DevopsCube

65% OFF Linux Foundation sale is live now 🚀 Use code MM26CCCT at kube.promo/cyber to get flat 50% discount on Individual certifications like CKA, CKAD etc. Using code MM26BUNCT you can save up to 60% on the following k8s certification bundles. - CKA + CKAD: kube.promo/cka-ckad - CKA + CKS Bundle: kube.promo/bundle - CKA + CKAD + CKS Exam bundle: kube.promo/k8s-bundle - KCNA + CKA: kube.promo/kcka-bundle - KCSA + CKS Exam Bundle: kube.promo/kcsa-cks - KCNA + KCSA Exam Bundle: kube.promo/kcna-kcsa You can save up to 65% off on Kubestronaut Bundle as compare to individual purchase. Use code MM26K8BUNCT for the following Kubestronaut Bundle - KCNA + KCSA + CKA + CKAD + CKS: kube.promo/kubestronaut If you bundle Your Certs with THRIVE Annual Subscription you can get 65% off certifications along with, - 100+ educational products - 45+ e-learning courses with hand-on labs - 8+ SkillCreds ♻️ P.S. Don’t forget to repost and share it with the DevOps community and your friends! --- Always approach certification preparation the right way with thorough research and hands-on practice. Focus on learning and building real skills, as certification is just the validation of your knowledge and effort! #kubernetes #devops #cka #ckad #cks

GitHub Actions + AWS Without Long-Lived Secrets? 🚀 Modern DevOps pipelines should not depend on hardcoded AWS access keys. Because leaked CI/CD credentials are still one of the biggest cloud security risks. That is where OIDC helps. Instead of storing AWS secrets in GitHub, your workflow gets short-lived, temporary credentials directly from AWS at runtime. - No static keys. - No secret rotation headaches. - Less blast radius if something goes wrong. In this blog, We will look at GitHub Actions OIDC AWS Integration using a step-by-step example that secures access to the AWS cloud. By the end of this guide, you will understand: - Why OIDC is a secure way to connect GitHub Actions with AWS - How GitHub’s OIDC integration works with AWS - A step-by-step method to set up OIDC using IAM roles - How to test the setup using AWS CLI and deploy to EKS with GitHub Actions workflows 𝗗𝗲𝘁𝗮𝗶𝗹𝗲𝗱 𝗕𝗹𝗼𝗴: devopscube.com/github-actions… 𝗡𝗼𝘁𝗲: A fully private GitHub Enterprise Server setup cannot use AWS OIDC unless AWS can access the GHES OIDC metadata endpoint over HTTPS #devops #GithubActions #OIDC #aws

This Kubernetes feature changes how containers handle root privileges 👇 User Namespaces is security feature that maps user and group IDs inside a container to a different set of IDs on the host (Rootless Isolation) Here is the key idea. A process running as root (UID 0) inside the container runs an unprivileged user (eg, UID 100000) on the host. Without user namespaces, when a container runs as root uses the same root identity as the host. So If an attacker breaks out of the container, they get full host privileges. I have published a hands-on guide convering the following. - What are User Namespaces - How kernel does the root to non-root user mapping - What changes when you set hostUsers: false - Limiting host UID ranges using /etc/subuid file - Hands on deployment to understand User Namespace - User Namespace limitations 𝗥𝗲𝗮𝗱 𝗶𝘁 𝗛𝗲𝗿𝗲: newsletter.devopscube.com/p/kubernetes-u… Have you tried this feature it? ♻️ PS: Repost and share this with the community! #devops #kubernetes

