After years of running AKS in production (and learning the hard way), I wrote a book about the decisions that really matter. 📘 The AKS Book: Every AKS Decision That Will Save You a Cluster Rebuild It’s out now. More info 👇 pixelrobots.co.uk/2026/03/th… #AKS #PlatformEngineering #Kubernetes

If you have not seen my new @headlamp_ui theme builder yet check it out and let me know what you think. You have both a web app version and a plugin. Soon we will have a community library of themes too!

I’ve launched Headlamp Theme Builder. It’s a small tool for creating custom themes for Headlamp, with a live preview so you can see how colours, surfaces, navigation, buttons, terminal colours, and logos will look before using them. You can use it in two ways: Website: build and download a theme plugin Headlamp plugin: build, preview, and apply a theme directly inside Headlamp It also includes a theme library with ready-made palettes like Pixelrobots, GitHub, Dracula, Nord, Solarized, Monokai, and cloud-provider-inspired themes. Try it here: pixelrobots.github.io/headla… GitHub: github.com/PixelRobots/headl…

Just in case you didn't know: The Kubernetes Dashboard project has now been archived. This guide is meant to help you navigate that transition with confidence Kubernetes Dashboard workflows map to @headlamp_ui . kubernetes.io/blog/2026/06/0…

Ever had an AKS node pool upgrade stall because Azure couldn't provision the surge nodes you asked for? Not enough quota, regional capacity, or subnet IPs and suddenly you're stuck. 😤 The MaxUnavailable fallback changes that. Set both maxSurge and maxUnavailable on your node pool and AKS gets a smarter upgrade path. It tries your surge value first, falls back to a single surge node if needed, and if that also fails, falls back to an in-place upgrade using maxUnavailable. No more binary success/fail on capacity. 🎉 It's still preview, but worth knowing about. I've written up how it works, what to watch out for, and the commands to get started. 👇 👉 pixelrobots.co.uk/2026/06/ak… #AKS #Azure #Kubernetes #DevOps

AKS Automatic just got even more flexible. Deployment Safeguards are enabled by default in Enforce mode for AKS Automatic, helping keep workloads aligned with Kubernetes and security best practices. But let’s be honest. Not every third-party Helm chart is perfect. Some charts still ship with defaults that don’t meet every best-practice requirement, which can make installation harder when safeguards are strictly enforced. Now, with the ability to exclude specific namespaces from Deployment Safeguards, you can keep strong guardrails across your cluster while making room for trusted third-party workloads that may need exceptions. This means you can: ✅ Keep safeguards enforced by default ✅ Exclude only the namespaces that need flexibility ✅ Install more third-party Helm charts without weakening the whole cluster ✅ Maintain better control over where exceptions are allowed A great improvement for teams adopting AKS Automatic while still needing practical flexibility for real-world Kubernetes workloads. #Azure #AKS #Kubernetes #CloudNative #DevOps #PlatformEngineering #Helm #MicrosoftAzure

nice to see the @FinOpsFdn help launch the Tokenomics community... definitely an issue in current times for many organizations out there! tokeneconomics.com

🚀 Microsoft shipped cert-manager as an Arc Kubernetes extension. The docs say Arc-enabled clusters only. 🤔 I pointed it at a normal AKS cluster instead. Turns out the docs are... conservative. 👀 Full walkthrough including Gateway API Let's Encrypt end-to-end 🔐: pixelrobots.co.uk/2026/06/ce…

"Update and Restart" It's for IT pros navigating how AI fits into their real-world infrastructure, operations, and troubleshooting. Hosted by Myself and Sonia Cuff, the series cuts through hype to show how tools like Azure Copilot and Microsoft 365 Copilot work in the real world

🚀 Introducing GitHub Enterprise Local (Preview): DevOps for Sovereign and Private Cloud Environments (on Azure Local) Big step for Sovereign DevOps Microsoft just announced preview support for GitHub Enterprise Local — bringing a full GitHub experience into sovereign and private cloud environments. This is a big deal for customers in regulated industries. For the first time, organizations can run a fully self‑hosted DevOps platform with: ✅ Source code, repos, pipelines — all staying on-premises ✅ Support for air‑gapped / disconnected environments ✅ GitHub capabilities like Actions, Packages, and Advanced Securit ✅ Delivered on Azure Local, with familiar Azure consistency 💡 Why this matters - Data residency & compliance - Operational independence - Secure software supply chains GitHub Enterprise Local directly addresses these requirements — without forcing a trade-off between innovation speed and regulatory control. This is another key building block of the Microsoft Sovereign Private Cloud vision — bringing modern DevSecOps, AI, and applications closer to where data must stay. Exciting times ahead for sovereign cloud architectures 🚀 👉 Read the announcement techcommunity.microsoft.com/… #SovereignCloud #AzureLocal #GitHub #DevOps #Security #Compliance #HybridCloud #AdaptiveCloud #MSBuild

The @MicrosoftAI model family expands in Microsoft Foundry with 7 new models. A complete multimodal stack: Text, image, transcription, and voice, ready for developers to build with under one set of governance and security controls. #MSBuild

Stop stitching vendors together to run open models in production. Fireworks AI on Microsoft Foundry is GA. One endpoint. Enterprise SLAs. Zero setup. Build your next production workload with Fireworks AI on Foundry: msft.it/6018vbCUI

Big things are happening at Microsoft Build! Day 1 kicks off with @satyanadella taking center stage. Tune in live: x.com/i/broadcasts/1qKVmmQQj…

KubeBuddy audits your Kubernetes clusters from PowerShell It checks node health, pods, events, RBAC, and AKS best practices, then outputs clean HTML or text reports ➤ ku.bz/85lvgDJpD

RBAC, OIDC, service accounts, IRSA, TokenReview. Kubernetes auth is usually presented as a bag of separate topics. The API server starts from a smaller question: Who is making this request?

The Kubernetes v1.37 Release Schedule is officially out! 🚀 A huge thank you to the Release Team for getting the timeline structured. 📅 Check out the key dates here: 👉 github.com/kubernetes/sig-re…

Excited to be heading to Experts Live Netherlands next week! I’ll be delivering a session on Azure Kubernetes Service for IT/Ops admins! If you’re attending, come say hi — let’s talk cloud, infra, AI, containers, and AKS! expertslive.nl/sessies-event…

We've redesigned Copilot to be simpler, faster, and more intuitive, to help keep you in the flow of your work. Try it out: microsoft.com/en-us/microsof…

Great new doc published for any agent builders who are also using @github Copilot CLI / App, Claude Code, or any other coding agent. Now you can add skills to help your coding agent be an expert in deploying to Microsoft Foundry! learn.microsoft.com/en-us/az… 🥳

🧪 Self-paced technical labs from Microsoft advocates — build real projects in your own environment, cover AI tools modern cloud workflows. Great for IT/Ops folks wanting hands-on practice without the hand-holding. 🔗 learn.microsoft.com/en-us/la… #AzOps #Azure #Microsoft #ITPro

In a few mins we will have May's Headlamp Community Call with a few plugin demos from the Community. Tune in if you are interested: zoom-lfx.platform.linuxfound…