
Example: Local Kubernetes cluster with Cluster-level PodSecurity admission set to baseline
Learn to create a local kind Kubernetes cluster with cluster-level PodSecurity admission enforcing the baseline profile by default.

Advertise Extended Node Resources for a Kubernetes Node
Extended resources let you declare these node-level assets so the scheduler can allocate them. This article shows static and dynamic methods to configure and use extended node resources.

Change the Reclaim Policy of a PersistentVolume in Kubernetes
Reclaim policy determines what happens to a PersistentVolume after its PersistentVolumeClaim is deleted. This article shows how to change reclaim policy from Delete to Retain or Recycle.

What Are Projected Volumes In Kubernetes
Explore Kubernetes projected volumes. Learn to merge secrets, ConfigMaps, Downward API, and tokens into a single Pod directory with YAML examples.

Best practices for Kubernetes Secrets
Kubernetes Secrets carry sensitive data. Mismanagement risks exposure. This article shows robust patterns for secret lifecycle, provisioning, access control and integration. Follow these steps to secure your cluster and applications.

Ingress-nginx CVE-2025-1974: All You Need to Know
Learn about CVE-2025-1974, a buffer overflow in ingress-nginx Lua module. Understand impact, exploit path, and patch steps for v1.11.5 and v1.12.1 to secure your cluster.

Configure Quality of Service for Pods in Kubernetes
Kubernetes uses Quality of Service (QoS) classes to decide pod eviction under resource pressure. Assigning correct requests and limits controls reliability and node stability.

kubeadm upgrade – v1.32.x to v1.33.x
Step-by-step guide to upgrade Kubernetes clusters created with kubeadm from version 1.32.x to 1.33.x and beyond, including volume considerations, CSI, security, quotas, and event-driven workflows.

Kubernetes 1.33: Volume Populators Graduate to GA | Kubernetes
Kubernetes volume populators are now generally available in v1.33. With the AnyVolumeDataSource feature gate now always enabled, you can use any suitable custom resource as the data source for your PVCs.