/ archive
33 articles covering Kubernetes, DevOps, CI/CD, cloud infrastructure, and security.
Kubernetes has frozen the Ingress API and now points teams at Gateway API. This guide covers the resource model, how a typical Ingress translates into a Gateway plus HTTPRoute, and a staged cutover plan that keeps production traffic flowing.
7 min readCompare GKE Autopilot and Standard for production: control, cost model, node management, and when each mode is the better fit for your team.
7 min readScan Terraform before apply: catch exposed buckets, open security groups, and risky IAM in the pull request with policy-as-code gates, then enforce the same rules at the cloud layer.
6 min readA practical guide to securing the Kubernetes ingress path: choosing a controller, enforcing TLS and HTTPS redirects, applying network policies in front of services, and adding rate limiting before APIs are exposed to the internet.
8 min readA practical OpenTelemetry adoption guide for platform teams: collector architecture on Kubernetes, mapping metrics, logs, and traces to tooling, metadata correlation, and wiring telemetry into SLO-driven alerting.
8 min read