iiinova — where your digital self keeps evolving

Daniele Polencic @danielepolencic.com · 14/10/2026

Just landed: Learn Kubernetes weekly 205! My top picks: 🛡️ Scaling by Rejection 🤖 Scaling LLMs with KServe ⏰ Batch Jobs as Kubernetes CronJobs 🧠 Human-Governed Kubernetes A Read it here: kube.today/issues/205

https://assets.learnk8s.io/linkedin-205.png

080

Daniele Polencic @danielepolencic.com · 13/10/2026

1/10 One of the things I like about the LearnKube Telegram group is the discussion that follows the articles we share. We shared a case study about a payment service stuck in a restart loop. Its liveness probe depended on a downstream service.

https://social-planner-temp.uasabi.com/2026/11/12/0129-liveness-restart-loop.png

188

Daniele Polencic @danielepolencic.com · 05/10/2026

Update: two of our LearnKube Kubernetes courses just confirmed—online 22 Oct, Munich 16 Nov! Come back knowing more Kubernetes than the colleague you always ask for help learnkube.com/training

https://social-planner-temp.uasabi.com/2026/11/04/e0ed-22oct.png

090

Daniele Polencic @danielepolencic.com · 02/10/2026

1/5 This KubeCon NA, we will host our first community event: LearnKube Day in Salt Lake City, on November 9. This one is special to me. For the first time, we will bring our community together for a day of our own. 🧵

https://social-planner-temp.uasabi.com/2026/12/01/1d47-learnkube-day-announce.png

187

Daniele Polencic @danielepolencic.com · 30/09/2026

Just landed: Learn Kubernetes weekly 203! My top picks: 🔍 Dropping Logs in Your Cluster 💤 Scale to Zero with KEDA 🕵️ Hidden Docker Secrets 🐍 Kubex Async Python Client Read it here: kube.today/issues/203

https://assets.learnk8s.io/linkedin-203.png

072

Daniele Polencic @danielepolencic.com · 28/09/2026

Agents are becoming part of everyday Kubernetes operations. How do we know when to trust them? Some mistakes produce an immediate error. Others look like successful fixes until production conditions change 🧵

https://social-planner-temp.uasabi.com/2026/10/28/cbfb-question-linkedin.png

180

Daniele Polencic @danielepolencic.com · 23/09/2026

Just landed: Learn Kubernetes weekly 202! My top picks: 🔀 Strimzi HA Kafka Playbook 🤖 Distributed LLM Inference 0 to 1 🚪 High-Performance AI Gateway 🛡️ Kubesafe: Cluster Safety Read it here: kube.today/issues/202

https://assets.learnk8s.io/linkedin-202.png

080

Daniele Polencic @danielepolencic.com · 21/09/2026

Kubernetes hard mode: how do banks run their platforms? My new book, Kubernetes Architecture in Financial Services, is out now: learnkube.com/kubernetes-architectu… Here is what surprised me while researching it:

https://social-planner-temp.uasabi.com/2026/10/21/fc63-Frame-165.png

https://social-planner-temp.uasabi.com/2026/10/21/5fa6-Screenshot-2026-09-21-at-20.25.12.png

https://social-planner-temp.uasabi.com/2026/10/21/e725-Screenshot-2026-09-21-at-20.24.46.png

https://social-planner-temp.uasabi.com/2026/10/21/4c92-Screenshot-2026-09-21-at-20.24.05.png

180

Daniele Polencic @danielepolencic.com · 16/09/2026

My picks from Learn Kubernetes Weekly 201: 🌐 Linkerd multicluster failover 💸 EKS Spot capacity with Karpenter 🔌 Auto-reconnecting port forwards Read it: kube.today/issues/201

https://social-planner-temp.uasabi.com/2026/10/16/0492-linkedin-201.png

080

Daniele Polencic @danielepolencic.com · 14/09/2026

When does Kubernetes make sense? It is one of the questions we ask during private Kubernetes courses at @learnkube.com. My controversial answer is one application.

