In Linux, cgroups (control groups) are a kernel feature used for managing system resources. Kubernetes uses cgroups to allocate resources like CPU and memory to containers, ensuring that applications...

Memory QoS has graduated to Beta in Kubernetes v1.37 and is now enabled by default. On Linux nodes running cgroup v2, the feature uses the memory controller to give the kernel better guidance on how to...

Kubernetes has many ways to describe what is happening on a Node. Readiness, taints, Pod state, labels, annotations, and provider-specific APIs each expose part of the picture. What has been missing is...

Summary of Changes ⚠️ Due to a release issue, the v1.21.0-pre.1 has not been completed, instead we are publishing v1.21.0-pre.2. This changelog contains the changes from v1.21.0-pre.0 to v1.21.0-pr...

Kubernetes v1.37 promotes the KubeletInUserNamespace feature gate to beta. With this feature enabled, all of the node components (kubelet, CRI and OCI runtimes, CNI plugins, and kube-proxy) can run as...

AI agents need sandboxes. Learn how Chainguard uses microVMs to safely run untrusted code, contain exploits, and protect sensitive workloads.

If you run GPU workloads on Kubernetes — vLLM, Triton, training jobs, or the newer agentic inference stacks — you’ve probably hit a familiar problem: the default autoscaling path still reasons about…

htop for the airwaves — a live 802.11 (Wi-Fi) RF dashboard in your terminal - yeet-src/airtop

eBPF program which generates Seccomp profile. Contribute to rimvydascivilis/seccomp-profiler development by creating an account on GitHub.

Netbump, a network bandwidth limiting tool for Linux end user

I still remember the first time we lost sleep over something that wasn’t a bug. It was a Tuesday. Grafana dashboards showed blank panels for Cilium network metrics. Hubble was working fine — DNS…

v2.3.1 is a patch release scoped to fixing issues reported by users of Crossplane v2.3 and fixing security related issues in Crossplane's dependencies. What's Changed chore(deps): update module go...

Kubernetes was designed for a single cluster. As organisations scale to fleets of tens, hundreds, or thousands of clusters, the operational model hasn't kept up. This paper proposes one that does.

What is High Availability Testing? High Availability Testing ensures that your application remains accessible and functional even when components fail. It...

After several years of development, User Namespaces support in Kubernetes reached General Availability (GA) with the v1.36 release. This is a Linux-only feature. For those of us working on low level c...

The Kubernetes SIG Network community presents the release of Gateway API (v1.5)! Released on March 14, 2026, version 1.5 is our biggest release yet, and concentrates on moving existing Experimental features...

Cilium now brings native, inline mTLS to the Kubernetes datapath with ztunnel, unifying authentication and encryption in a single ste...

Explore this photo album by Cloud Native Computing Foundation on Flickr!

HolmesGPT now integrates Inspektor Gadget's eBPF-based observability tools, giving its AI agent the ability to capture live system data — processes, sockets, DNS, TCP connections, syscalls, and networ...

At KubeCon + CloudNativeCon Europe 2026 in Amsterdam, we're announcing advancements to bring the operational maturity of Kubernetes to today's workloads and demands.

Cilium now brings native, inline mTLS to the Kubernetes datapath with ztunnel, unifying authentication and encryption in a single ste...

In the standard Kubernetes model, a node’s suitability for workloads hinges on a single binary "Ready" condition. However, in modern Kubernetes environments, nodes require complex infrastructure dependencies—such...

Why Adopt NodeLocal DNSCache? The primary drivers for adoption are usually: Eliminating Conntrack Pressure: In high-QPS UDP DNS scenarios, conntrack...

A look at how Kubernetes CVE-2020-8554 works

Debugging Kubernetes control plane components can be challenging, especially when you need to quickly understand the runtime state of a component or verify its configuration. With Kubernetes 1.35, we're...

On behalf of Kubernetes SIG Node, we are pleased to announce the graduation of fine-grained supplemental groups control to General Availability (GA) in Kubernetes v1.35! The new Pod field, supplementalGroupsPolicy,...

Original tracking issue: kubernetes-sigs/headlamp#4282 CVSS Rating: High (8.8) CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Description of vulnerability A security issue was discovered in the in-cl...