Contributed Content
Running Production With Zero Stored Logs
I run a Kubernetes platform without a centralized log archive. When I say that, people often imagine something else: short-term retention, logs with sensitive information removed, or something similar. Let me explain ...
Don’t Hand Your AI Agent the Keys: MCP vs. Context Layers
AI-enabling your systems is easy if you believe the brochures in your inbox. Wrap the system you already have in an MCP server, point a model at it, done. By the end ...
Mark Fussell | | agentic AI, AI agents, AI governance, AI infrastructure, AI security, Change Data Capture, cloud native, cloud native security, cloud-native architecture, Confused Deputy Problem, Context Layers, data security, enterprise AI, kubernetes, least privilege, MCP, Model Context Protocol, Production AI, Prompt Injection, Secure AI Integration
Your ML Platform Isn’t Kubernetes-Native Just Because It Runs on Kubernetes
The real transformation begins when the ML lifecycle becomes declarative, observable, and recoverable. As Vara Bonthu described in a recent CNCF article, the great migration of AI workloads to Kubernetes is well ...
One Hub, 34 Clusters: Lessons From a GitOps Control Plane at Scale
On Oct. 6, Red Hat published a walkthrough of Argo CD ApplicationSets provisioning hosted control planes straight from Git. A day later, GitHub had an outage that hit Actions, Git operations and ...
AI Didn’t Break Kubernetes Optimization. GPUs Did.
The industry is buzzing about how AI agents have driven up Kubernetes costs. But most agents run like any other service, and the usual tools like right-sizing, bin packing and autoscaling still ...
How Kubernetes Workload Identity Actually Works at the Protocol Layer
Learn how Kubernetes workload identity uses ServiceAccounts, JWTs, OIDC federation and short-lived tokens to secure cloud-native applications ...
Michael Carter | | Cloud IAM, cloud native security, identity and access management, JWT Authentication, kubernetes, Kubernetes RBAC, Kubernetes security, Kubernetes Workload Identity, OIDC Federation, PKI, Pod Security, ServiceAccounts, Short-Lived Credentials, SPIFFE, TokenRequest API, Workload Identity Federation, zero-trust
Why Cloud-Native Software Testing Requires Rethinking What a Passing Test Actually Means
A passing test in a monolith traditionally offered a relatively straightforward signal. The code behaved as expected under the conditions tested. The function produced the expected output. The integration with the database ...
Scaling GitOps With Release Promotion
GitOps pipelines that work well across a handful of Kubernetes clusters can become risky at fleet scale. For organizations managing hundreds of clusters, faster synchronization doesn't solve the challenge of validating releases ...
Jesse Suen | | ApplicationSets, Argo CD, cloud native, continuous delivery, devops, Fleet Management, GitOps, GitOps at Scale, karmada, KubeCon 2026, kubernetes, Kubernetes clusters, Kubernetes deployment, Multi-Cluster Kubernetes, Open Cluster Management, platform engineering, progressive delivery, Rancher Fleet, Release Promotion, Release Verification, Staged Rollouts
Kubernetes and Infrastructure as Code in the Age of Agentic Development
Infrastructure-as-code (IaC) goes far beyond provisioning cloud resources. As Kubernetes environments evolve and AI agents take on more operational responsibilities, IaC provides a controlled, reviewable approach to managing infrastructure changes. From Kubernetes ...
What Service Virtualization Tools Need to Handle in a Cloud Native Architecture
Independent deployment changes what service virtualization tools must handle. Understand how the top service virtualization tools compare for cloud native teams ...