https://social-planner-temp.uasabi.com/2026/10/14/8cb1-make-sense.png

198

Daniele Polencic @danielepolencic.com · 09/09/2026

It's Kubernetes newsletter day (and it's also issue 200!!!!) My top picks from this week: 🧪 Local multi-cluster platforms 🔎 Helm security scanning at scale 🛡️ eBPF runtime enforcement Read it: kube.today/issues/200

https://social-planner-temp.uasabi.com/2026/10/09/b6ea-linkedin-200.png

070

Daniele Polencic @danielepolencic.com · 03/09/2026

“The technical depth of demos and deep-dive explanations - so much better than any of the many online on-demand classes I've taken.” This is why we continue to teach Kubernetes live learnkube.com/online-advanced-septe…

https://social-planner-temp.uasabi.com/2026/09/17/f629-10sep.png

088

Daniele Polencic @danielepolencic.com · 02/09/2026

Just landed: Learn Kubernetes weekly 199! My top picks: 🤖 AI Agent for VictoriaMetrics 🍓 Raspberry Pi Homelab with K3s 🏗️ Multi-Cluster Management with Rancher 🔓 Cordium Secretless Sandboxes Read it here: kube.today/issues/199

https://assets.learnk8s.io/linkedin-199.png

070

Daniele Polencic @danielepolencic.com · 26/08/2026

Just landed: Learn Kubernetes weekly 198! My top picks: 🧪 k6 Test Suite on Kubernetes 🔌 WSO2 API Gateway on OpenShift ⚡ Autoscalable GitLab Runners on EC2 🔐 Kubernetes IPsec Connection Operator Read it here: kube.today/issues/198

https://assets.learnk8s.io/linkedin-198.png

080

Daniele Polencic @danielepolencic.com · 24/08/2026

ECS, EKS, or… EC2? If you had an expert whisperer next to you, would it really matter which orchestrator you chose? And are internal developer platforms becoming another harness?

https://social-planner-temp.uasabi.com/2026/09/23/99de-harness.png

080

Daniele Polencic @danielepolencic.com · 19/08/2026

Just landed: Learn Kubernetes weekly 197! My top picks: 🧪 Ephemeral Environments for QA 🎛️ Tuning Argo CD Defaults 📊 KEDA: Scale Smarter, Not Harder 🤖 Agent Substrate Runtime Read it here: kube.today/issues/197

https://assets.learnk8s.io/linkedin-197.png

080

Daniele Polencic @danielepolencic.com · 12/08/2026

Just landed: Learn Kubernetes weekly 196! My top picks: 📦 Kargo Between CI and ArgoCD 📈 GPU Autoscaling with vLLM 🧠 AI-Aware Kubernetes Routing 🛡️ ESP Kubernetes Reference Implementation Read it here: kube.today/issues/196

https://assets.learnk8s.io/linkedin-196.png

070

Daniele Polencic @danielepolencic.com · 05/08/2026

Just landed: Learn Kubernetes weekly 195! My top picks: 🔒 Nodes/proxy Get: One Permission Too Many 🔑 Kubernetes AuthN the Hard Way 🐛 ArgoCD ServerSideDiff Vulnerability 🛠️ Okteto Dev Platform Read it here: kube.today/issues/195

https://assets.learnk8s.io/linkedin-195.png

080

Daniele Polencic @danielepolencic.com · 03/08/2026

We’ve just confirmed 3 private Kubernetes training engagements for September alone Want to level up your team’s Kubernetes and platform engineering skills? Teams: learnkube.com/corporate-training Individuals: learnkube.com/training

https://social-planner-temp.uasabi.com/2026/08/30/e170-173.png

097

Daniele Polencic @danielepolencic.com · 29/07/2026

Just landed: Learn Kubernetes weekly 194! My top picks: 🎮 Game Servers with Agones 🤝 Multi-Agent A2A on EKS ✍️ Docker Image Signing and Verification 🖥️ AI Cluster Runtime for K8s: NVIDIA AICR Read it here: kube.today/issues/194

https://assets.learnk8s.io/linkedin-194.png

080

Daniele Polencic @danielepolencic.com · 28/07/2026

One million output tokens per second. On Kubernetes KubeFM Season 9 starts with a bang! Federico Iezzi explains how he reached that milestone with Qwen 3.5, vLLM, GKE Autopilot and B200 GPUs 🎙Bart is back. KubeFM is back ku.bz/1xD9Md0mb

