Dilshan discusses a real incident where migrating EKS nodes to AL2023 caused the cluster autoscaler to lose AWS permissions silently.

You will learn:

- Why AL2023 blocks pod access to instance metadata by default, breaking components that relied on node IAM roles
- How to implement IRSA correctly by configuring IAM roles, Kubernetes service accounts, and OIDC trust relationships, and why both AWS IAM and Kubernetes RBAC must be configured independently
- How to audit which pods currently rely on node roles and clean up legacy IAM permissions to reduce attack surface after migration

Watch (or listen to) it here: https://ku.bz/T_YPfTfDb

🌟 This episode is brought to you by LearnKube — join their 4-day hands-on Advanced Kubernetes course starting January 29th and finally get comfortable with production clusters. https://learnkube.com/training

With @Birthmarkb "Keep Working Harder" Farrell

🗓 Kubernetes events starting in the next 24 hours:

13 Jan, 23:00 UTC - SPIFFE without SPIRE & Kubernetes-Native RAG System | Boston Kubernetes Meetup - 📍 In-person meetup

14 Jan, 01:00 UTC - Improving Kubernetes with Bottlerocket | DevOps Workshop - 📍 Online meetup

14 Jan, 10:00 UTC - AI-Driven Kubernetes Operations Integrating with Model Context Protocol (MCP) | KSUG.AI APAC - 📍 Online & in-person meetup

→ See all Kubernetes events

Starting in a month:

🔥 DevConf.IN 2026 (Red Hat)
📍 In-person conference

📅 13 Feb
⏰ 13/02/2026, 03:30 UTC

→ Visit the website

This week on Learn Kubernetes Weekly 166:

🚀 How We Moved a 2 Million RPM WebSocket Service to EKS and Fixed a Critical Bottleneck
🔒 Beyond the Surface: Exploring Attacker Persistence Strategies in Kubernetes
📊 Standardizing CRD Condition Metrics in Kubernetes Operators
⚡ Scaling Dagster on Kubernetes: Best Practices for 50+ Code Locations
🌐 An Introduction to Envoy AI Gateway

Read it now: https://kube.today/issues/166

⭐️ This issue is brought to you by LearnKube — master Kubernetes with hands-on training designed for engineers who want to learn the smart way https://ku.bz/hypSbyc-V

🗓 Kubernetes events starting in the next 24 hours:

14 Jan, 17:00 UTC - Kubernetes v1.35 Release | CNCF Online Programs - 📍 Online meetup

14 Jan, 17:00 UTC - Modernizing Applications in Azure without Kubernetes or Microservices | Microsoft Azure User Group Poland - 📍 In-person meetup

14 Jan, 17:00 UTC - Scaling AI in 2026: The Rise of the Open AI Factory on Kubernetes | Mirantis - 📍 Online webinar

14 Jan, 17:00 UTC - Kubernetes: Rails for Side-projects | Rzeszow Ruby User Group - 📍 In-person meetup

→ See all Kubernetes events

Starting in 2 months:

🔥 Advanced Kubernetes course (Munich) (LearnKube)
📍 In-person workshop

📅 16 Mar
⏰ 16/03/2026, 08:00 UTC

→ Visit the website

Starting in two weeks:

🔥 Advanced Kubernetes course (LearnKube)
📍 Online workshop

📅 29 Jan
⏰ 29/01/2026, 13:00 UTC

→ Visit the website

🗓 Kubernetes events starting in the next 24 hours:

15 Jan, 17:00 UTC - Exploring AI Agents in Kubernetes | Kubernetes Virtual Book Club - 📍 Online meetup

15 Jan, 18:00 UTC - GitOps reinvented: Fix state drift before it happens | Cloud Native Paris - 📍 In-person meetup

15 Jan, 19:30 UTC - Modern Kubernetes on AWS with EKS. Moving from Nodes to Workloads | AWS Las Palmas User Group - 📍 In-person meetup

15 Jan, 22:00 UTC - Crossplane: Enabling Platform Engineering in Your Infrastructure | Cloud Native Santa Catarina - 📍 Online meetup

16 Jan, 00:30 UTC - Acing the CKA | Cloud Native Dallas - 📍 In-person meetup

→ See all Kubernetes events

🗓 Kubernetes events starting in the next 24 hours:

16 Jan, 16:00 UTC - Using OpenLLMetry to turbocharge your AI Deployment | Artificial Intelligence Technical Community Group - 📍 Online meetup

17 Jan, 04:00 UTC - AI Agents for DevOps Automation | Cloud Native Pune - 📍 In-person meetup

17 Jan, 05:30 UTC - Icy Init: From Zero to Production | Cloud Native Durgapur - 📍 Online meetup

→ See all Kubernetes events

Starting in about a week:

