# Latest **URL:** https://discuss.kubernetes.io/latest.md [Latest](https://discuss.kubernetes.io/latest.md) · [Categories](https://discuss.kubernetes.io/categories.md) · [Tags](https://discuss.kubernetes.io/tags.md) --- ## [Please refrain from posting CKA/CKAD exam content or cheatsheets here](https://discuss.kubernetes.io/t/please-refrain-from-posting-cka-ckad-exam-content-or-cheatsheets-here/8504)
**Author:** [@castrojo](https://discuss.kubernetes.io/u/castrojo)\ **Replies:** 4\ **Last updated:** [July 30, 2024, 9:51am UTC](https://discuss.kubernetes.io/t/please-refrain-from-posting-cka-ckad-exam-content-or-cheatsheets-here/8504 "2024-07-30T09:51:04Z")
Hi everyone, recently we’ve had people posting answers to the CKA exam here. This is a reminder that publishing exam content is in severe violation of the CNCF Certification and Confidentiality Agreement candidates sign … --- ## [HackerOne Bug Bounty Program](https://discuss.kubernetes.io/t/hackerone-bug-bounty-program/10321)
**Author:** [@mrbobbytables](https://discuss.kubernetes.io/u/mrbobbytables)\ **Replies:** 1\ **Last updated:** [August 16, 2026, 11:24am UTC](https://discuss.kubernetes.io/t/hackerone-bug-bounty-program/10321 "2026-08-16T11:24:39Z")
Hey there all, One of the admins here. We’ve had a bunch of attempted attacks lately related to the Kubernetes Bug Bounty Program. https://discuss.kubernetes.io is strictly OUT OF SCOPE and ineligible. We use the host… --- ## [Welcome to Discuss Kubernetes](https://discuss.kubernetes.io/t/welcome-to-discuss-kubernetes/8)
**Author:** [@system](https://discuss.kubernetes.io/u/system)\ **Replies:** 1\ **Last updated:** [May 9, 2025, 8:05am UTC](https://discuss.kubernetes.io/t/welcome-to-discuss-kubernetes/8 "2025-05-09T08:05:40Z")
Welcome! This is the Kubernetes community forum. We hope you enjoy your stay, have a look around and feel free to start paticipating in the discussions. Here is some getting started information: How to use this site v… --- ## [\[Security Advisory\] CVE-2026-76654: Subpath symlinking on Windows nodes permits NTLM coercion](https://discuss.kubernetes.io/t/security-advisory-cve-2026-76654-subpath-symlinking-on-windows-nodes-permits-ntlm-coercion/35277)
**Author:** [@Security\_k8s.io](https://discuss.kubernetes.io/u/Security_k8s.io)\ **Replies:** 0\ **Last updated:** [September 23, 2026, 11:13pm UTC](https://discuss.kubernetes.io/t/security-advisory-cve-2026-76654-subpath-symlinking-on-windows-nodes-permits-ntlm-coercion/35277 "2026-09-23T23:13:53Z")
Hello Kubernetes Community, An NTLM coercion vulnerability exists on Windows nodes when the subPath supplied in a pod’s volumeMounts is set to a symbolic link that points to an attacker-controlled network share. When a … --- ## [\[Security Advisory\] CVE-2026-2270: StatefulSet and ControllerRevision write permissions allow cross-namespace pod creation](https://discuss.kubernetes.io/t/security-advisory-cve-2026-2270-statefulset-and-controllerrevision-write-permissions-allow-cross-namespace-pod-creation/35276)
**Author:** [@Security\_k8s.io](https://discuss.kubernetes.io/u/Security_k8s.io)\ **Replies:** 0\ **Last updated:** [September 23, 2026, 11:10pm UTC](https://discuss.kubernetes.io/t/security-advisory-cve-2026-2270-statefulset-and-controllerrevision-write-permissions-allow-cross-namespace-pod-creation/35276 "2026-09-23T23:10:09Z")
Hello Kubernetes Community, A confused deputy attack exists in the StatefulSet controller that allows a user with namespace-scoped write permissions on StatefulSet and ControllerRevision objects to create a cross-namesp… --- ## [Pods recreation rules](https://discuss.kubernetes.io/t/pods-recreation-rules/27076)