081

Daniele Polencic @danielepolencic.com · 22/07/2026

Just landed: Learn Kubernetes weekly 193! My top picks: 🚧 Kubernetes Gotchas Breaking Laravel Deploys 🕵️ Catching Helm Drift 🧩 Fixing 502 Bad Gateway in GKE and Istio 🛡️ Copy Fail Destroyer Read it here: kube.today/issues/193

https://assets.learnk8s.io/linkedin-193.png

081

Daniele Polencic @danielepolencic.com · 15/07/2026

Just landed: Learn Kubernetes weekly 192! My top picks: 🔑 EKS Pod Identity Session Policies 🛡️ Blocking Copy Fail with Tetragon 🌐 PodCIDR Pools with Cilium and vCluster 🗺️ k8scout Attack Path Mapper Read it here: kube.today/issues/192

https://assets.learnk8s.io/linkedin-192.png

081

Daniele Polencic @danielepolencic.com · 08/07/2026

Just landed: Learn Kubernetes weekly 191! My top picks: 🛡️ Secure AI Kubernetes Debugging ☁️ On-Prem Meets Cloud, Finally 📊 Local EKS Log Monitoring 🚫 Copy Fail Blocker Read it here: kube.today/issues/191

https://assets.learnk8s.io/linkedin-191.png

071

Daniele Polencic @danielepolencic.com · 01/07/2026

Just landed: Learn Kubernetes weekly 190! My top picks: 🔒 L7 Filtering with Cilium eBPF 🐛 Debugging Across Container Boundaries 🛡️ Automating Pod Disruption Budgets ⛵ Luxury Yacht: K8s Management App Read it here: kube.today/issues/190

https://assets.learnk8s.io/linkedin-190.png

070

Daniele Polencic @danielepolencic.com · 24/06/2026

Just landed: Learn Kubernetes weekly 189! My top picks: 🚀 GitOps at Enterprise Scale 🖥️ Generative AI at the Edge with EKS Hybrid Nodes 🪖 Deploying OpenClaw with Helm 🐘 OpenEverest Database Platform Read it here: kube.today/issues/189

https://assets.learnk8s.io/linkedin-189.png

070

Daniele Polencic @danielepolencic.com · 17/06/2026

Just landed: Learn Kubernetes weekly 188! My top picks: 🚀 Stateless ArgoCD for Bare-Metal 🔏 Signed, Sealed, and Admitted 🔐 Securing Inference with Authorino 🔍 xpdig: Explore Crossplane Traces Read it here: kube.today/issues/188

https://assets.learnk8s.io/linkedin-188.png

070

Daniele Polencic @danielepolencic.com · 10/06/2026

Just landed: Learn Kubernetes weekly 187! My top picks: 🔐 OAuth with Kindling 🔀 Sharded Multi-Cluster cert-manager 🏗️ Private EKS Cluster with OpenVPN and Grafana 🗃️ Chainloop SDLC Evidence Store Read it here: kube.today/issues/187

https://assets.learnk8s.io/linkedin-187.png

170

Daniele Polencic @danielepolencic.com · 03/06/2026

Just landed: Learn Kubernetes weekly 186! My top picks: 🔧 Fixing ISR Revalidation Across Replicas 🌐 GKE Multi-cluster Gateway 🚀 Migrating VPC CNI to EKS Managed Add-on 🗼 hanoi-cli Read it here: kube.today/issues/186

https://assets.learnk8s.io/linkedin-186.png

081

Daniele Polencic @danielepolencic.com · 01/06/2026

Gulcan did an excellent job turning this into a concrete walkthrough, with examples for users, Pods, projected tokens, TokenReview, and AWS IAM federation. learnkube.com/authentication-kubern…

https://res.cloudinary.com/learnk8s/image/upload/v1779716254/authentication-kubernetes-identities-thread-2026/tweet-7-aws-credentials.png

