Container on Empowering European Innovation

KubeCon + CloudNativeCon Europe 2026 — Amsterdam Recap

Thu, 02 Apr 2026 00:00:00 +0000

The central theme for this year's KubeCon was unmistakable: cloud native infrastructure is AI infrastructure, and the ecosystem is reorganizing around that reality. Of course, Safespring was onsite and enjoying the latest from the industry.

Keynote Highlights

The opening keynotes set the tone with a clear macro forecast: in 2023, roughly two-thirds of AI compute went to training and one-third to inference. By the end of 2026, that ratio is expected to flip, with inference compute demand projected to reach 93.3 gigawatts by decade’s end. The message was direct — Kubernetes is becoming the control plane for AI infrastructure, and the CNCF ecosystem is positioning itself to own that layer. And perhaps finally the operating system for the datacenter.

Understanding Safespring Kubernetes Engine if you usually run Kubernetes yourself

Mon, 30 Mar 2026 00:00:00 +0000

If you already know how to run Kubernetes yourself, the useful question is not whether a managed service can create a cluster. The useful question is how the service is shaped, where the boundary sits, and which parts of the platform it already solves well.

We have written quite a bit lately about building Kubernetes platforms with Talos, OpenStack, Cluster API, Cinder CSI, and modern traffic management. That is one side of the picture.

Run a local LLM on Safespring GPU infrastructure

Tue, 16 Dec 2025 00:00:00 +0000

Running an LLM locally does not have to be complicated. This post shows how to turn a GPU-enabled Ubuntu 24.04 instance in Safespring into a practical AI workstation using NVIDIA drivers, Ollama, and Open-WebUI.

We’ll start from a fresh instance, install the recommended NVIDIA server driver, verify GPU acceleration with nvidia-smi, pull a few models, and finish by deploying Open-WebUI in Docker so you can chat in your browser. Everything stays on your own instance, and we’ll use SSH forwarding for safe access.

Ingress-Nginx Retires in March 2026: Here’s How to Move to Gateway API and Cilium Gateway

Thu, 27 Nov 2025 00:00:00 +0000

TL;DR

With the retirement of Ingress Nginx migration from Ingress-Nginx to Gateway API using Cilium with a shared gateway approach, trading some complexity for cleaner, more efficient, and standardized ingress management is one way of solving the question of ingress to your cluster.

Why explore Gateway API:

Annotation Sprawl: Managing dozens of ingress-nginx-specific annotations across ingress resources.
Limited Future-Proofing: Alignment with where the Kubernetes is heading.

Gateway API address these concerns by offering:

Standardization: Is an official Kubernetes project.
Enhanced Security: Built-in RBAC controls and namespace-based access restrictions.
Better Resource Management: The alternative of useingshared gateways means reduced resource overhead.

Gateway API on Cilium, managed for you

Spin up Talos-based clusters with Cilium and Gateway API ready on day one. Get a managed control plane and flexible block storage, so you focus on your workloads instead of the plumbing.

Configure Zitadel OIDC for the Talos Kubernetes API Server

Fri, 03 Oct 2025 00:00:00 +0000

In this guide, we walk through configuring OpenID Connect (OIDC) authentication for the Kubernetes API Server in Talos-managed clusters.

The integration uses Zitadel as the identity provider, enabling secure, centralized authentication and authorization.

We will also leverage the kubectl OIDC plugin kubelogin for handling OIDC-based logins seamlessly from the command line.

Key Components

Identity Provider: Zitadel
Kubernetes API Server: OIDC-enabled authentication
RBAC: Role-based access control using OIDC claims
Cluster Management: Talos Linux

Prerequisites

Deploy Talos Kubernetes on OpenStack with Cluster API

Thu, 12 Jun 2025 00:00:00 +0000

A step-by-step guide to declaratively provision, configure, and manage Talos Linux Kubernetes clusters on Safespring’s OpenStack infrastructure using CAPO and ClusterResourceSets.

In this article we want to take a few steps further our investigation into Talos Linux and how we can make use of it in Safespring Compute Infrastructure (OpenStack), and at the same time have a more in depth exploration of the automate installation and make use of Kubernetes Cluster API.

Validate and upgrade Talos Linux Kubernetes on OpenStack

Wed, 09 Apr 2025 00:00:00 +0000

Use this guide to validate a Talos Linux Kubernetes cluster on OpenStack, confirm Cilium and Cinder CSI behavior, and run repeatable upgrade operations for both Talos OS and Kubernetes.

In a previous article we started to explore Talos Linux and what that could mean for us, and how we can automate the installation on Safespring OpenStack, but we wanted to go a few steps further in our investigation and look into confirming two more aspects:

Bootstrap Talos Linux Kubernetes on OpenStack

Mon, 03 Mar 2025 00:00:00 +0000

This guide walks through the first steps of bootstrapping Talos Linux Kubernetes on OpenStack, with a focus on automation, security and repeatable platform operations.

When it comes to container orchestration, Kubernetes is the de facto standard. And there are many different flavors of Kubernetes distributions and ways of provisioning them. So we started to explore what Talos Linux could mean for us.

Things we wanted to have answered while doing that: