eBPF Explained (2026): Verifier, CO-RE, Cilium, Tetragon and sched_ext
What eBPF is in 2026 and how it works: the verifier and its 1 million instruction limit, CO-RE and BTF, Cilium 1.20 networking, Tetragon 1.7 enforcement, OBI and the OTel profiler, eBPF for Windows, sched_ext since Linux 6.12, and the real limitations.
11 minOct 20, 2026Docker in 2026: Engine 29, containerd 2.3 LTS, Podman 6 and the AI Push
The state of Docker and containers in October 2026: Docker Engine 29.9, Desktop 4.96 and its licence terms, Model Runner and the MCP Toolkit, free Hardened Images, Hub pull limits, containerd 2.3 LTS, Podman 6.0, BuildKit 0.34 and OCI artifacts.
12 minOct 20, 2026DevOps Roadmap 2026: Skills, Certifications and What AI Changed
A DevOps roadmap for 2026 built on current data: Indeed's senior-heavy rebound in software postings, Stack Overflow 2025 and 2026 survey results on AI and pay, CKA and CNPA exam facts, and a learning path from Linux to platform engineering.
13 minOct 20, 2026How to Deploy vLLM on Kubernetes with GPUs: Step-by-Step (2026)
Deploy vLLM v0.32.0 on Kubernetes with NVIDIA GPUs: install GPU Operator v26.7.2, cache model weights on a PVC, serve an OpenAI-compatible API, autoscale on vllm:num_requests_waiting with KEDA, and fix CUDA out of memory and slow startup errors.
15 minOct 20, 2026How to Deploy an ML Model on Kubernetes with KServe 0.21 (2026)
Step-by-step KServe v0.21.0 guide: install in Standard mode with Helm, cert-manager and Gateway API, deploy scikit-learn and Hugging Face/vLLM InferenceServices, add HPA or KEDA autoscaling, canary rollouts, GPUs, and fix InferenceService not ready.
14 minOct 20, 2026Crossplane vs Terraform vs Pulumi in 2026: Control Plane or Plan/Apply?
Crossplane vs Terraform, OpenTofu and Pulumi as of October 2026: Crossplane v2 namespaced resources and function pipelines, CNCF graduation, Pulumi running HCL, Terraform 1.16 and OpenTofu 1.13, how each handles drift, what it costs, and which team fits which tool.
12 minOct 20, 2026Continuous Profiling in 2026: OTel Profiles Alpha, eBPF Agents, Real Costs
Continuous profiling in 2026 explained: OpenTelemetry Profiles reached public alpha in March, the Elastic-donated eBPF profiler now ships as a Collector, Pyroscope 2.0 and Parca compared, the real overhead numbers, and how profiles turn into cloud savings.
13 minOct 20, 2026Hardened Container Images in 2026: DHI Free, Bitnami Gone, 515 CVEs to 0
Container base images in 2026 compared: Docker Hardened Images went free under Apache 2.0, Bitnami moved its catalog to bitnamilegacy, Chainguard cut its free tier to five images, and a grype scan of 12 base images found 515 CVEs in python:3.13 and zero in four minimal images.
12 minOct 20, 2026How to Run Chaos Experiments on Kubernetes with Chaos Mesh (2026)
Step-by-step Chaos Mesh 2.8.5 guide: install with Helm on containerd, opt namespaces in, write PodChaos, NetworkChaos and StressChaos YAML, gate experiments on a Prometheus SLO, schedule them, and run the same test with a LitmusChaos promProbe, plus a troubleshooting table.
16 minOct 20, 2026Chaos Engineering in 2026: Tools, AI Agents and What the Evidence Says
Chaos engineering in 2026: where Chaos Mesh 2.8.5, LitmusChaos 3.33, AWS FIS, Azure Chaos Studio Workspaces, Gremlin and Steadybit stand, how AI agents and MCP servers entered resilience testing, how to run game days, and how thin the evidence that it cuts incidents really is.
13 minOct 20, 2026How to Set Up cert-manager with Let's Encrypt and Fix Errors (2026)
Install cert-manager v1.21 with Helm, create Let's Encrypt ClusterIssuers for HTTP-01 (Gateway API or Ingress) and DNS-01, then debug a Certificate stuck not ready by walking CertificateRequest, Order and Challenge, with rate limits, ARI and alerts.
14 minOct 20, 2026How to Do Canary Deployments with Argo Rollouts 1.10 (2026)
Step-by-step Argo Rollouts canary guide for 2026: install v1.10.1 with Helm and the Gateway API plugin v0.17.0, write a Rollout with weighted steps, add a Prometheus AnalysisTemplate, watch automated rollback, and fix the common errors.
14 minOct 20, 2026How to Set Up Backstage as an Internal Developer Portal (2026)
Step-by-step Backstage 1.55 setup for 2026: create-app on Node 22 or 24, PostgreSQL, GitHub sign-in, catalog-info.yaml, software templates, TechDocs, a Kubernetes deploy with the official Helm chart, alternatives, and fixes for common errors.
14 minOct 20, 2026How to Set Up Argo CD for GitOps: Step-by-Step Guide (2026)
Install Argo CD 3.5.5 with Helm chart 10.10.5, structure a GitOps repo, bootstrap with app-of-apps and ApplicationSet, configure sync policies, waves and hooks, add SSO and RBAC, deploy Helm and Kustomize apps, and fix OutOfSync, Degraded and ComparisonError.
14 minOct 5, 2026Policy as Code for AI Agents in 2026: Cedar at the Gateway, Rego in the Hook, and the 11.2% the Model Still Lets Through
What actually enforces limits on AI agents in 2026: OPA 1.21 and Rego v1 after the founders moved to Apple, Cedar in Amazon Bedrock AgentCore Policy (GA 3 March 2026, 13 regions, default deny), Kyverno 1.19 retiring ClusterPolicy for CEL, Claude Code hooks that deny even in bypass mode, Codex's Seatbelt and bwrap sandboxes, the MCP 2026-07-28 authorization spec, and why none of it is optional while browser-agent injection success sits at 11.2% and OpenAI says the problem is unlikely to ever be fully solved. With a tested Rego policy and a Cedar policy for tool calls.
13 min