https://coresolutions.ltd/blog Core Solutions designs and builds Kubernetes platforms, golden paths, and day-two operating systems for teams that want flexibility without the chaos. en https://coresolutions.ltd/blog/why-we-built-kupe-cloud https://coresolutions.ltd/blog/why-we-built-kupe-cloud Kupe Cloud is in alpha. We built it after wiring the same GitOps, secrets, ingress, and observability layer around Kubernetes clusters one time too many. Wed, 26 Aug 2026 00:00:00 GMT https://coresolutions.ltd/blog/tetragon-kubernetes-runtime-enforcement https://coresolutions.ltd/blog/tetragon-kubernetes-runtime-enforcement A Tetragon Kubernetes tutorial: installation, TracingPolicy design, monitor mode, and the difference between detecting a runtime event and blocking it in-kernel. Wed, 19 Aug 2026 00:00:00 GMT https://coresolutions.ltd/blog/what-good-developer-experience-looks-like-in-kubernetes https://coresolutions.ltd/blog/what-good-developer-experience-looks-like-in-kubernetes Good Kubernetes developer experience comes from shorter feedback loops, lower cognitive load, and workflow defaults that keep developers out of raw YAML. Tue, 18 Aug 2026 00:00:00 GMT https://coresolutions.ltd/blog/podsecuritypolicy-replacement-pod-security-admission https://coresolutions.ltd/blog/podsecuritypolicy-replacement-pod-security-admission A practical PodSecurityPolicy replacement guide: roll out Pod Security Admission in stages, pin policy versions, and avoid the traps that break workloads. Thu, 13 Aug 2026 00:00:00 GMT https://coresolutions.ltd/blog/renovate-kubernetes-helm-terraform https://coresolutions.ltd/blog/renovate-kubernetes-helm-terraform A practical Renovate Kubernetes guide: keep Helm charts, Argo CD manifests, image tags, OpenTofu providers, and GitHub Actions current without the PR flood. Tue, 11 Aug 2026 00:00:00 GMT https://coresolutions.ltd/blog/your-helm-charts-are-technical-debt https://coresolutions.ltd/blog/your-helm-charts-are-technical-debt Helm chart debt comes from the templating model, not the packaging. What it costs, what the alternatives change, and how we keep authoring charts anyway. Thu, 06 Aug 2026 00:00:00 GMT https://coresolutions.ltd/blog/kubernetes-cost-allocation-with-opencost https://coresolutions.ltd/blog/kubernetes-cost-allocation-with-opencost Kubernetes cost allocation with OpenCost: install it with Helm, query per-namespace showback from the Allocation API, and account for idle spend honestly. Tue, 04 Aug 2026 00:00:00 GMT https://coresolutions.ltd/blog/nobody-warns-you-about-year-two-of-platform-engineering https://coresolutions.ltd/blog/nobody-warns-you-about-year-two-of-platform-engineering Platform engineering day two starts when the launch is over and the real work begins: upgrades, adoption, maintenance, and funding a platform as a product. Thu, 30 Jul 2026 00:00:00 GMT https://coresolutions.ltd/blog/llm-observability-opentelemetry-genai https://coresolutions.ltd/blog/llm-observability-opentelemetry-genai LLM observability starts with traces: use OpenTelemetry GenAI conventions to see model calls, token usage, latency, and agent tool paths. Tue, 28 Jul 2026 00:00:00 GMT https://coresolutions.ltd/blog/stop-copying-big-tech-platform-architecture https://coresolutions.ltd/blog/stop-copying-big-tech-platform-architecture Right-sizing platform architecture means copying the principles behind big-tech systems, not the stack itself, so small teams avoid operational debt they do not need. Sat, 11 Jul 2026 00:00:00 GMT https://coresolutions.ltd/blog/argo-rollouts-kubernetes-canary-blue-green https://coresolutions.ltd/blog/argo-rollouts-kubernetes-canary-blue-green Learn how to use Argo Rollouts on Kubernetes for canary and blue-green deployments, automated rollback, and GitOps-based progressive delivery. Wed, 08 Jul 2026 00:00:00 GMT https://coresolutions.ltd/blog/just-in-time-node-autoscaling-on-eks-with-karpenter