000

Daniele Polencic @danielepolencic.com · 01/06/2026

Inside the cluster, TokenReview is the simpler version of the same idea. Send Kubernetes a token. Get back whether it is valid, and which identity it represents.

https://res.cloudinary.com/learnk8s/image/upload/v1779716253/authentication-kubernetes-identities-thread-2026/tweet-6-tokenreview.png

100

Daniele Polencic @danielepolencic.com · 01/06/2026

This is also why EKS IRSA works. AWS does not ask the Kubernetes API server whether the Pod exists. It verifies the projected token through the cluster OIDC issuer and JWKS endpoint, then returns temporary AWS credentials.

https://res.cloudinary.com/learnk8s/image/upload/v1779716252/authentication-kubernetes-identities-thread-2026/tweet-5-aws-sts.png

100

Daniele Polencic @danielepolencic.com · 01/06/2026

That pod binding is important. It means the token is not just “some secret in a volume”. It can be scoped to a specific workload, for a specific audience, with a specific expiry.

https://res.cloudinary.com/learnk8s/image/upload/v1779716251/authentication-kubernetes-identities-thread-2026/tweet-4-jwt-claims.png

100

Daniele Polencic @danielepolencic.com · 01/06/2026

Pods take a different path. They use service accounts. The token mounted into a Pod is a JWT, and with TokenRequest it can carry: - audience - issuer - expiry - subject - pod binding

https://res.cloudinary.com/learnk8s/image/upload/v1779716250/authentication-kubernetes-identities-thread-2026/tweet-3-projected-token.png

100

Daniele Polencic @danielepolencic.com · 01/06/2026

Kubernetes has no `User` resource. For people, the identity comes from outside the cluster: OIDC, client certificates, webhooks, proxies, or static token files. The API server only needs the result: username, UID, groups, and extras.

https://res.cloudinary.com/learnk8s/image/upload/v1779716249/authentication-kubernetes-identities-thread-2026/tweet-2-external-users.png

100

Daniele Polencic @danielepolencic.com · 01/06/2026

RBAC, OIDC, service accounts, IRSA, TokenReview. Kubernetes auth is usually presented as a bag of separate topics. The API server starts from a smaller question: Who is making this request?

https://res.cloudinary.com/learnk8s/image/upload/v1779716247/authentication-kubernetes-identities-thread-2026/tweet-1-opening.png

170

Daniele Polencic @danielepolencic.com · 27/05/2026

Just landed: Learn Kubernetes weekly 185! My top picks: 🏥 Designing for Failure with CloudNativePG 🏠 Homelab Kubernetes Cluster with $0 Cloud Costs 🔐 From ACM to ALB on EKS Auto Mode ⚡ Zeropod: Scale to Zero Read it here: kube.today/issues/185

https://assets.learnk8s.io/linkedin-185.png

070

Daniele Polencic @danielepolencic.com · 20/05/2026

Just landed: Learn Kubernetes weekly 184! My top picks: 🔒 Securing Crossplane Dashboard 🔑 Leaked Secrets in Version Control 🍓 Production Kubernetes on Raspberry Pi 🩺 Node Healthcheck Operator Read it here: kube.today/issues/184

https://assets.learnk8s.io/linkedin-184-v2.png

071

Daniele Polencic @danielepolencic.com · 18/05/2026

Gulcan Topcu traced the path end to end in a new LearnKube deep dive. If you care about Kubernetes metrics beyond dashboard labels, this is worth reading: learnkube.com/kubernetes-metrics-ca…

https://res.cloudinary.com/learnk8s/image/upload/v1779111527/learnkube-metrics-twitter-thread-2026/slide-8-v1.png

000

Daniele Polencic @danielepolencic.com · 18/05/2026

This is the part that is hard to find in one place: where cgroups stop, where cAdvisor starts, what kubelet exposes, and when the runtime becomes the source of truth for pod stats.

https://res.cloudinary.com/learnk8s/image/upload/v1779111526/learnkube-metrics-twitter-thread-2026/slide-7-v1.png