**Author:** [@Boot\_CD](https://discuss.kubernetes.io/u/Boot_CD)\ **Replies:** 7\ **Last updated:** [September 22, 2026, 9:32am UTC](https://discuss.kubernetes.io/t/pods-recreation-rules/27076 "2026-09-22T09:32:15Z")
Cluster information: Kubernetes version: v1.28.2 Cloud being used: bare-metal Installation method: os packages from kubernetes repo Host OS: Centos 8 Stream I have CI/CD with gitlab to k8 cluster with it\`s integratio… --- ## [k8s-oom-watchdog: the OOM kill you never see — in-place memory rescue with pods/resize](https://discuss.kubernetes.io/t/k8s-oom-watchdog-the-oom-kill-you-never-see-in-place-memory-rescue-with-pods-resize/35260)
**Author:** [@Hongming](https://discuss.kubernetes.io/u/Hongming)\ **Replies:** 0\ **Last updated:** [September 22, 2026, 9:14am UTC](https://discuss.kubernetes.io/t/k8s-oom-watchdog-the-oom-kill-you-never-see-in-place-memory-rescue-with-pods-resize/35260 "2026-09-22T09:14:23Z")
A container walks up to 84% of its memory limit. Nothing restarts. The limit just gets bigger, four times in a row, and the job finishes. That’s a real run, not a mockup — 256Mi → 448 → 640 → 832 → 1Gi, requests and … --- ## [Ramjet-ingress: an ingress controller where a config change doesn't reload anything](https://discuss.kubernetes.io/t/ramjet-ingress-an-ingress-controller-where-a-config-change-doesnt-reload-anything/35159)
**Author:** [@hamdallah\_jodah](https://discuss.kubernetes.io/u/hamdallah_jodah)\ **Replies:** 1\ **Last updated:** [September 21, 2026, 8:07am UTC](https://discuss.kubernetes.io/t/ramjet-ingress-an-ingress-controller-where-a-config-change-doesnt-reload-anything/35159 "2026-09-21T08:07:55Z")
I’ve been building an ingress controller in Rust and would like feedback from people who operate ingress at scale. It implements the same Ingress API surface as ingress-nginx (same path semantics, same canary annotations… --- ## [How to verify server support when I watch objects with a shard selector?](https://discuss.kubernetes.io/t/how-to-verify-server-support-when-i-watch-objects-with-a-shard-selector/35249)
**Author:** [@yshngg](https://discuss.kubernetes.io/u/yshngg)\ **Replies:** 0\ **Last updated:** [September 21, 2026, 5:34am UTC](https://discuss.kubernetes.io/t/how-to-verify-server-support-when-i-watch-objects-with-a-shard-selector/35249 "2026-09-21T05:34:35Z")
--- ## [Website Pods Intermittently Stop Responding to HTTP Requests in Kubernetes](https://discuss.kubernetes.io/t/website-pods-intermittently-stop-responding-to-http-requests-in-kubernetes/35238)
**Author:** [@joeroot](https://discuss.kubernetes.io/u/joeroot)\ **Replies:** 1\ **Last updated:** [September 20, 2026, 5:30pm UTC](https://discuss.kubernetes.io/t/website-pods-intermittently-stop-responding-to-http-requests-in-kubernetes/35238 "2026-09-20T17:30:29Z")
Hi All, I am currently hosting a website in a Kubernetes environment and am experiencing one specific issue where the website pods intermittently stop responding to HTTP requests even though the pods themselves continue… --- ## [Pod stuck after restarting a node](https://discuss.kubernetes.io/t/pod-stuck-after-restarting-a-node/35231)
**Author:** [@islabrown190](https://discuss.kubernetes.io/u/islabrown190)\ **Replies:** 0\ **Last updated:** [September 16, 2026, 3:43pm UTC](https://discuss.kubernetes.io/t/pod-stuck-after-restarting-a-node/35231 "2026-09-16T15:43:28Z")
Hi, I’m testing a small kubertenes cluster and noticed that after restarting one of the nodes, one of my pods sometimes stays in pending for a while. what’s the first thing you actually check in this situation? kubectl d… --- ## [K8s Performance Optimization](https://discuss.kubernetes.io/t/k8s-performance-optimization/35226)
**Author:** [@liuningle6](https://discuss.kubernetes.io/u/liuningle6)\ **Replies:** 0\ **Last updated:** [September 15, 2026, 4:07pm UTC](https://discuss.kubernetes.io/t/k8s-performance-optimization/35226 "2026-09-15T16:07:35Z")
I have a problem. My environment is Kubernetes v1.34.10, using Volcano to submit large batches of multi-parameter training tasks. At one time, thousands of pod groups may be spawned for inference. Currently, both schedul… --- ## [Correlating Kubernetes with Application Telemetry](https://discuss.kubernetes.io/t/correlating-kubernetes-with-application-telemetry/35221)
