Deleting a pod ≠ stopping it instantly Here is the hidden shutdown flow Kubernetes follows👇 - The API server sends a deletion event. - Kubernetes executes the PreStop hook if any exists. - kubelet sends a SIGTERM signal to the container's main process (PID 1). - Applications have 30 seconds by default to handle the signal and shut down gracefully. - If the application process does not exit within the grace period, Kubernetes sends a SIGKILL signal to terminate the pod. 𝗡𝗼𝘁𝗲: Kubernetes does not give extra time for the PreStop hook. If your pod has a 30-second grace period, the PreStop hook and your app’s shutdown process must both finish within those same 30 seconds. We covered the following in detail in our newsletter edition. - What are SIGTERM and SIGKILL - How Kubernetes handles SIGTERM and SIGKILL - How applications can handle SIGTERM for graceful shutdown - The role of PreStop hooks and why it matters - The link between SIGTERM and container PID 1 → 𝗥𝗲𝗮𝗱 𝗶𝘁 𝗛𝗲𝗿𝗲: newsletter.devopscube.com/p/… Over to you… Have you written any custom logic to handle SIGTERM? #devops #kubernetes

🛠 DevOps Tool of the Week: Kubeshark Kubernetes logs can show which service failed, but They don't always explain what happened between services. To find the answer, you switch between pod logs and traces. That's where Kubeshark helps. Kubeshark is like Wireshark for Kubernetes. It captures cluster-wide network traffic using eBPF and displays it with Kubernetes context. Here is what it does 👇 • Shows API requests and responses between services. • Supports HTTP, gRPC, GraphQL, Redis, Kafka, DNS, and more. • Decrypts TLS traffic using eBPF, without sidecars or proxies. • Filters traffic by Pod, namespace, node, IP, or API details. • Visualizes service communication and captures PCAP snapshots. • Exposes traffic data through MCP for AI tools like Claude. 𝗦𝘁𝗮𝗿𝘁 𝗵𝗲𝗿𝗲: github.com/kubeshark/kubesha… #devopstools

Weekend DevOps learning project 🚀 This guide aims to teach you the following practically. - Client to Site VPN - Client and Server Certificates Generation using EasyRSA - Mutual TLS Authentication (mTLS) So, why is it important to learn these? VPN and mTLS are essential and must-know concepts for DevOps engineers Every organization uses VPN connectivity to securely connect to cloud resources. The best way to understand VPN & mTLS is by setting up one. 𝗦𝗲𝘁𝘂𝗽 𝗚𝘂𝗶𝗱𝗲: devopscube.com/aws-client-vp… The following topics are covered in a theoretical format: - SAML/Active Directory-based authentication. - TCP vs UDP Do further research to gain a detailed understanding of the topics above. They are fundamental for DevOps engineers PS: ♻️ Repost if you find this useful. It helps the Learning community 🙂 Got any tips or info to share with the community? Drop a comment :) #devops #aws #devopsengineer #practicaldevops

I have mastered Kubernetes, Terraform, Helm… How do you debug when a pod can’t reach another pod? Check Grafana? ----- If you like practical Kubernetes, DevOps & MLOPS content like this, we share deep dives every week. → 𝗝𝗼𝗶𝗻 𝟮𝟬𝗞+ 𝗲𝗻𝗴𝗶𝗻𝗲𝗲𝗿𝘀 (𝟭𝟬𝟬% 𝗳𝗿𝗲𝗲): newsletter.devopscube.com/ #devops

A single Terraform state file can become a bottleneck. When multiple engineers work with the same state, Even unrelated changes can block each other because Terraform locks the entire state during an apply Stategraph takes a different approach. Instead of storing infrastructure state in a single JSON file, it stores resources and their dependencies as a graph in PostgreSQL. It works with existing Terraform and OpenTofu configurations. Want to see it in action? Stategraph is hosting a live demo on November 4, followed by a Q&A. The session will also be recorded. 𝗥𝗲𝗴𝗶𝘀𝘁𝗲𝗿 𝗛𝗲𝗿𝗲: stategraph.com/demo-day?utm_… ♻️ Repost and share this with the community 🙂 #devops #terraform

What's inside a distroless container image? Here is what's typically inside👇 - No shell (/bin/sh, /bin/bash) - can't exec into the container - No package manager (apt, yum, etc.) - No debugging tools (ps, ls, cat, etc.) - Minimal libc and essential libraries only - CA certificates for HTTPS connections - Timezone data for time-related operations - A non-privileged user’s home directory - The actual binary or files for your application ---- If you like practical Kubernetes, DevOps & MLOPS content like this, we share deep dives every week. → 𝗝𝗼𝗶𝗻 𝟮𝟬𝗞+ 𝗲𝗻𝗴𝗶𝗻𝗲𝗲𝗿𝘀 (𝟭𝟬𝟬% 𝗳𝗿𝗲𝗲): newsletter.devopscube.com/ ♻️ If you find this useful, Repost with your network!