100

Daniele Polencic @danielepolencic.com · 18/05/2026

But kubelet can also ask the container runtime directly. Through CRI, containerd or CRI-O can return pod and container stats without kubelet rediscovering everything from the host.

https://res.cloudinary.com/learnk8s/image/upload/v1779111525/learnkube-metrics-twitter-thread-2026/slide-6-v1.png

100

Daniele Polencic @danielepolencic.com · 18/05/2026

For years, cAdvisor has been the familiar path. It runs inside kubelet, reads host-level cgroup data, labels it with Kubernetes context, and exposes container metrics for Prometheus to scrape.

https://res.cloudinary.com/learnk8s/image/upload/v1779111524/learnkube-metrics-twitter-thread-2026/slide-5-v1.png

100

Daniele Polencic @danielepolencic.com · 18/05/2026

Kubelet sits in the middle. It knows about pods and containers, but the raw usage data comes from lower layers. That is why kubelet exposes multiple views: /metrics, /metrics/cadvisor, /metrics/resource, and /stats/summary.

https://res.cloudinary.com/learnk8s/image/upload/v1779111523/learnkube-metrics-twitter-thread-2026/slide-4-v1.png

100

Daniele Polencic @danielepolencic.com · 18/05/2026

For pod and container usage, the story starts in Linux. Kubernetes declares requests and limits, but cgroups enforce them and expose the counters behind CPU, memory, and process metrics.

https://res.cloudinary.com/learnk8s/image/upload/v1779111522/learnkube-metrics-twitter-thread-2026/slide-3-v1.png

100

Daniele Polencic @danielepolencic.com · 18/05/2026

Kubernetes metrics are not one thing. Node metrics, control-plane metrics, object-state metrics, and pod/container usage all come from different layers. If you debug the wrong layer, the numbers will not make sense.

https://res.cloudinary.com/learnk8s/image/upload/v1779111521/learnkube-metrics-twitter-thread-2026/slide-2-v1.png

100

Daniele Polencic @danielepolencic.com · 18/05/2026

Most Kubernetes metrics tutorials stop just as the interesting part begins. They show Prometheus or Metrics Server, then skip kubelet, cAdvisor, CRI, containerd, and Linux cgroups. That's the part you need if you want to trust your dashboards.

https://res.cloudinary.com/learnk8s/image/upload/v1779111521/learnkube-metrics-twitter-thread-2026/slide-1-v1.png

180

Daniele Polencic @danielepolencic.com · 13/05/2026

Just landed: Learn Kubernetes weekly 183! My top picks: 🎙️ Vibe Coding a K8s Media Server 🐘 CloudnativePG: Postgres on Kubernetes ⚡ CRaC: 88% Faster Spring Boot 👾 Kubeinvaders: Cluster Resilience Testing Read it here: kube.today/issues/183

https://assets.learnk8s.io/linkedin-183.png

071

Daniele Polencic @danielepolencic.com · 11/05/2026

Most Kubernetes production failures are contract failures between the app and Kubernetes. Gulcan and I made an interactive readiness checklist and PDF worksheet for the app behavior that Kubernetes will test before go-live. learnkube.com/production-best-pract…

https://res.cloudinary.com/learnk8s/image/upload/v1778503898/preview-linkedin_orlba9.png

080

Daniele Polencic @danielepolencic.com · 06/05/2026

Just landed: Learn Kubernetes weekly 182! My top picks: 🤖 LLMs on Kubernetes the Easy Way 🌐 Kubernetes Gateway API on EKS via ALB 🔧 Elastic Kubernetes Platform on VMware vSphere 🔐 PII-Shield: Log Sanitizer Read it here: kube.today/issues/182

https://assets.learnk8s.io/linkedin-182.png

071

Daniele Polencic @danielepolencic.com · 29/04/2026

Just landed: Learn Kubernetes weekly 181! My top picks: 🐳 Docker Compose to Kubernetes on AWS 🔄 Automated GitOps: ECR to EKS 🍓 Kubernetes Cluster with Raspberry Pis 🔐 Audicia — RBAC from Audit Logs Read it here: kube.today/issues/181

https://assets.learnk8s.io/linkedin-181.png

181