October 5, 2026
Kustomize for Declarative Kubernetes Configuration
Build a practical Kustomize mental model, organize reusable bases and focused overlays, render safe variants, and apply them declaratively with kubectl.
Read article →Blog
Notes on reliable software delivery
This archive is reserved for future writing on DevOps, SRE, cloud platforms, CI/CD, Kubernetes, observability and production operations.
October 4, 2026
Helm for Installing and Managing Kubernetes Components
Build a practical Helm mental model, inspect and configure charts, manage release revisions, and connect Helm operations to the Kubernetes resources they create.
Read article →
October 2, 2026
Kubernetes RBAC: ServiceAccounts, Roles, ClusterRoles, RoleBindings, and ClusterRoleBindings
Build a practical Kubernetes RBAC mental model, give workloads distinct ServiceAccount identities, grant least-privilege access, and verify authorization with kubectl.
Read article →
October 1, 2026
High-Availability Control Plane Architecture and Configuration
Design and build a highly available kubeadm control plane by combining a stable API endpoint, redundant control-plane components, and an etcd quorum.
Read article →
September 29, 2026
Kubernetes Cluster Lifecycle and Version Upgrades
Plan and perform safe kubeadm cluster upgrades by reading version skew, upgrading the control plane before nodes, draining deliberately, and verifying each transition.
Read article →
September 29, 2026
Joining and Managing Worker Nodes with kubeadm
Join Linux workers to a kubeadm cluster securely, understand discovery and TLS bootstrap, verify Node readiness, perform maintenance, and remove or rejoin nodes safely.
Read article →
September 28, 2026
Creating a Kubernetes Cluster with kubeadm
Build a single-control-plane Kubernetes cluster with kubeadm, understand each bootstrap phase, configure kubectl, install Pod networking, and verify the result.
Read article →
September 27, 2026
Preparing Linux and the Container Runtime for a kubeadm Cluster
Prepare a Linux host for kubeadm by verifying identity and connectivity, disabling swap, enabling packet forwarding, aligning cgroups, and validating a CRI-compatible runtime.
Read article →
September 26, 2026
Worker Node Anatomy: kubelet, Container Runtime, and kube-proxy
Understand how kubelet, the container runtime, and kube-proxy cooperate on every worker node—and how to inspect each layer without confusing their responsibilities.
Read article →
September 25, 2026
Kubernetes Control Plane Components and Static Pods
Understand how the Kubernetes control plane makes cluster-wide decisions, why kubeadm runs its core components as static Pods, and how to inspect both safely.
Read article →
September 24, 2026
Workload Autoscaling with the Horizontal Pod Autoscaler
Understand how the Horizontal Pod Autoscaler turns workload metrics into replica changes, why CPU requests matter, and how to configure, observe, and troubleshoot HPA behavior.
Read article →
September 22, 2026
Node Affinity, Pod Affinity, Pod Anti-Affinity, and Topology Spread Constraints
Control where Pods may run, prefer useful placements, keep related workloads together or apart, and balance replicas across nodes and zones with Kubernetes scheduling rules.
Read article →
September 21, 2026
Taints and Tolerations
Understand how node taints repel Pods, how matching tolerations remove that barrier, and how NoSchedule, PreferNoSchedule, and NoExecute change placement and eviction behavior.
Read article →
September 21, 2026
Scheduling Foundations: The Scheduler, nodeSelector, and nodeName
Understand how Kubernetes filters, scores, and binds Pods to nodes; constrain placement with nodeSelector; use nodeName safely; and read the evidence when a Pod stays unscheduled.
Read article →
September 20, 2026
Pod Admission and Resource Controls: Requests, Limits, LimitRange, and ResourceQuota
Understand the full Kubernetes resource-control path: size containers with requests and limits, apply namespace defaults and guardrails with LimitRange, and cap aggregate consumption with ResourceQuota.
Read article →
September 19, 2026
ConfigMaps and Secrets: Configuring Applications
Build a durable mental model for Kubernetes application configuration: create ConfigMaps and Secrets, deliver selected values as environment variables or files, and reason correctly about updates and failures.
Read article →
September 17, 2026
DaemonSets, StatefulSets, Jobs, and CronJobs: Choosing the Right Workload Controller
Choose Kubernetes workload controllers by what they preserve: node coverage, member identity, completed work, or a schedule. Follow each lifecycle with YAML and kubectl.
Read article →
September 10, 2026
Rolling Updates, Rollbacks, and Deployment Strategies
Understand how a Deployment replaces Pods safely through competing ReplicaSets, control availability with maxSurge and maxUnavailable, observe rollout progress, and roll back with confidence.
Read article →
September 9, 2026
ReplicaSets and Deployments: Desired State, Self-Healing, and Scaling
Understand how Deployments and ReplicaSets turn a desired replica count into self-healing, replaceable Pods, then observe ownership and scaling with kubectl.
Read article →
September 9, 2026
Container Health: Startup, Liveness, and Readiness Probes
Build a clear mental model for Kubernetes startup, liveness, and readiness probes, then observe each signal through one reproducible Pod demonstration.
Read article →
September 7, 2026
Pods: Lifecycle, Init Containers, and Multi-Container Pods
Understand Pod identity, container restarts, ordered initialization, and shared resources through clear Kubernetes commands and multi-container demonstrations.
Read article →
September 6, 2026
Kubernetes Objects and YAML: Metadata, Spec, Status, Labels, Selectors, and Annotations
Read Kubernetes objects with confidence: separate metadata, spec, and status; use YAML, labels, selectors, and annotations in a clear administrator workflow.
Read article →
September 2, 2026
kubectl Foundations: Contexts, Namespaces, Resource Discovery, and Output
Build a reliable kubectl workflow for CKA administration: verify the active context, control namespace scope, discover the API resources your cluster serves, and choose output that answers the question at hand.
Read article →
August 30, 2026
Kubernetes Architecture and the API Request Flow
Build the Kubernetes mental model every CKA candidate needs: trace a kubectl request through the API server, understand where cluster state lives, and see how stored intent becomes work on a node.
Read article →