What is the Difference Between Self-Managed vs Public SSL/TLS Certificates? 🚀 DevOps Engineers often work with TLS certificates, and understanding the difference between self-managed and paid certificates is very important. So lets understand the basics. 𝗪𝗵𝗮𝘁 𝗶𝘀 𝗮 𝗖𝗲𝗿𝘁𝗶𝗳𝗶𝗰𝗮𝘁𝗲 𝗔𝘂𝘁𝗵𝗼𝗿𝗶𝘁𝘆? Certificate Authority (CA) is usually a company or organization that issues digital certificates. Here's how to request a TLS certificate from a well-known Certificate Authority (CA) like Verisign, LetsEncrypt or Comodo: - Create a Certificate Signing Request (CSR) with a private key. The CSR includes details about your location, organization, and FQDN (Fully Qualified Domain Name). - Send the CSR to the trusted CA. - The CA validates the request and sends back a TLS certificate signed using the CA’s private key. - Validate and use this TLS certificate with your applications. Most browsers and operating systems 𝘀𝘁𝗼𝗿𝗲 𝗿𝗼𝗼𝘁 𝗖𝗔 𝗰𝗲𝗿𝘁𝗶𝗳𝗶𝗰𝗮𝘁𝗲𝘀 from all the trusted CAs. You can view them from the browser settings. That is why browsers don’t show security messages when visiting websites using TLS from a trusted and well-known commercial CA. Each browser has its own set of criteria and processes for accepting and trusting CAs. 𝗦𝗼, 𝘄𝗵𝗼 𝗱𝗲𝗰𝗶𝗱𝗲𝘀 𝗶𝗳 𝗮 𝗖𝗔 𝗰𝗮𝗻 𝗯𝗲 𝘁𝗿𝘂𝘀𝘁𝗲𝗱? Well, they are vetted by independent audit organizations like webtrust. The results of these audits are important for a CA to be trusted by web browsers and operating systems. Now let’s look at self-managed certificates. For internal applications, organizations often run their own private CA (PKI infrastructure). The workflow looks like this: - Create your own Root CA certificate and CA private key - Generate a server private key and CSR - Use the CA private key to sign the CSR and generate the TLS certificate - Install the Root CA certificate in browsers or operating systems to avoid HTTPS warnings Without installing the Root CA certificate, browsers will show security warnings because the CA is not publicly trusted. For public endpoints, organizations always use certificates from well-known CAs (LetsEncrypt or paid ones) We share deep dives on Kubernetes, DevOps,MLOps, Cloud and GitOps → 𝗝𝗼𝗶𝗻 𝗛𝗲𝗿𝗲 (𝟭𝟬𝟬% 𝗳𝗿𝗲𝗲): newsletter.devopscube.com ♻️ PS: Repost and share it with the DevOps community. Got any tips? ⬇️ Discuss in the comments below! ⬇️ #devops #devopscommunity

☕ This Week in DevOpsCube Here’s the TLDR 👇 • Feature Store explained for DevOps Engineers • Deploy a ML Feature Store on Kubernetes • Reducing Kubeflow image size from 3.17 GB to 354 MB • Real Kubernetes CNI troubleshooting scenario on AWS • How Uber runs 60,000 AI agent tasks • Free Claude courses & learning resources 𝗥𝗲𝗮𝗱 𝗶𝘁 𝗛𝗲𝗿𝗲: newsletter.devopscube.com/p/devopscube-w… ♻️ PS: If you find these resources useful, share this with your network. #devops #mlops

You won't see this 65% Discount again until Cyber Monday👇 Use code MM26CCCT at kube.promo/cyber to get flat 50% discount on Individual certifications like CKA, CKAD etc. Using code MM26BUNCT you can save up to 60% on the following k8s certification bundles. - CKA + CKAD: kube.promo/cka-ckad - CKA + CKS Bundle: kube.promo/bundle - CKA + CKAD + CKS Exam bundle: kube.promo/k8s-bundle - KCNA + CKA: kube.promo/kcka-bundle - KCSA + CKS Exam Bundle: kube.promo/kcsa-cks - KCNA + KCSA Exam Bundle: kube.promo/kcna-kcsa You can save up to 65% off on Kubestronaut Bundle as compare to individual purchase. Use code MM26K8BUNCT for the following Kubestronaut Bundle - KCNA + KCSA + CKA + CKAD + CKS: kube.promo/kubestronaut Kubestronaut Benefits Includes the following. - Five 50%-off certification coupons each year to use or share - 20% off select CNCF events - Exclusive Kubestronaut community access - The iconic blue Kubestronaut jacket Grab these offers before it end. ♻️ P.S. Don’t forget to repost and share it with the DevOps community and your friends! #kubernetes #devops #cka #ckad #cks

