Tag: Kubernetes
All the articles with the tag "Kubernetes".
-
SpinKube: running WebAssembly workloads on Kubernetes without a custom runtime
SpinKube schedules WebAssembly modules as regular pods — the same kubectl apply, the same HPA, but startup in single-digit milliseconds with no container warm-up. We break down the containerd-shim-spin architecture, install the SpinKube operator, deploy a SpinApp next to a regular Deployment and measure the difference — while being honest about which workloads WASM still isn't a fit for.
-
ValidatingAdmissionPolicy: moving admission control into the API server with CEL
Kyverno 1.17 deprecates classic ClusterPolicy in favor of CEL-native ValidatingPolicy, with removal planned for v1.20. ValidatingAdmissionPolicy has been stable since Kubernetes 1.30 and runs CEL directly inside kube-apiserver — no webhook, no network hop, no separate pod. We break down the CEL expression model, migrate a real policy, and measure the latency before/after.
-
KEDA: event-driven autoscaling, all the way to zero
KEDA scales pods by queue depth, a metric, or a schedule — not just CPU/RAM — and can scale all the way down to zero. ScaledObject, scalers for Kafka/RabbitMQ/Prometheus/cron, and the polling interval, activation-vs-scaling threshold, and cooldown gotchas.
-
Istio ambient: a service mesh without sidecars
Istio's ambient mode reached GA and removes the main argument against service mesh — a sidecar in every pod. We cover the ztunnel + waypoint architecture, mTLS without restarts, and rolling out L7 only where it's needed.