Tag: kubernetes

Gateway API vs Ingress in 2026

Ingress is the annotation-soup classic. Gateway API is the role-oriented future with proper L4/L7 separation. Here's when to migrate and when to wait.

Velero: K8s Backup and DR

Your cluster will fail. Velero captures everything, manifests, CRDs, persistent volumes, and lets you replay it on a fresh cluster. Setup, gotchas, real DR plans.

Kustomize vs Jsonnet for K8s Manifests

Kustomize patches YAML with overlays. Jsonnet is a real templating language with imports and functions. Here's which K8s manifest tool to pick.

cert-manager: ACME at Scale

cert-manager makes Let's Encrypt automatic on Kubernetes, once. Then you scale, hit DNS-01 quirks, wildcard limits, and rate-limit walls. Here's the full survival guide.

Argo Rollouts vs Flagger Progressive Delivery

Argo Rollouts uses a Rollout CRD with a slick UI. Flagger watches your Deployment with a Canary CRD. Here's which progressive-delivery tool to pick.

Argo Workflows vs Tekton

Two Kubernetes-native pipeline engines from CNCF, Argo Workflows and Tekton. Different philosophies, same goal: stop using Jenkins. Honest comparison.

k3sup vs kubeadm for Homelab Clusters

kubeadm is the official Kubernetes bootstrapper. k3sup is a one-shot SSH installer for k3s. Here's which one to use for your homelab cluster.

etcd vs Consul vs ZooKeeper Coordination

etcd powers Kubernetes. Consul is the service-discovery Swiss army knife. ZooKeeper is the grizzled veteran. Here's how to pick a coordination store.

Rancher vs Podman vs Docker Desktop

Rancher Desktop, Podman Desktop, and Docker Desktop go head-to-head on cost, k8s, resource use, and real-world friction for local dev.

Garden vs Tilt vs Skaffold

Three inner-loop dev tools for Kubernetes, Garden, Tilt, and Skaffold. Which one actually makes K8s development bearable? Honest comparison, no fluff.

Container Escape: How to Stop It

Containers are not VMs. Here are the real escape vectors, privileged mode, mounted sockets, kernel CVEs, and the runtime hardening that actually helps.

cri-o vs containerd

The CRI runtime under your Kubernetes cluster, cri-o vs containerd compared on footprint, distros, performance, and day-2 operability.