DevOps Tool of the Week: Kafbat UI ⚒️ Running Kafka in production is great until you need to actually look inside it. Kafbat UI is a free, open-source web UI to monitor and manage Apache Kafka clusters. It gives you a single pane of glass for your Kafka clusters. Brokers, topics, partitions, consumer groups, schema registry, Kafka Connect, all in one dashboard. You can browse messages in JSON, Avro, or Protobuf, filter live streams with CEL expressions, check consumer lag per partition, and create or reconfigure topics without touching a CLI. 𝗚𝗶𝘁𝗛𝘂𝗯 𝗥𝗲𝗽𝗼: github.com/kafbat/kafka-ui #devops #devopstool

Setup a ML feature Store on Kubernetes 🚀 If you are learning MLOps as a DevOps engineer, You need to know how an ML feature store works. The best way to understand a ML feature store is by setting it up and manage features yourself. We have a detailed hands-on guide that covers the open-source Feature Store called Feast. In this guide, you will learn: - What is Feast? - Key Feast components - Feast Operator setup on Kubernetes - Configure offline and online stores. - Use a simple Python script to verify feature serving - How to measure feature serving latency metrics like p50, p95, and p99 𝗗𝗲𝘁𝗮𝗶𝗹𝗲𝗱 𝗕𝗹𝗼𝗴: devopscube.com/setup-feature-… #devops #mlops

Learn this Kubernetes Troubleshooting Scenario 🚀 When deploying Kubeadm based kubernetes cluster on AWS with Calico CNI, You may encounter a connection timed out issue between Pods and CoreDNS. We encountered this issue and we have created a detailed blog that explains, - Why the issue happens - How to troubleshoot it step by step - The actual root cause - How AWS networking interacts with Calico - How to fix it properly 𝗥𝗲𝗮𝗱 𝘁𝗵𝗲 𝗕𝗹𝗼𝗴: blog.techiescamp.com/docs/fix-dns-t… Over to you! Have you faced any Kubernetes networking issue in production? Comment below. #devops #kubernetes

Feature Store Explained for DevOps Engineers 🚀 If you want to level up in MLOps, Feature Store is a must know concept. It is one of the core building blocks of MLOps. In our latest MLOPs newsletter edition, we covered the following. - What is a feature store actually - Offline vs Online features (very important) - What is feature registry. - Feast feature store architecture - Role of DevOps engineers in feature management. - Hands on Feast Feature Store setup on Kubernetes 𝗥𝗲𝗮𝗱 𝗶𝘁 𝗛𝗲𝗿𝗲: newsletter.devopscube.com/p/mlops-featur… We have published 9 editions so far in this MLOps series. This week, newsletter subscribers will receive a detailed edition on Kubeflow. It is one of the key open-source platforms for building ML workflows on Kubernetes. ♻️ PS: Repost and share this with DevOps engineers who want to expand into MLOps. #mlopsfordevops #mlops #devops

@bibinwillson's from @DevOpsCube writes a beginner DVC tutorial that covers the full setup with AWS S3, dataset versioning, dvc.yaml pipelines, and CI/CD + Airflow integration. Everything you need to stop bloating your Git repo with large files! 👉🏽 hubs.la/Q04fRyZc0

From 3.17 GB to 354 MB Docker Image 🚀 A image used in a Kubeflow pipeline project was 3.17 GB. In this blog, you will learn how the image was optmized to 354 MB (an 89% reduction) and the reasoning behind every change. 𝗥𝗲𝗮𝗱 𝘁𝗵𝗲 𝗕𝗹𝗼𝗴: devopscube.com/kubeflow-docke… In ML projects, Image optimization is not just a infra problem. Image optimization is a colloaborative effort between Data Scientists, Developers and a DevOps engineer. It is because, each role owns a different layer of the bloat. For example, a DevOps engineer can't safely remove a library without asking the data scientist if the model actually needs it. The reduction only happens when all relevant teams sit down and answer, 𝘸𝘩𝘢𝘵 𝘥𝘰𝘦𝘴 𝘵𝘩𝘪𝘴 𝘪𝘮𝘢𝘨𝘦 𝘢𝘤𝘵𝘶𝘢𝘭𝘭𝘺 𝘯𝘦𝘦𝘥 𝘢𝘵 𝘳𝘶𝘯𝘵𝘪𝘮𝘦? If you have any inputs, drop it in the comment below. #devops #mlops

@freshanand It expires on 12th!

@devopscube Thanks for this. Till what time is the sale on?

