The Cloud Native Technology Community, part of the CNBPA Cloud Native Technology Practice Alliance, focuses on evangelizing cutting‑edge cloud‑native technologies and practical implementations. It shares in‑depth content, case studies, and event/meetup information on containers, Kubernetes, DevOps, Service Mesh, and other cloud‑native tech, along with updates from the CNBPA alliance.
This article provides an in‑depth analysis of the Kubernetes scheduler's queue subsystem, detailing the internal data structures, heap implementation, priority queue logic, and the lifecycle methods that add, activate, update, and remove Pods from active, backoff, and unschedulable queues.
This article explains why security testing is critical for Kubernetes clusters, outlines key testing approaches such as SAST, DAST, container image scanning, configuration audits, and network policy testing, and provides practical steps for integrating these methods into CI/CD pipelines to ensure robust cloud‑native security.
Kubernetes is moving its Debian and RPM package repositories to the community‑owned pkgs.k8s.io domain, deprecating the old apt.kubernetes.io and yum.kubernetes.io sources, and the article explains the timeline, impact on end users and distributors, and step‑by‑step migration guidance.
This guide explains what sidecars are in Kubernetes, why they matter, the challenges they introduce, and how the new sidecar KEP in Kubernetes 1.28—introducing an Always RestartPolicy for init containers—formalizes sidecars as first‑class API objects, reshaping service‑mesh implementations and operational practices.
This article explains the new sidecar feature in Kubernetes 1.28 that adds a restartPolicy field to init containers, describes its behavior, provides usage examples, discusses when to adopt it, outlines migration steps, lists known issues, and invites community feedback.
The mixed version proxy, introduced as an alpha feature in Kubernetes 1.28, enables correct handling of HTTP requests across clusters with multiple API server versions by routing requests to a compatible peer, preventing 404 errors during upgrades and providing flags for configuration and security.
The article analyzes how private keys for workloads uploaded via Istio Ingress gateways can be exposed in plaintext, stored in memory, and extracted using tools like OpenSSL and GDB, and discusses mitigation strategies such as Intel SGX‑based protection.
Kubernetes 1.28 adds two alpha features—Pod Replacement Policy and per‑index backoff limits—that let batch jobs replace terminating pods more intelligently and cap retries for each indexed pod, reducing resource waste and improving reliability for machine‑learning workloads.
This article explains how to construct an Internal Developer Platform (IDP) on Kubernetes by outlining its essential components, adding default add‑on tools, establishing governance and policies, and implementing continuous integration/continuous delivery pipelines to provide developers with a safe, efficient, and cost‑effective experience.
Kubernetes v1.28, codenamed Planternetes, introduces 45 enhancements—including expanded version skew support, non‑graceful node shutdown recovery, improved CRD validation, beta ValidatingAdmissionPolicies, hybrid version proxy, and many features promoted to stable—while also deprecating and removing several older components, and provides download and community resources for adoption.