https://coresolutions.ltd/blog/just-in-time-node-autoscaling-on-eks-with-karpenter Karpenter changes EKS node autoscaling by launching right-sized EC2 nodes from pending pods, then consolidating and replacing them as the fleet drifts. Tue, 07 Jul 2026 00:00:00 GMT https://coresolutions.ltd/blog/event-driven-autoscaling-on-kubernetes-with-keda https://coresolutions.ltd/blog/event-driven-autoscaling-on-kubernetes-with-keda Use KEDA on Kubernetes to scale from queue depth, lag, and schedules, and understand when scale to zero is worth the cold-start trade-off. Fri, 03 Jul 2026 00:00:00 GMT https://coresolutions.ltd/blog/ebpf-powered-networking-on-kubernetes-with-cilium https://coresolutions.ltd/blog/ebpf-powered-networking-on-kubernetes-with-cilium Cilium changes Kubernetes networking by replacing more of kube-proxy with eBPF, enforcing identity-aware policy, and adding flow visibility through Hubble. Thu, 02 Jul 2026 00:00:00 GMT https://coresolutions.ltd/blog/batch-workloads-done-right-on-kubernetes-with-kueue https://coresolutions.ltd/blog/batch-workloads-done-right-on-kubernetes-with-kueue Use Kueue to queue Kubernetes batch workloads before they hit the scheduler, so shared cluster quota is admitted deliberately instead of all at once. Wed, 01 Jul 2026 00:00:00 GMT https://coresolutions.ltd/blog/kubernetes-as-your-control-plane-with-crossplane https://coresolutions.ltd/blog/kubernetes-as-your-control-plane-with-crossplane Use Crossplane to make Kubernetes your infrastructure control plane — a self-service platform API for cloud resources, reconciled continuously. Mon, 29 Jun 2026 00:00:00 GMT https://coresolutions.ltd/blog/why-feedback-loops-matter-more-when-llms-write-your-code https://coresolutions.ltd/blog/why-feedback-loops-matter-more-when-llms-write-your-code LLM-generated code arrives quickly, so fast feedback loops for tests, review, and runtime checks matter even more if you want to ship safely. Thu, 25 Jun 2026 00:00:00 GMT https://coresolutions.ltd/blog/surviving-node-drains-pdbs-topology-spread-graceful-shutdown https://coresolutions.ltd/blog/surviving-node-drains-pdbs-topology-spread-graceful-shutdown Node drains are ordinary Kubernetes maintenance, but they only stay boring when replicas are spread out, disruptions are budgeted, and pods shut down cleanly. Wed, 24 Jun 2026 00:00:00 GMT https://coresolutions.ltd/blog/auto-rotating-credentials-with-secrets-manager https://coresolutions.ltd/blog/auto-rotating-credentials-with-secrets-manager Automatically update RDS credentials and application config on EC2 instances. Mon, 16 Mar 2026 00:00:00 GMT https://coresolutions.ltd/blog/auto-update-security-groups-with-cloudflare-ips https://coresolutions.ltd/blog/auto-update-security-groups-with-cloudflare-ips How to auto update security groups with Cloudflare IPs using AWS Lambda Mon, 16 Mar 2026 00:00:00 GMT https://coresolutions.ltd/blog/blue-and-green-deployments-with-opentofu-terraform-and-ansible-on-ec2 https://coresolutions.ltd/blog/blue-and-green-deployments-with-opentofu-terraform-and-ansible-on-ec2 Implement blue-green deployments using OpenTofu/Terraform and Ansible on EC2 workloads Mon, 16 Mar 2026 00:00:00 GMT https://coresolutions.ltd/blog/enhance-your-kubernetes-monitoring-with-grafana https://coresolutions.ltd/blog/enhance-your-kubernetes-monitoring-with-grafana Grafana installation, initial dashboard setup, along with some fundamentals and best practices. Mon, 16 Mar 2026 00:00:00 GMT https://coresolutions.ltd/blog/kubernetes-auto-and-scheduled-scaling https://coresolutions.ltd/blog/kubernetes-auto-and-scheduled-scaling Scale Kubernetes on demand and on a schedule, so idle nodes stop costing you overnight. Mon, 16 Mar 2026 00:00:00 GMT https://coresolutions.ltd/blog/kubernetes-cli-tools-to-boost-your-productivity https://coresolutions.ltd/blog/kubernetes-cli-tools-to-boost-your-productivity CLI tools and shell