65% OFF Linux Foundation sale is live now 🚀 Use code MM26CCCT at kube.promo/cyber to get flat 50% discount on Individual certifications like CKA, CKAD etc. Using code MM26BUNCT you can save up to 60% on the following k8s certification bundles. - CKA + CKAD: kube.promo/cka-ckad - CKA + CKS Bundle: kube.promo/bundle - CKA + CKAD + CKS Exam bundle: kube.promo/k8s-bundle - KCNA + CKA: kube.promo/kcka-bundle - KCSA + CKS Exam Bundle: kube.promo/kcsa-cks - KCNA + KCSA Exam Bundle: kube.promo/kcna-kcsa You can save up to 65% off on Kubestronaut Bundle as compare to individual purchase. Use code MM26K8BUNCT for the following Kubestronaut Bundle - KCNA + KCSA + CKA + CKAD + CKS: kube.promo/kubestronaut If you bundle Your Certs with THRIVE Annual Subscription you can get 65% off certifications along with, - 100+ educational products - 45+ e-learning courses with hand-on labs - 8+ SkillCreds ♻️ P.S. Don’t forget to repost and share it with the DevOps community and your friends! --- Always approach certification preparation the right way with thorough research and hands-on practice. Focus on learning and building real skills, as certification is just the validation of your knowledge and effort! #kubernetes #devops #cka #ckad #cks

Helm _helpers tpl file. What is it? If you are working with Helm charts, You might have seen a _helpers file inside the /templates folder. Most people ignore it without understanding what it is used for while deploying a chart. In our guide, we have covered, - What _helpers tpl is and how it works. - What are named template/partial - Hands-on example demonstrating its usage. - When not to use it 𝗥𝗲𝗮𝗱 𝗶𝘁 𝗛𝗲𝗿𝗲: devopscube.com/_helpers-tpl-f… Have you used _helpers in your charts? #devops #kubernetes

Practical Guides and resources this week at DevOpsCube. Read these 👇 1. CRI vs CNI vs CSI - linkedin.com/feed/update/ur… 2. Kubeadm 1.36 Cluster setup - devopscube.com/setup-kubernet… 3. Kubernetes Swap Explained - devopscube.com/kubernetes-swa… 4. DevOps to MLOps Series - github.com/techiescamp/ml… 5. Apache Airflow on Kubernetes(MLOps) - devopscube.com/apache-airflow… 🎓 𝗖𝗲𝗿𝘁𝗶𝗳𝗶𝗰𝗮𝘁𝗶𝗼𝗻𝘀 & 𝗗𝗶𝘀𝗰𝗼𝘂𝗻𝘁𝘀 CKA, CKAD, CKS aspirants! This months deal is live! Use code 𝗗𝗖𝗨𝗕𝗘𝟯𝟬 at kube.promo/devops to save up to 𝟯𝟴% 𝗢𝗙𝗙 on individual certifications. and use code 𝗗𝗖𝗨𝗕𝗘𝟯𝟬 on bundles to save upto 𝟯𝟴% 𝗼𝗳𝗳. 👉 Complete Kubernetes & CKA course: courses.devopscube.com. Use code FLASH40 to get 40% 𝗢𝗙𝗙 today 👉 K8s Kustomize Crash Course(Free) - courses.devopscube.com/p/kubernetes-k… 𝗧𝗵𝗶𝘀 𝗪𝗲𝗲𝗸'𝘀 𝗧𝗼𝗽 𝗘𝘅𝗽𝗲𝗿𝘁 𝗣𝗶𝗰𝗸👇 1. Gitlab Architecture - devopscube.com/gitlab-archite… Which resource are you diving into this week? Drop a comment! #DevOps #Learning #techtips

GitLab Architecture Explained🚀 GitLab is a popular DevOps tool that combines version control, CI/CD, and project management tools. It is a end to end platform that can handle the complete software development lifecycle. Our detailed guide covers the following. - The GitLab architecture - The core components of GitLab - CI/CD architecture of GitLab - GitLab storage - High availability and scalability of GitLab - GitLab authentication and authorization - GitLab monitoring 𝗗𝗲𝘁𝗮𝗶𝗹𝗲𝗱 𝗔𝗿𝗰𝗵𝗶𝘁𝗲𝗰𝘁𝘂𝗿𝗲: devopscube.com/gitlab-archite… Companies like Agoda, Airbus, CERN, Goldman Sachs, and NVIDIA use GitLab for their CI/CD and DevSecOps implementations. And for engineers already using GitLab, What is one learning resource, mistake, or concept that helped you understand GitLab better? Your insights can help new DevOps engineers learn faster. #devops #gitlab #cicd #devsecops

