cert-manager Helm chart initContainers and trust-manager issuer
Two requests against the cert-manager project's Helm charts have no value to set in the current releases, cert-manager v1.21.2 and trust-manager v0.…
Tech news from the best sources
Two requests against the cert-manager project's Helm charts have no value to set in the current releases, cert-manager v1.21.2 and trust-manager v0.…
Most repositories that ship Kubernetes manifests, Helm charts or CRDs check them in CI with kubeconform or another JSON Schema validator. That catch…
The upgrade that changes nothing — on purpose The most important thing about Memory QoS graduating to Beta in Kubernetes v1.37 is what does not happ…
How a conference talk, a hardcoded branch, and too many deployment requests led me to ephemeral environments. Remember how it started? I was at a co…
EKS CI: Keep Test Mailbox Failures Actionable Email verification is a small step in many end-to-end tests, but in an EKS pipeline it can become the…
Scaling AI in production is not just about making models more powerful — it's about building the infrastructure to serve them reliably at scale. The…
Kapitan's kadet generators are Python packages that turn an inventory into Kubernetes manifests, Terraform JSON or anything else. They are also code…
Self-Hosted Databricks Alternative: Homelab Data Lakehouse Part of the homelab build series. Trino, Apache Iceberg, Project Nessie, dbt, Spark, MLfl…
On the first Monday of January, when our trade customers restock after the holidays, the catalogue API slowed to four seconds a page by half past ei…
When we horizontally scale an application, adding more instances is only part of the solution. We also need to consider where the application stores…
Most MCP servers start life as a local, stdio-based process — the client spawns the server as a child process, messages flow over stdin and stdout.…
Email verification tests become unreliable when the mailbox is treated like an ordinary HTTP dependency. A pipeline sends a message, waits a few sec…
Shared Responsibility in Argo CD: Who Owns Each Part of CVE-2026-77459 and Its Siblings Vulnerability overview Four CVSS 9.9 vulnerabilities were fi…
Kubernetes observability: for regulated workloads Scale converts an informal convention into an outage mechanism. For kubernetes observability for r…
An application team can point to the feature it shipped this week. A platform team may have spent that same week making deployments safer, improving…
Generative AI has moved from experiment to everyday tooling, bringing strict data privacy concerns with it. Where does the training data live? Who c…
I wrote the longer version, with more on each Argo project and my prep timeline, on my blog . Daily Argo CD use covers about a third of the CAPA exa…
The agent runtime is more portable than you think — mostly. Last week I got Google's Agent Substrate running on Amazon EKS, with S3 snapshots, RDS s…
You ship a new version on a quiet Tuesday afternoon. kubectl rollout status reports success, every pod is Running and Ready, and the dashboards look…
TL;DR. I write every Crossplane Composition in KCL via function-kcl . Shared logic lives in one helper module mounted from a ConfigMap. Editing happ…
TL;DR. Developers create cloud resources and IAM grants themselves by committing a small namespaced YAML next to their app. Each kind is a Crossplan…
Day 62 of DevOps, Day 12 of Azure. Both tasks today turned on a name I did not choose. Kubernetes named the file inside my Secret after the file on…
Building a cloud platform that can understand the AWS API is one thing; rigorously testing it is something else. The AWS API is open, well documente…
Two tools, two clocks. Terraform provisions the cluster, the node groups, the networking, the IAM. It changes rarely and under heavy approval. ArgoC…
kubectl logs is the first command you reach for when something breaks — and most people know only the bare version. The flags below are the differen…
ImagePullBackOff means Kubernetes tried to pull your container image, failed, and is now retrying with exponential backoff. The pod will never start…
This homework is not about memorizing definitions . Your task is to prove that you understand where everything lives, what each component does, and…
In production Kubernetes clusters running microservices under high concurrency, few operational failures are more frustrating than sudden Exit Code…
“I built and operated a production-style Kubernetes platform with separate dev, staging, and production environments. I deployed applications with H…
A Kubernetes resource request reserves scheduling capacity. A low CPU reading beside a large request can be worth investigating, but it does not est…