**Author:** [@Ruchir\_Jha](https://discuss.kubernetes.io/u/Ruchir_Jha)\ **Replies:** 0\ **Last updated:** [September 14, 2026, 11:19pm UTC](https://discuss.kubernetes.io/t/correlating-kubernetes-with-application-telemetry/35221 "2026-09-14T23:19:49Z")
Curious how people handle this in practice. Say I’m looking at a latency spike in my observability tool and grouping it by k8s.deployment.name. One deployment is clearly the outlier. At that point I usually want to kno… --- ## [Did anyone ever think of Kubernetes as an evolutionary system?](https://discuss.kubernetes.io/t/did-anyone-ever-think-of-kubernetes-as-an-evolutionary-system/35211)
**Author:** [@czras](https://discuss.kubernetes.io/u/czras)\ **Replies:** 0\ **Last updated:** [September 12, 2026, 5:20am UTC](https://discuss.kubernetes.io/t/did-anyone-ever-think-of-kubernetes-as-an-evolutionary-system/35211 "2026-09-12T05:20:24Z")
This is probably a weird question, but I had an interesting thought about Kubernetes and I’m curious whether anyone involved in its design has ever looked at it this way. What if Kubernetes can be viewed as an evolution… --- ## [Kubeadm init failed api server not healthy](https://discuss.kubernetes.io/t/kubeadm-init-failed-api-server-not-healthy/28097)
**Author:** [@Siddharth\_Wagh](https://discuss.kubernetes.io/u/Siddharth_Wagh)\ **Replies:** 22\ **Last updated:** [September 11, 2026, 10:00pm UTC](https://discuss.kubernetes.io/t/kubeadm-init-failed-api-server-not-healthy/28097 "2026-09-11T22:00:35Z")
Hello, Trying to initialize a k8s cluster through kubeadm, facing following issue. Attached screenshots of the same. W0501 18:13:13.516865 1896313 version.go:104\] could not fetch a Kubernetes version from the internet:… --- ## [I built a satirical religion for everyone who's been paged at 3 AM (ha-llelujah.dev)](https://discuss.kubernetes.io/t/i-built-a-satirical-religion-for-everyone-whos-been-paged-at-3-am-ha-llelujah-dev/34855)
**Author:** [@kosir](https://discuss.kubernetes.io/u/kosir)\ **Replies:** 9\ **Last updated:** [September 9, 2026, 2:44pm UTC](https://discuss.kubernetes.io/t/i-built-a-satirical-religion-for-everyone-whos-been-paged-at-3-am-ha-llelujah-dev/34855 "2026-09-09T14:44:40Z")
Hi all - long-time cluster operator, first-time prophet. After one too many 3 AM pages for a CrashLoopBackOff that turned out to be a missing liveness probe, I did what any reasonable person does with that kind of pa… --- ## [Kubectl get commands to accept labels as they're picked from kubectl get](https://discuss.kubernetes.io/t/kubectl-get-commands-to-accept-labels-as-theyre-picked-from-kubectl-get/35183)
**Author:** [@adolsalamanca](https://discuss.kubernetes.io/u/adolsalamanca)\ **Replies:** 0\ **Last updated:** [September 7, 2026, 10:22am UTC](https://discuss.kubernetes.io/t/kubectl-get-commands-to-accept-labels-as-theyre-picked-from-kubectl-get/35183 "2026-09-07T10:22:03Z")
Hello folks, nice to meet you all. When I inspect resources with kubectl get -o yaml, labels are displayed as key: value (YAML mapping syntax). But when I filter with a selector, I have to switch to kubectl get -l key=v… --- ## [Ingress, redirect to https](https://discuss.kubernetes.io/t/ingress-redirect-to-https/3993)
**Author:** [@Miha](https://discuss.kubernetes.io/u/Miha)\ **Replies:** 1\ **Last updated:** [September 3, 2026, 5:57pm UTC](https://discuss.kubernetes.io/t/ingress-redirect-to-https/3993 "2026-09-03T17:57:21Z")
Hello with cert-manager and letsencrypt I am creating TLS certificates for my domain. This part works as it should. So, certificate are issued for www.domain.com but not for domain.com. What I need is to do redirect fr… --- ## [Marsad — a desktop client built on "found none" and "nobody looked" being different answers](https://discuss.kubernetes.io/t/marsad-a-desktop-client-built-on-found-none-and-nobody-looked-being-different-answers/35157)