How to Learn Kubernetes the right way? All Kubernetes functionalities are built on foundational IT concepts. If you miss the basics, you can still get things working, But troubleshooting production issues, scaling systems, and clearing technical interviews becomes very difficult. But with the right roadmap and understanding of the foundational concepts, learning becomes easy. In our Kubernetes learning roadmap, we have added the complete learning path that covers basic to advanced Kubernetes concepts. 𝗥𝗲𝗮𝗱 𝗶𝘁 𝗛𝗲𝗿𝗲: devopscube.com/learn-kubernet… Over to you! If you had to learn Kubernetes again from scratch in 2026, What would you do differently? And if you had one piece of advice for new learners, what would it be? ♻️ P.S : Repost and share this with the DevOps Community. #devops #kubernetes

Apache Airflow on Kubernetes (MLOps) 🚀 If you want to work on MLOps, Data Engineering or AI infrastructure projects, Knowledge of Apache Airflow can give you a strong advantage. Apache Airflow is an open source application that helps build and manage complex workflows and data pipelines. In our detailed blog, we have covered the following. - What is Apache Airflow - How DAGs work - Understand Airflow executors. - Setting up Airflow on Kubernetes - Configuring GitSync for DAG management - Important Day 2 operational insights and more... 𝗥𝗲𝗮𝗱 𝗶𝘁 𝗛𝗲𝗿𝗲: devopscube.com/apache-airflow… Learning Airflow makes it much easier to understand platforms like Kubeflow because the core concepts are very similar: - DAGs - Task orchestration - Pipeline execution etc.. Also, Airflow is evolving fast. Apache Airflow 3 is total redesign that expands its capabilities to support complex AI, ML, and near real-time data workloads. 𝗞𝗲𝘆 𝗜𝗻𝘀𝗶𝗴𝗵𝘁: 80,000 organizations use Airflow, with over 30% of users running MLOps workloads and 10% using it for GenAI workflows ♻️ P.S : Repost and share this with the DevOps Community. #devops #mlops #devopstomlops

DevOps to MLOps Series 🚀 We have published 8 editions of the MLOps for DevOps series so far. It is a hands-on, project-based guide to MLOps built specifically for DevOps engineers. Here is the key idea 👇 Most MLOps resources are written for data scientists learning infrastructure. This series flips that. You start by building the ML foundation on your local machine - from raw data to a trained, tested model. Then you move to the infrastructure side. - Orchestration - Kubeflow Pipelines - Feature stores - Model registries and more.. Every edition comes with working code in a GitHub repo. You can follow along and build as you learn. 𝗚𝗶𝘁𝗛𝘂𝗯 𝗿𝗲𝗽𝗼: github.com/techiescamp/ml… If you have feedback, raise an issue in the repo. We are happy to discuss and improve it. A quick note on the goal. This series is built to help DevOps engineers understand the infrastructure side of MLOps with just enough ML knowledge. This is not an AI/ML course. ♻️ Repost if you know a DevOps engineer looking to expand into MLOps. #mlopsfordevops #mlops #devops

Kubernetes Swap Explained 🚀 When you deploy a Pod in Kubernetes, each node uses its physical RAM to run containers. If a node runs out of memory, Kubernetes may start killing Pods to keep the node stable. With kubernetes swap, you can avoid this by allowing the node to use a part of its disk as extra virtual memory. In our detailed blogw, we explained the following in detail. - How Kubernetes Swap Works - Key Use Cases for Swap - Pod QoS Classes and Swap Behavior - How Swap is Allocated for Pods - Hands-on: Testing Swap on Worker Nodes - Identifying Swap-Enabled Nodes using NFD. - Swap Observability Using Metrics 𝗥𝗲𝗮𝗱 𝗶𝘁 𝗛𝗲𝗿𝗲: devopscube.com/kubernetes-swa… Have you tried or used this feature? What was your use case? Let us know in the comments. #kubernetes #devops