Lesser-known Linux Commands 🚀 If you are learning linux, Check out our shell scripting for DevOps blog 👇 𝗟𝗲𝗮𝗿𝗻 𝗦𝗵𝗲𝗹𝗹 𝗦𝗰𝗿𝗶𝗽𝘁𝗶𝗻𝗴: devopscube.com/linux-shell-s… --- If you like practical Kubernetes, DevOps & MLOPS content like this, we share deep dives every week. → 𝗝𝗼𝗶𝗻 𝟮𝟬𝗞+ 𝗲𝗻𝗴𝗶𝗻𝗲𝗲𝗿𝘀 (𝟭𝟬𝟬% 𝗳𝗿𝗲𝗲): newsletter.devopscube.com/ #devops #devopsengineer #linuxtips #learningeveryday

40% OFF CKA, CKAD, CKS (Two Days Flash Sale) 🚀 Use code TREATS35CT at kube.promo/devops to get a flat 35% off on individual certifications. Using code TREATS35CT, get up to 40% off the following certification bundles as compared to individual certifications. - CKA + CKAD : kube.promo/cka-ckad - CKA + CKS: kube.promo/bundle - CKA + CKAD + CKS: kube.promo/k8s-bundle - KCNA + KCSA + CKA + CKAD + CKS: kube.promo/kubestronaut - KCNA + KCSA Exam Bundle: kube.promo/kcna-kcsa ⏳ Hurry, this offer expires in two days. Don’t miss this chance to certify & level up! ♻️ P.S. Don’t forget to repost and share it with the DevOps community and your friends! #devops #kubernetes #cka #ckad #cks

Fluentd vs Fluent Bit: Which one should you use in Kubernetes? Here is a simple breakdown 👇 Fluentd: - Full-fledged log processor - Written in Ruby (with C extensions) - Can handle heavy workloads and complex routing - Best suited for centralized log aggregation and processing - Higher resource usage (CPU/memory) Use Fluentd when you need powerful filtering, parsing, and routing at scale. Fluent Bit: - Lightweight log forwarder - Written in C (very fast, low footprint) - Perfect for edge nodes, Kubernetes DaemonSets, or embedded systems - Usually acts as a collector/shipper to Fluentd, Elasticsearch, or other backends - Optimized for performance and low resource consumption Use Fluent Bit when you need a super lightweight log collector that doesn't stress your nodes. 𝗡𝗼𝘁𝗲: Both tools are CNCF graduated projects and are widely adopted in production Want to understand how logging works in Kubernetes? 𝗥𝗲𝗮𝗱 𝗶𝘁 𝗛𝗲𝗿𝗲: devopscube.com/kubernetes-lo… #DevOps #Kubernetes #Logging #Observability

Kubernetes Tip 💡 There are use cases where you will need the real client IP for network-level security policies, traffic monitoring, or non-HTTP applications. By default, Kubernetes NodePort and LoadBalancer Services use externalTrafficPolicy: Cluster setting. In this case, the traffic-receiving Pod sees the node IP instead of the original client IP. To preserve the client's real IP, you need to set externalTrafficPolicy to Local. It tells Kubernetes to forward external traffic only to Pods for that Service on the same node that received it. It basically avoids changing the client source IP. These Pods are called “local endpoints.” The trade-off is that traffic sent to a node without a local endpoint is dropped instead of being forwarded to another node. However, a properly configured load balancer can use health checks to avoid these nodes. 𝗡𝗼𝘁𝗲: Client IP preservation also depends on your load balancer. A Network Load Balancer can preserve the original client's source IP, depending on its configuration. However, HTTP proxies and application load balancers usually create a new connection to your application. The Pod may see the load balancer's IP. The original client IP is passed by the load balancer in a header such as X-Forwarded-For (Used for logging, rate limiting, etc) Found it useful? ♻️ Repost and share it with the community 🙂 ---- If you like practical Kubernetes, DevOps & MLOPS content like this, we share deep dives every week. → 𝗝𝗼𝗶𝗻 𝟮𝟬𝗞+ 𝗲𝗻𝗴𝗶𝗻𝗲𝗲𝗿𝘀 (𝟭𝟬𝟬% 𝗳𝗿𝗲𝗲): newsletter.devopscube.com/ #Kubernetes #DevOps