**Author:** [@hamdallah\_jodah](https://discuss.kubernetes.io/u/hamdallah_jodah)\ **Replies:** 0\ **Last updated:** [August 30, 2026, 12:16pm UTC](https://discuss.kubernetes.io/t/marsad-a-desktop-client-built-on-found-none-and-nobody-looked-being-different-answers/35157 "2026-08-30T12:16:01Z")
I’ve been building a desktop Kubernetes client for about a year and released the first version this week. Rather than list what it does, I’d rather put the one design decision everything else follows from in front of p… --- ## [Can you have two containers in a pod have different service accounts?](https://discuss.kubernetes.io/t/can-you-have-two-containers-in-a-pod-have-different-service-accounts/19156)
**Author:** [@alexec](https://discuss.kubernetes.io/u/alexec)\ **Replies:** 3\ **Last updated:** [August 28, 2026, 2:30pm UTC](https://discuss.kubernetes.io/t/can-you-have-two-containers-in-a-pod-have-different-service-accounts/19156 "2026-08-28T14:30:56Z")
I have a use case where I have two containers, my sidecar container, and my user’s user specified container. I don’t want to give either more permission than they need. My sidecar needs an elevated permission, that the u… --- ## [Pod Becomes Unresponsive After Running for Several Hours in Kubernetes](https://discuss.kubernetes.io/t/pod-becomes-unresponsive-after-running-for-several-hours-in-kubernetes/35120)
**Author:** [@joeroot](https://discuss.kubernetes.io/u/joeroot)\ **Replies:** 2\ **Last updated:** [August 27, 2026, 6:45pm UTC](https://discuss.kubernetes.io/t/pod-becomes-unresponsive-after-running-for-several-hours-in-kubernetes/35120 "2026-08-27T18:45:15Z")
Hello Kubernetes Community, I am currently facing one persistent problem with my website running inside a Kubernetes environment, and I am hoping someone can help me understand what might be causing it. The specific iss… --- ## [Moving Application to AWS EKS](https://discuss.kubernetes.io/t/moving-application-to-aws-eks/33999)
**Author:** [@Sagar\_Talreja](https://discuss.kubernetes.io/u/Sagar_Talreja)\ **Replies:** 5\ **Last updated:** [August 24, 2026, 12:27pm UTC](https://discuss.kubernetes.io/t/moving-application-to-aws-eks/33999 "2026-08-24T12:27:36Z")
I have an application which runs on a single node K8s cluster available with Docker Desktop. Now I want to move that application to an EKS cluster of 4 members to be used for Business purpose further. The application ha… --- ## [Is pod a container?](https://discuss.kubernetes.io/t/is-pod-a-container/35137)
**Author:** [@Sinae99](https://discuss.kubernetes.io/u/Sinae99)\ **Replies:** 0\ **Last updated:** [August 24, 2026, 9:57am UTC](https://discuss.kubernetes.io/t/is-pod-a-container/35137 "2026-08-24T09:57:23Z")
hello this is my first topic here. i have a question : is pod a container? i know its not, but i think it is, idk why. --- ## [Namespace-per-client isolation for a multi-tenant agency setup, resource quotas keeping one client's traffic spike from starving the others?](https://discuss.kubernetes.io/t/namespace-per-client-isolation-for-a-multi-tenant-agency-setup-resource-quotas-keeping-one-clients-traffic-spike-from-starving-the-others/35133)
**Author:** [@abubakar1210](https://discuss.kubernetes.io/u/abubakar1210)\ **Replies:** 0\ **Last updated:** [August 23, 2026, 10:01pm UTC](https://discuss.kubernetes.io/t/namespace-per-client-isolation-for-a-multi-tenant-agency-setup-resource-quotas-keeping-one-clients-traffic-spike-from-starving-the-others/35133 "2026-08-23T22:01:17Z")
We host a handful of client web apps and a couple of AI-powered tools (chatbots, small internal automation services) on a shared cluster rather than spinning up separate infrastructure per client, mainly to keep costs sa… --- ## [How do you identify which deployment caused a PostgreSQL query regression?](https://discuss.kubernetes.io/t/how-do-you-identify-which-deployment-caused-a-postgresql-query-regression/35099)