tips that take the typing out of everyday Kubernetes work. Mon, 16 Mar 2026 00:00:00 GMT https://coresolutions.ltd/blog/managing-multiple-aws-accounts-with-terraform https://coresolutions.ltd/blog/managing-multiple-aws-accounts-with-terraform Manage multiple AWS accounts with OpenTofu/Terraform, from the simplest setup up to AWS Control Tower AFT. Mon, 16 Mar 2026 00:00:00 GMT https://coresolutions.ltd/blog/protecting-your-alb-with-waf-cloudfront https://coresolutions.ltd/blog/protecting-your-alb-with-waf-cloudfront Learn how to protect your ALB with AWS WAF and CloudFront. Mon, 16 Mar 2026 00:00:00 GMT https://coresolutions.ltd/blog/resolve-route53-records-from-within-eks https://coresolutions.ltd/blog/resolve-route53-records-from-within-eks Resolve private Route53 records from inside an EKS cluster by pointing CoreDNS at the VPC resolver. Mon, 16 Mar 2026 00:00:00 GMT https://coresolutions.ltd/blog/run-jenkins-in-docker-with-persistent-data https://coresolutions.ltd/blog/run-jenkins-in-docker-with-persistent-data Quickly launch a test-friendly Jenkins instance in Docker, maintain configuration between restarts, and safely trial new features. Mon, 16 Mar 2026 00:00:00 GMT https://coresolutions.ltd/blog/up-and-running-with-cloudflare-terraform-provider https://coresolutions.ltd/blog/up-and-running-with-cloudflare-terraform-provider Quick-start guide to managing Cloudflare infrastructure with OpenTofu or Terraform. Wed, 01 Oct 2025 00:00:00 GMT https://coresolutions.ltd/blog/kubernetes-imagepullbackoff-pending-pod-troubleshooting https://coresolutions.ltd/blog/kubernetes-imagepullbackoff-pending-pod-troubleshooting Complete guide to diagnosing and fixing the most common pod deployment failures Mon, 29 Sep 2025 00:00:00 GMT https://coresolutions.ltd/blog/zero-trust-networking-kubernetes-istio-service-mesh https://coresolutions.ltd/blog/zero-trust-networking-kubernetes-istio-service-mesh Zero trust architecture in Kubernetes, from implementation and policy to observability. Tue, 23 Sep 2025 00:00:00 GMT https://coresolutions.ltd/blog/deploy-to-aws-using-github-actions-and-oidc https://coresolutions.ltd/blog/deploy-to-aws-using-github-actions-and-oidc How to securely deploy to AWS from GitHub Actions using OIDC Mon, 08 Sep 2025 00:00:00 GMT https://coresolutions.ltd/blog/testing-opentofu-terraform https://coresolutions.ltd/blog/testing-opentofu-terraform Native test blocks, Terratest and policy checks: what to test in OpenTofu and Terraform, and what to skip. Mon, 01 Sep 2025 00:00:00 GMT https://coresolutions.ltd/blog/up-and-running-with-kubernetes-terraform-provider https://coresolutions.ltd/blog/up-and-running-with-kubernetes-terraform-provider A practical guide to managing Kubernetes resources with OpenTofu or Terraform. Wed, 15 Jan 2025 00:00:00 GMT https://coresolutions.ltd/blog/secrets-management-scale-external-secrets-operator https://coresolutions.ltd/blog/secrets-management-scale-external-secrets-operator Use External Secrets Operator to sync AWS Secrets Manager values into Kubernetes with IRSA, sane refresh policies, and less secret material in git. Sun, 15 Sep 2024 00:00:00 GMT https://coresolutions.ltd/blog/assume-iam-roles-on-eks-the-right-way https://coresolutions.ltd/blog/assume-iam-roles-on-eks-the-right-way How to set up and use IAM Roles for Service Accounts in EKS to securely manage pod-level IAM roles Mon, 20 May 2024 00:00:00 GMT https://coresolutions.ltd/blog/kubernetes-aws-load-balancer-controller https://coresolutions.ltd/blog/kubernetes-aws-load-balancer-controller Lowdown on the AWS Load Balancer Controller for Kubernetes ingress. Wed, 10 Apr 2024 00:00:00 GMT https://coresolutions.ltd/blog/gitops-for-kubernetes-with-argo-cd https://coresolutions.ltd/blog/gitops-for-kubernetes-with-argo-cd Deploy to Kubernetes from Git with Argo CD, and keep clusters in sync with what the repo says. Fri, 15 Mar 2024 00:00:00 GMT