🛠 DevOps Tool of the Week: Kubetail Debugging logs across multiple Kubernetes pods can be frustrating. You run kubectl logs, switch between pods, and try to figure out what went wrong. It gets even harder when your application has multiple replicas. This is where Kubetail helps. Kubetail is an open-source real-time logging dashboard that lets you view Kubernetes logs from multiple pods in one place. What makes it useful? • View logs from multiple pods and containers together • Keeps the timeline updated as Pods start, stop, or get replaced. • Filters logs by time range, availability zone, CPU architecture, or node. • Switches between multiple clusters from the desktop app. 𝗦𝘁𝗮𝗿𝘁 𝗛𝗲𝗿𝗲: github.com/kubetail-org/kube… Kubetail reads logs directly through the Kubernetes API, so log data stays within your cluster without requiring an external logging service. Instead of switching between terminals, you can check what's happening in your application pods. #devopstools

Kubernetes Practical Guides and other resources this week at DevOpsCube ☕ Read these 👇 1. Kubernetes Agent Sandbox - newsletter.devopscube.com/p/… 2. Kubernetes Cluster Configurations - linkedin.com/feed/update/urn… 3. Kubernetes Vertical Pod Autoscaler - newsletter.devopscube.com/p/… 4. DNAT (Destination NAT): a concept in k8s networking - linkedin.com/feed/update/urn… 5. AI Agents Explained for DevOps Engineers - newsletter.devopscube.com/p/… 🎓 𝗖𝗲𝗿𝘁𝗶𝗳𝗶𝗰𝗮𝘁𝗶𝗼𝗻𝘀 & 𝗗𝗶𝘀𝗰𝗼𝘂𝗻𝘁𝘀 CKA, CKAD, CKS aspirants! This months deal is live! Use code 𝗗𝗖𝗨𝗕𝗘𝟯𝟬 at kube.promo/devops to save up to 𝟯𝟬% 𝗢𝗙𝗙 on individual certifications, and use code 𝗗𝗖𝗨𝗕𝗘𝟯𝟬 on bundles to save upto 𝟯𝟴% 𝗼𝗳𝗳. 👉 Complete Kubernetes & CKA course: courses.devopscube.com/. Use code 𝗗𝗘𝗩𝗢𝗣𝗦𝟯𝟬 to get 𝟯𝟬% 𝗢𝗙𝗙 today 👉 Container Fundamentals: A Practical Guide to Docker - courses.devopscube.com/p/con… 🛠️ 𝗗𝗲𝘃𝗢𝗽𝘀 𝗧𝗼𝗼𝗹 𝗼𝗳 𝘁𝗵𝗲 𝗪𝗲𝗲𝗸: kube-green - github.com/kube-green/kube-g… Which resource are you diving into this week? Drop a comment! #DevOps #Learning #techtips

Here are 5 engineering blogs worth reading this week👇 If you work in DevOps, SRE, Platform Engineering, Cloud, or Infrastructure, this is for you. 1/ What Datadog does to Enforce Software Supply Chain Policies Beyond Image Signing - datadoghq.com/blog/engineeri… 2/ How Meta Secures Time Synchronization with NTS - engineering.fb.com/2026/10/0… 3/ Kubernetes autoscaling is reshaping because of AI workloads - cncf.io/blog/2026/10/19/how-… 4/How Netflix Uses IAM Roles to Verify Workload Identity - netflixtechblog.com/trading-… 5/ Your Observability May Be Watching the Wrong Things - dev.to/bennerdo/your-observa… 🎓 𝐏𝐫𝐞𝐩𝐚𝐫𝐢𝐧𝐠 𝐟𝐨𝐫 𝐂𝐊𝐀? If you are preparing for the Certified Kubernetes Administrator exam, check out our CKA course by industry experts. You can also use 𝗗𝗘𝗩𝗢𝗣𝗦𝟯𝟬 at checkout for a discount: 👉 courses.devopscube.com/p/cer… #devops #kubernetes

AI Agents Explained for DevOps Engineers 🚀 AI agents are becoming an important part of DevOps and platform engineering. But before building one, you need to understand what makes an application an agent. Unlike a traditional application that follows a fixed set of instructions, An AI agent can autonomously decide what to do next based on the information it receives. In a recent newsletter edition, We covered the core agent concepts, including agent frameworks, tools, agent loops, state machines, approval gates, and memory. 𝗚𝗲𝘁 𝘀𝘁𝗮𝗿𝘁𝗲𝗱 𝗵𝗲𝗿𝗲: newsletter.devopscube.com/p/… ♻️ PS: Repost and share it with the DevOps community. #AIOps #DevOps