// Topics / Kubernetes

Kubernetes

24 entries tagged “Kubernetes”

Kubernetes Requests and Limits: Lessons From Getting It Wrong September 5, 2022 · 5 min CPU is compressible. Memory is not. That one sentence explains 80% of Kubernetes resource problems. kubernetes infrastructure devops

You Probably Don't Need a Service Mesh April 4, 2022 · 5 min Service meshes solve real problems at real scale. But most teams adopt them before the problems exist. Here's how to decide honestly. kubernetes architecture

Hardening Kubernetes: The Stuff That Actually Matters February 7, 2022 · 7 min Kubernetes defaults favor convenience over security. A layered hardening guide covering pods, RBAC, network policies, secrets, and the control plane. kubernetes security devops

Your Kubernetes Bill Is Lying to You October 18, 2021 · 5 min Most Kubernetes clusters are 40-60% over-provisioned. Here's how I help teams cut their bills without sacrificing reliability. kubernetes cost infrastructure

API Gateway Patterns That Actually Work May 31, 2021 · 5 min Edge gateways, BFFs, and service mesh ingress -- what I've learned running them at Decloud and at large telecoms. api microservices architecture

GitOps + Progressive Delivery: How We Stopped Gambling on Deploys February 8, 2021 · 6 min How we wired GitOps and canary rollouts together at Decloud, and why the combination changed how I think about deployments. ci-cd kubernetes

Your Container Image Scan Passed. Now What? November 30, 2020 · 8 min Image scanning tells you what's in the box. Runtime security tells you what it's doing. How we lock down containers with seccomp, network policies, and Falco. containers security kubernetes

API Gateways: Build, Buy, or Regret October 5, 2020 · 6 min I've built a custom Go gateway, run Kong in prod, evaluated Envoy, and used managed cloud gateways. What I recommend after doing each wrong at least once. api go kubernetes

I Wrote Six Kubernetes Operators. Here's What Actually Matters. August 3, 2020 · 9 min Lessons from building production operators at Decloud: the reconciliation loop, controller-runtime patterns, and the mistakes that cost us sleep. kubernetes go infrastructure

Stop Guessing Your Kubernetes Resource Limits June 1, 2020 · 6 min Most K8s clusters I audit are either wildly overprovisioned or one bad deploy away from eviction storms. Here's how I set requests, limits, and guardrails. kubernetes devops infrastructure

My Kubernetes Predictions for 2020 (Most of Yours Are Wrong) January 6, 2020 · 4 min The adoption debate is over. 2020 is about operating Kubernetes well: managed control planes, GitOps by default, and policy enforcement. kubernetes trends cloud

Zero Downtime Deploys Are a Team Habit, Not a Tool October 21, 2019 · 5 min Every team says they want zero downtime. Few want to do the boring work that actually gets them there. Here's what that boring work looks like. ci-cd devops kubernetes

Kubernetes Ships Insecure by Default. Here's What to Do About It. April 22, 2019 · 5 min Kubernetes defaults optimize for fast adoption, not safety. A hardening checklist from running production clusters at three startups. kubernetes security infrastructure

GitOps: Stop SSHing Into Production February 11, 2019 · 9 min How I moved three teams off ad-hoc kubectl deployments and onto Git-driven infrastructure -- with code examples, repo layouts, and the mistakes I made along the way. ci-cd devops kubernetes

The Boring Kubernetes Checklist That Actually Keeps Production Alive January 14, 2019 · 5 min Most Kubernetes outages come from skipping the basics. Here's the checklist I use after running clusters at the fintech startup and now at Decloud. kubernetes devops infrastructure

2018: The Year Tech Got Humbled December 24, 2018 · 6 min A personal look back at 2018: GDPR scrambles, a startup accelerator, Spectre/Meltdown fallout, and the infrastructure shifts that defined the year. year-in-review trends reflection

Istio: Powerful, Painful, and Probably More Than You Need November 26, 2018 · 5 min My honest take on evaluating Istio at the fintech startup — what it actually gives you, what it costs you, and why most teams should think twice before adopting it. kubernetes microservices infrastructure

Container Security in 2018: What Actually Changed August 20, 2018 · 3 min Eight months after my first container security post: what moved at the fintech startup and in the ecosystem — PodSecurityPolicy, image signing, scratch images. security containers kubernetes

Kubernetes Operators: Powerful, but Overhyped April 2, 2018 · 3 min Operators are the hot thing in the Kubernetes world right now. They're genuinely useful — but the hype is outpacing the reality for most teams. kubernetes devops infrastructure

Two Years of Kubernetes in Production — The Boring Parts Are the Hard Parts January 22, 2018 · 7 min Year two of Kubernetes at the fintech startup: networking, resource tuning, and the operational grunt work nobody blogs about. kubernetes containers devops

Your Containers Aren't Secure. Here's What to Actually Do About It. December 4, 2017 · 5 min Containers give you process isolation, not a security boundary. How we hardened images, locked down runtimes, and segmented networks at the fintech startup. containers kubernetes security

Service Mesh: You Probably Don't Need One November 27, 2017 · 3 min I evaluated Istio and Linkerd for our microservices at the fintech startup. My conclusion: most teams are buying complexity they haven't earned yet. kubernetes microservices

A Year Running Kubernetes in Production — What Actually Happened January 16, 2017 · 6 min After a year of Kubernetes in production: the wins are real, but the sharp edges drew blood first. What paid off, what bit us, and what I'd do differently. kubernetes containers devops

Container Orchestration: Docker Swarm vs Kubernetes vs Mesos October 17, 2016 · 4 min Swarm, Kubernetes, and Mesos compared side by side after running all three at a mobility startup. Kubernetes is going to win, but the operational tax is real. containers kubernetes agents