Tag: kubernetes

cert-manager makes Let's Encrypt automatic on Kubernetes — once. Then you scale, hit DNS-01 quirks, wildcard limits, and rate-limit walls. Here's the full survival guide.

Argo Rollouts uses a Rollout CRD with a slick UI. Flagger watches your Deployment with a Canary CRD. Here's which progressive-delivery tool to pick.

Two Kubernetes-native pipeline engines from CNCF — Argo Workflows and Tekton. Different philosophies, same goal: stop using Jenkins. Honest comparison.

kubeadm is the official Kubernetes bootstrapper. k3sup is a one-shot SSH installer for k3s. Here's which one to use for your homelab cluster.

etcd powers Kubernetes. Consul is the service-discovery Swiss army knife. ZooKeeper is the grizzled veteran. Here's how to pick a coordination store.

Alpine gives you a shell and apk; Distroless gives you nothing but the app. Compare attack surface, image size, and multi-stage build complexity.

Stakater Reloader watches ConfigMaps and Secrets and triggers rolling restarts automatically, so your pods always run current config—no kubectl rollout.

Rancher Desktop, Podman Desktop, and Docker Desktop go head-to-head on cost, k8s, resource use, and real-world friction for local dev.

Three inner-loop dev tools for Kubernetes — Garden, Tilt, and Skaffold. Which one actually makes K8s development bearable? Honest comparison, no fluff.

Containers are not VMs. Here are the real escape vectors — privileged mode, mounted sockets, kernel CVEs — and the runtime hardening that actually helps.

The CRI runtime under your Kubernetes cluster — cri-o vs containerd compared on footprint, distros, performance, and day-2 operability.

Containers aren't security boundaries — Sysbox, gVisor, and Kata fix that. Here's which isolation runtime fits your actual threat model.