DevOps & Cloud

Rolling, blue-green, and canary are not a maturity ladder where canary is the grown-up answer. Each trades infrastructure cost, blast radius, and rollback speed differently. How they actually work and which fits your constraints.

Requests and limits are the two numbers on every Kubernetes container, and most teams set them by copying whatever the last service used. Why CPU limits often make latency worse, why memory limits are non-negotiable, and how to size them from real usage.

Pending, ImagePullBackOff, CrashLoopBackOff, CreateContainerConfigError, OOMKilled. Each status points at a different subsystem. A systematic walk through the ones you will actually hit, and the command that resolves each.

The Kubernetes Gateway API replaces Ingress with role-oriented resources: GatewayClass, Gateway, and HTTPRoute. Learn header matching, weighted traffic splitting, cross-namespace ReferenceGrant, and a staged zero-downtime migration path.

Cilium and Hubble use eBPF to deliver L3-L7 network observability in Kubernetes without sidecars. Learn flow visibility, service maps, NetworkPolicy verification, the hubble observe CLI, and Prometheus metrics export.

A practical guide to native sidecar containers in Kubernetes 1.32: lifecycle ordering, migration from emptyDir hacks, log shipping, service mesh, and PreStop gotchas.

Complete guide to evaluating OpenTofu vs Terraform and migrating infrastructure as code projects with zero downtime and full state compatibility.

Complete guide to running GitHub Actions self-hosted runners on Kubernetes with Actions Runner Controller, auto-scaling, and production hardening.

Complete guide to setting up reproducible development environments using Nix Flakes with declarative tooling, per-project shells, and CI/CD integration.