplicationSet YAML, Helm/Kustomize sources, sync waves, App of Apps, multi-cluster, RBAC, alerts.
How to Implement Canary Deployments
Learn to implement canary deployments in Kubernetes for gradual rollouts. Use native features and Ingress-based traffic splitting for safe releases.
How to Configure Kubernetes Cluster DNS
Customize CoreDNS configuration for your cluster. Add custom DNS entries, configure forwarding, and optimize DNS resolution.
How to Implement Container Logging Patterns
Configure logging for Kubernetes applications. Implement sidecar logging, log aggregation, and structured logging best practices.
Create Custom Resource Definitions (CRDs)
Extend Kubernetes API with Custom Resource Definitions. Define custom objects, configure validation schemas, and manage CRD lifecycle.
How to Debug Kubernetes Node Issues
Diagnose and troubleshoot node problems in Kubernetes clusters. Identify resource pressure, connectivity issues, and component failures.
How to Debug Pod Networking Issues
Diagnose and fix Kubernetes networking problems. Troubleshoot connectivity, DNS resolution, service discovery, and network policies with practical tools.
Debug Pod Scheduling Failures in K8s
Fix pods stuck in Pending from scheduling failures. Diagnose resource constraints, node affinity, taints, tolerations, and topology spread conflicts.
Kubernetes Deployment Strategies: Blue-Green, Canary
Kubernetes deployment strategies compared: rolling update, recreate, blue-green and canary. YAML, traffic splitting, Argo Rollouts, Flagger and rollback.
Kubernetes dnsPolicy: ClusterFirst, dnsConfig, ndots
Kubernetes pod dnsPolicy explained: ClusterFirst, ClusterFirstWithHostNet, Default, None. dnsConfig nameservers, search domains, ndots tuning, limits.
How to Configure Dynamic Volume Provisioning
Set up dynamic volume provisioning in Kubernetes with StorageClasses. Learn to configure provisioners for AWS EBS, GCP PD, Azure Disk, and NFS.
Configure Environment Variables and ConfigMaps
Manage application configuration with environment variables and ConfigMaps. Learn injection methods, mounting as files, and dynamic configuration updates.
External Secrets Operator: Vault, AWS, Azure, GCP
Install External Secrets Operator and sync secrets from HashiCorp Vault, AWS Secrets Manager, Azure Key Vault or GCP into Kubernetes Secrets, with templates.
Flux GitOps on Kubernetes: Bootstrap to HelmRelease
Flux CD GitOps: bootstrap on GitHub/GitLab, GitRepository + Kustomization, HelmRelease, image automation, multi-tenant repo layout, alerts and debugging.
How to Create Helm Chart Repositories
Set up and manage Helm chart repositories. Learn to host charts on GitHub Pages, S3, GCS, and OCI registries for team distribution.
Helm Sprig Functions: cat, print, toString
Helm Sprig function reference with copy-paste examples and output: cat, print, toString, add1, quote, join, default, and regexReplaceAll explained.
How to Configure Image Pull Secrets
Pull container images from private registries using image pull secrets. Configure authentication for Docker Hub, GCR, ECR, ACR, and private registries.
Secure Ingress with SSL/TLS Certificates
Configure TLS termination for Kubernetes Ingress using cert-manager and Let's Encrypt. Automate certificate issuance and renewal.
Jaeger Tracing on Kubernetes: Setup Guide
Set up Jaeger tracing on Kubernetes step by step: install the operator, deploy Jaeger, and instrument Python, Node.js, and Go apps to trace microservices.
How to Run Kubernetes in Docker (kind)
Create local Kubernetes clusters using kind (Kubernetes in Docker). Set up multi-node clusters, configure networking, and test applications locally.
How to Optimize Kubernetes Costs
Reduce cloud costs in Kubernetes clusters. Right-size resources, use spot instances, implement autoscaling, and monitor spending effectively.
Kubernetes DNS Configuration: CoreDNS and dnsPolicy
Configure Kubernetes DNS: service/pod record formats, dnsPolicy and dnsConfig, CoreDNS forwarding, stub domains, static hosts, ndots, and NodeLocal DNSCache.
How to Use Kubernetes EndpointSlices
Understand and manage EndpointSlices for scalable service discovery. Configure endpoint slicing, troubleshoot connectivity, and optimize large clusters.
