Kubernetes
-
Kubernetes & Containers
Etcd Is the Single Point of Failure Everyone Forgets Is There
Every object in the cluster lives in etcd, and its performance ceiling is far lower than most teams assume until…
Read More » -
Kubernetes & Containers
Helm Values Files Grow Until Nobody Understands Them
A values file that started with twenty settings accumulates hundreds over two years, and every one of them looks equally…
Read More » -
Kubernetes & Containers
Pod Affinity Rules Silently Stop Working When the Label Changes
An anti-affinity rule referencing a label that a deployment template no longer sets does not error. The scheduler simply stops…
Read More » -
Kubernetes & Containers
A Kubernetes Namespace Is Not a Security Boundary by Default
Namespaces organise resources logically and enforce almost nothing on their own. Real tenant isolation requires network policy, resource quotas and…
Read More » -
Node Maintenance Takes Down Services That Have Enough Replicas
Three replicas provide no protection if all three sit on one node and someone drains it, or if the drain…
Read More » -
Kubernetes & Containers
Init Containers Solve Startup Ordering That Application Code Should Not
Waiting for a database inside your application binary mixes orchestration concerns into business logic. An init container separates them cleanly.
Read More »