Older posts.
How to Use External Secrets Operator with Vault on Kubernetes (2026)
Step-by-step External Secrets Operator v2.13 setup with HashiCorp Vault, OpenBao or AWS Secrets Manager: Helm install, Kubernetes auth, ClusterSecretStore, ExternalSecret, rotation and reloads, ESO's 2025 release pause, alternatives, and fixes for SecretSyncedError.
14 minOct 20, 2026eBPF Explained (2026): Verifier, CO-RE, Cilium, Tetragon and sched_ext
What eBPF is in 2026 and how it works: the verifier and its 1 million instruction limit, CO-RE and BTF, Cilium 1.20 networking, Tetragon 1.7 enforcement, OBI and the OTel profiler, eBPF for Windows, sched_ext since Linux 6.12, and the real limitations.
11 minOct 20, 2026Docker in 2026: Engine 29, containerd 2.3 LTS, Podman 6 and the AI Push
The state of Docker and containers in October 2026: Docker Engine 29.9, Desktop 4.96 and its licence terms, Model Runner and the MCP Toolkit, free Hardened Images, Hub pull limits, containerd 2.3 LTS, Podman 6.0, BuildKit 0.34 and OCI artifacts.
12 minOct 20, 2026Distributed Tracing Explained: traceparent, Sampling and Jaeger v2 (2026)
Distributed tracing in 2026, explained by an infrastructure engineer: spans, W3C traceparent propagation, head vs tail sampling in the OpenTelemetry Collector, Jaeger v2 after v1's end of life, Grafana Tempo 3, Zipkin's status, trace-to-logs correlation and what traces cost.
12 minOct 20, 2026DevOps Roadmap 2026: Skills, Certifications and What AI Changed
A DevOps roadmap for 2026 built on current data: Indeed's senior-heavy rebound in software postings, Stack Overflow 2025 and 2026 survey results on AI and pay, CKA and CNPA exam facts, and a learning path from Linux to platform engineering.
13 minOct 20, 2026How to Deploy vLLM on Kubernetes with GPUs: Step-by-Step (2026)
Deploy vLLM v0.32.0 on Kubernetes with NVIDIA GPUs: install GPU Operator v26.7.2, cache model weights on a PVC, serve an OpenAI-compatible API, autoscale on vllm:num_requests_waiting with KEDA, and fix CUDA out of memory and slow startup errors.
15 minOct 20, 2026How to Deploy an ML Model on Kubernetes with KServe 0.21 (2026)
Step-by-step KServe v0.21.0 guide: install in Standard mode with Helm, cert-manager and Gateway API, deploy scikit-learn and Hugging Face/vLLM InferenceServices, add HPA or KEDA autoscaling, canary rollouts, GPUs, and fix InferenceService not ready.
14 minOct 20, 2026Crossplane vs Terraform vs Pulumi in 2026: Control Plane or Plan/Apply?
Crossplane vs Terraform, OpenTofu and Pulumi as of October 2026: Crossplane v2 namespaced resources and function pipelines, CNCF graduation, Pulumi running HCL, Terraform 1.16 and OpenTofu 1.13, how each handles drift, what it costs, and which team fits which tool.
12 minOct 20, 2026Continuous Profiling in 2026: OTel Profiles Alpha, eBPF Agents, Real Costs
Continuous profiling in 2026 explained: OpenTelemetry Profiles reached public alpha in March, the Elastic-donated eBPF profiler now ships as a Collector, Pyroscope 2.0 and Parca compared, the real overhead numbers, and how profiles turn into cloud savings.
13 minOct 20, 2026Hardened Container Images in 2026: DHI Free, Bitnami Gone, 515 CVEs to 0
Container base images in 2026 compared: Docker Hardened Images went free under Apache 2.0, Bitnami moved its catalog to bitnamilegacy, Chainguard cut its free tier to five images, and a grype scan of 12 base images found 515 CVEs in python:3.13 and zero in four minimal images.
12 minOct 20, 2026How to Scan Container Images with Trivy and Grype (2026)
Step-by-step guide to scanning container images with Trivy v0.76 and Grype v0.121: verified installs after the March 2026 Trivy compromise, image and SBOM scans, CI gates on fixable criticals, .trivyignore, VEX, and fixes for DB download errors.
12 minOct 20, 2026Cloud Outages 2025-2026: What 7 Official Postmortems Actually Teach
The AWS us-east-1 DynamoDB DNS outage, Azure Front Door, two Cloudflare global failures, Google Cloud Service Control and two 2026 incidents, read from the official postmortems: root causes, durations, and the static stability, cell and dependency-mapping fixes that follow.
14 minOct 20, 2026How to Run Chaos Experiments on Kubernetes with Chaos Mesh (2026)
Step-by-step Chaos Mesh 2.8.5 guide: install with Helm on containerd, opt namespaces in, write PodChaos, NetworkChaos and StressChaos YAML, gate experiments on a Prometheus SLO, schedule them, and run the same test with a LitmusChaos promProbe, plus a troubleshooting table.
16 minOct 20, 2026Chaos Engineering in 2026: Tools, AI Agents and What the Evidence Says
Chaos engineering in 2026: where Chaos Mesh 2.8.5, LitmusChaos 3.33, AWS FIS, Azure Chaos Studio Workspaces, Gremlin and Steadybit stand, how AI agents and MCP servers entered resilience testing, how to run game days, and how thin the evidence that it cuts incidents really is.
13 minOct 20, 2026How to Set Up cert-manager with Let's Encrypt and Fix Errors (2026)
Install cert-manager v1.21 with Helm, create Let's Encrypt ClusterIssuers for HTTP-01 (Gateway API or Ingress) and DNS-01, then debug a Certificate stuck not ready by walking CertificateRequest, Order and Challenge, with rate limits, ARI and alerts.
14 min