How to Use Kubernetes Events for Monitoring
Monitor cluster activity through Kubernetes events. Capture, filter, and alert on events for troubleshooting and operational visibility.
Kubernetes Lease Objects & Leader Election
What a Kubernetes Lease is, how the control plane uses it for leader election, and copy-paste client-go code plus kubectl get lease checks for HA controllers.
How to Implement Advanced NetworkPolicies
Master advanced Kubernetes NetworkPolicies for fine-grained traffic control. Learn egress rules, CIDR blocks, namespace isolation, and common security.
Kubernetes Pod Disruption Budget (PDB) Guide
Configure PodDisruptionBudgets with minAvailable or maxUnavailable to keep apps up during node drains, upgrades and autoscaler scale-down.
How to Configure Pod Lifecycle Hooks
Execute custom actions during pod startup and shutdown with lifecycle hooks. Implement graceful shutdown, initialization tasks, and cleanup operations.
How to Use Pod Presets and Mutations
Automatically inject configurations into pods using admission controllers. Configure environment variables, volumes, and annotations at deployment time.
topologySpreadConstraints: maxSkew, minDomains, Examples
Kubernetes pod topology spread constraints with YAML: maxSkew, whenUnsatisfiable, minDomains, matchLabelKeys, nodeTaintsPolicy, and cluster defaults.
How to Encrypt Secrets at Rest with KMS
Configure Kubernetes secrets encryption at rest using external KMS providers. Learn to set up AWS KMS, GCP KMS, and Azure Key Vault encryption.
Kubernetes Secrets Management Best Practices
Kubernetes Secrets management best practices: create and decode Secrets, encrypt etcd at rest, lock down RBAC, rotate safely, and sync from Vault or AWS.
Kubernetes Service Account: YAML, RBAC, Tokens
Create a Kubernetes ServiceAccount, attach it to a Deployment, grant least-privilege RBAC with Roles and bindings, and test it with kubectl auth can-i.
How to Deploy Stateful Applications
Run stateful workloads on Kubernetes with StatefulSets. Manage stable identities, persistent storage, and ordered deployment for databases and caches.
Kubernetes StatefulSet Guide with Examples
Kubernetes StatefulSet guide: stable pod names and DNS, per-pod PVCs, ordered scaling, partitioned rolling updates, PVC retention and troubleshooting.
Kubernetes Finalizers: Remove Stuck Finalizers
What Kubernetes finalizers are and how to safely remove stuck ones with kubectl patch. Fix namespaces, PVCs, CRDs and Helm releases stuck in Terminating.
Alertmanager on Kubernetes: Helm Setup and Config
Set up Alertmanager on Kubernetes with the kube-prometheus-stack Helm chart: routes, matchers, Slack/PagerDuty/email receivers, inhibition, silences, testing.
Kubernetes ConfigMaps and Secrets Management
Create, mount and update Kubernetes ConfigMaps and Secrets: env vs volume, immutable config, auto-reload with Reloader, RBAC, and encryption at rest.
How to Create and Use Helm Charts
Master Helm, the Kubernetes package manager. Learn to create charts, manage releases, and template your deployments for reusability.
Kubernetes Pod Security Standards (PSS/PSA)
Enforce Kubernetes Pod Security Standards with Pod Security Admission: privileged, baseline and restricted levels, namespace labels, rollout and exemptions.
Expose Services with LoadBalancer and NodePort
Learn different ways to expose Kubernetes services externally using LoadBalancer, NodePort, and ExternalIPs. Compare options for various environments.
How to Deploy MySQL with StatefulSet
Deploy a production-ready MySQL database on Kubernetes using StatefulSet. Learn persistent storage, headless services, and backup strategies.
Kubernetes HPA: Set Max Replicas and Scale
Configure Kubernetes HPA (autoscaling/v2): averageUtilization, set or change maxReplicas, CPU, memory and custom metrics, and scaling behavior.
K8s NetworkPolicy: Default Deny All Traffic
Implement zero-trust network security in Kubernetes with default deny-all NetworkPolicy. Block all ingress and egress traffic with allow-list rules.
PersistentVolumeClaims with StorageClasses
Learn how to provision persistent storage for your Kubernetes workloads using PersistentVolumeClaims and StorageClasses. Includes examples for dynamic.