🔥 Cloud Native Days Bangladesh 2026 (Cloud Native Bangladesh)
📍 In-person conference

📅 24 Jan
⏰ 24/01/2026, 03:30 UTC

→ Visit the website

🗓 Kubernetes events starting in the next 24 hours:

18 Jan, 14:00 UTC - Observability in Kubernetes: Metrics, Logs & Alerts | Cloud Native Jordan - 📍 Online meetup

→ See all Kubernetes events

Starting in 2 months:

🔥 Site Reliability Engineering 2026 (Conf42)
📍 Online conference

📅 19 Mar
⏰ 19/03/2026, 17:00 UTC

→ Visit the website

Starting in about a week:

🔥 Advanced Kubernetes course (London) (LearnKube)
📍 In-person workshop

📅 26 Jan
⏰ 26/01/2026, 09:00 UTC

→ Visit the website

🗓 Kubernetes events starting in the next 24 hours:

19 Jan, 20:00 UTC - CKA Certification Study Group | Cloud Native Cali - 📍 Online meetup

19 Jan, 23:30 UTC - Deploying a Kubernetes on OpenStack using Terriform and Ansible with Kubespray | STL CYBER Meetup - 📍 Online meetup

20 Jan, 12:00 UTC - Scaling GitOps and Kubernetes in Regulated Enterprises | Cloud Native New York City - 📍 Online webinar

→ See all Kubernetes events

Starting in 2 months:

🔥 KCD Beijing 2026 (KCD Beijing)
📍 In-person conference

📅 21 Mar
⏰ 21/03/2026, 01:00 UTC

→ Visit the website

Starting in two weeks:

🔥 Cloud Native Days France 2026 (CND France)
📍 In-person conference

📅 3 Feb
⏰ 03/02/2026, 09:00 UTC

→ Visit the website

🗓 Kubernetes events starting in the next 24 hours:

20 Jan, 16:00 UTC - Cloudogu GitOps Playground - The local K8s operations platform | HackTalk - 📍 Online meetup

20 Jan, 16:30 UTC - Multi-factor authentication for Workload Identities w/ SPIFFE & SPIRE | Cloud Native Computing Vienna - 📍 In-person meetup

21 Jan, 10:30 UTC - Modernise and scale: Why and how to migrate your workloads to Google Kubernetes Engine | Google - 📍 Online webinar

→ See all Kubernetes events

Starting in 3 months:

🔥 Kubernetes Community Days Panama 2026 (KCD Panama)
📍 In-person conference

📅 20 Apr
⏰ 20/04/2026, 05:00 UTC

→ Visit the website

This week on Learn Kubernetes Weekly 167:

⚖️ Kubernetes & KEDA: Avoiding System Failures from Imbalanced Scaling
🔐 Why DevOps should Sec: making a case for DevOps Engineers to transition to DevSecOps
🌐 Optimizing Pod IP Allocation in AWS EKS with Amazon VPC CNI Prefix Delegation
🎮 GPU Starvation in Kubernetes: How Dynamic MIG Partitioning Saved Our GPU Budget
🔄 Migrating from F5 NGINX ingress controller to the F5 NGINX gateway fabric

Read it now: https://kube.today/issues/167

⭐️ This newsletter is brought to you by LearnKube — master Kubernetes with hands-on training designed for engineers who want to learn the smart way https://ku.bz/hypSbyc-V

🗓 Kubernetes events starting in the next 24 hours:

21 Jan, 16:00 UTC - The origin of Tarook, Kubernetes cluster management, and Nix | Open Source Infra Group - 📍 In-person meetup

21 Jan, 16:30 UTC - When Tools Are Missing: A Meetup on Infrastructure Workarounds | Cloud Native Prague - 📍 Online & in-person meetup

21 Jan, 17:00 UTC - Kubernetes, containers, GitOps, and the broader Kubernetes ecosystem | Kubernetes Meetup Bielefeld - 📍 In-person meetup

21 Jan, 17:00 UTC - Kubernetes 1.35 in practice & Cloud Native + AI = New Standard | Cloud Native - Kubernetes - Bratislava - 📍 In-person meetup

21 Jan, 20:00 UTC - Automating Kubernetes Rightsizing and Container-Level Cost Allocation | CloudBolt Software - 📍 Online webinar

22 Jan, 12:00 UTC - Kubernetes v1.35 Timbernetes Spotlight You Can't Miss! | Kubernetes Indonesia - 📍 Online meetup

→ See all Kubernetes events

Starting in a month:

🔥 Kubernetes Community Days New Delhi 2026 (KCD New Delhi)
📍 In-person conference

📅 21 Feb
⏰ 21/02/2026, 02:30 UTC

→ Visit the website