Tag archive
Platform engineering notes on cluster design, workload operations, and the systems around running Kubernetes well.
Kupe Cloud is in alpha. We built it after wiring the same GitOps, secrets, ingress, and observability layer around Kubernetes clusters one time too many.
A Tetragon Kubernetes tutorial: installation, TracingPolicy design, monitor mode, and the difference between detecting a runtime event and blocking it in-kernel.
Good Kubernetes developer experience comes from shorter feedback loops, lower cognitive load, and workflow defaults that keep developers out of raw YAML.
A practical PodSecurityPolicy replacement guide: roll out Pod Security Admission in stages, pin policy versions, and avoid the traps that break workloads.
A practical Renovate Kubernetes guide: keep Helm charts, Argo CD manifests, image tags, OpenTofu providers, and GitHub Actions current without the PR flood.
Helm chart debt comes from the templating model, not the packaging. What it costs, what the alternatives change, and how we keep authoring charts anyway.
Kubernetes cost allocation with OpenCost: install it with Helm, query per-namespace showback from the Allocation API, and account for idle spend honestly.
Learn how to use Argo Rollouts on Kubernetes for canary and blue-green deployments, automated rollback, and GitOps-based progressive delivery.
Karpenter changes EKS node autoscaling by launching right-sized EC2 nodes from pending pods, then consolidating and replacing them as the fleet drifts.