**Author:** [@joao00001](https://discuss.kubernetes.io/u/joao00001)\ **Replies:** 7\ **Last updated:** [August 22, 2026, 5:43pm UTC](https://discuss.kubernetes.io/t/how-do-you-identify-which-deployment-caused-a-postgresql-query-regression/35099 "2026-08-22T17:43:03Z")
I built pg-regression-radar to investigate a question that comes up during database incidents: which Kubernetes deployment made this PostgreSQL query slower? It uses pg\_stat\_statements, statistical change detection, and… --- ## [GRPC bump to 1.82.1](https://discuss.kubernetes.io/t/grpc-bump-to-1-82-1/35131)
**Author:** [@Zhe\_Yuan](https://discuss.kubernetes.io/u/Zhe_Yuan)\ **Replies:** 0\ **Last updated:** [August 21, 2026, 3:29pm UTC](https://discuss.kubernetes.io/t/grpc-bump-to-1-82-1/35131 "2026-08-21T15:29:32Z")
Cluster information: Kubernetes version: 1.36 Cloud being used: (put bare-metal if not on a public cloud) Installation method: Host OS: CNI and version: CRI and version: grpc package - google.golang.org/grpc - Go P… --- ## [Managing Multi-Cloud Storage Across Kubernetes Clusters - What You Using?](https://discuss.kubernetes.io/t/managing-multi-cloud-storage-across-kubernetes-clusters-what-you-using/35129)
**Author:** [@johnsmith244303](https://discuss.kubernetes.io/u/johnsmith244303)\ **Replies:** 0\ **Last updated:** [August 21, 2026, 1:04pm UTC](https://discuss.kubernetes.io/t/managing-multi-cloud-storage-across-kubernetes-clusters-what-you-using/35129 "2026-08-21T13:04:03Z")
Hi everyone, I’m trying to figure out the best approach for managing storage across multiple cloud environments in Kubernetes, and I’m running into some challenges with syncing and access. Cluster information: Kubern… --- ## [Deployment in version "v1" cannot be handled as a Deployment: strict decoding error: unknown field "metadata.spec"](https://discuss.kubernetes.io/t/deployment-in-version-v1-cannot-be-handled-as-a-deployment-strict-decoding-error-unknown-field-metadata-spec/24621)
**Author:** [@bravikr](https://discuss.kubernetes.io/u/bravikr)\ **Replies:** 5\ **Last updated:** [August 19, 2026, 10:47pm UTC](https://discuss.kubernetes.io/t/deployment-in-version-v1-cannot-be-handled-as-a-deployment-strict-decoding-error-unknown-field-metadata-spec/24621 "2026-08-19T22:47:34Z")
Describe the issue Deployment in version “v1” cannot be handled as a Deployment: strict decoding error: unknown field “metadata.spec” Get the above error with latest version of kubernetes Engine: Version: 24.0.2 API … --- ## [Cluster upgrade strategy](https://discuss.kubernetes.io/t/cluster-upgrade-strategy/3558)
**Author:** [@John\_Liu](https://discuss.kubernetes.io/u/John_Liu)\ **Replies:** 4\ **Last updated:** [August 18, 2026, 2:11pm UTC](https://discuss.kubernetes.io/t/cluster-upgrade-strategy/3558 "2026-08-18T14:11:18Z")
When you have a production cluster, with new releases coming out very often, upgrading the clusters could be a challenge, because you already have lots of applications running, and you probably have some customized compo… --- ## [Using cert-manager addon behin a proxy](https://discuss.kubernetes.io/t/using-cert-manager-addon-behin-a-proxy/35071)
**Author:** [@onylgecko](https://discuss.kubernetes.io/u/onylgecko)\ **Replies:** 5\ **Last updated:** [August 18, 2026, 11:56am UTC](https://discuss.kubernetes.io/t/using-cert-manager-addon-behin-a-proxy/35071 "2026-08-18T11:56:51Z")
Hi, I would like to use the cert-manager add behind a http proxy. So far I did not find any obvious way to configure the proxy values. Is there any recommended way to do this? Greetings Peter [Next page](https://discuss.kubernetes.io/latest.md?page=1)