How to Secure Your APIs with Envoy and OPA Sidecars

Step by step guide to implement JWT authentication and role based authorization using Envoy and Open Policy Agent sidecars in Kubernetes.

Helm vs Kustomize in 2025: Patterns, Pros, Cons, and How to Combine Them

Three clean patterns for using Helm and Kustomize together without creating a templating mess.

Spring Boot AOT with GraalVM Native Image: Static and Mostly Static Executables

Rule tuning, eBPF driver, and perf tips.

Modifying OCI Images the Hard Way

Exploring low-level techniques for altering OCI images without relying on high-level tooling.

Relationships between OCI Artifacts in OCI Registries

Understanding how different OCI artifacts are linked and stored within container registries.

How I Run Spring Boot Applications on Kubernetes

A practical guide to deploying and managing Spring Boot applications efficiently on Kubernetes.

How to Send Logs to Multiple Outputs with Fluentd on Kubernetes (and Avoid Ruby Gems Incompatibility)

Configuring Fluentd to forward logs to multiple destinations in Kubernetes while resolving Ruby gem compatibility issues.

Achieving Multi-Tenant Metrics with Prometheus Agent: A First Building Block

Using Prometheus Agent to enable multi-tenant metrics collection as the foundation for scalable monitoring.

LDAP Authentication with Dex on Kubernetes Using Vcluster (K3s)

Setting up LDAP authentication with Dex on Kubernetes using Vcluster (K3s) for secure multi-tenant environments.

How We Reduced Kubernetes Cluster Sprawl by Adopting Vclusters: An Introduction

An overview of how adopting Vclusters helped reduce Kubernetes cluster sprawl and improved multi-tenant management.

Secure Your Docker Images with Cosign (and OPA Gatekeeper)

Signing Docker images with Cosign and enforcing policies using OPA Gatekeeper for a more secure Kubernetes supply chain.

Centralized (Multi-Tenant) Logging with Kubernetes: Part 3

Implementing a centralized multi-tenant logging architecture in Kubernetes using Fluentd, Fluent Bit, and OpenSearch.

Centralized (Multi-Tenant) Logging with Kubernetes: Part 2

Designing and deploying the second stage of a centralized multi-tenant logging solution for Kubernetes with Fluentd, Fluent Bit, and OpenSearch.

Kafka Producer Timing

Analyzing and optimizing message production timing in Apache Kafka for better throughput and latency.

How I Build and Deploy Applications with Tekton CI and Argo CD

A walkthrough of building and deploying applications using Tekton CI pipelines integrated with Argo CD for GitOps workflows.

Centralized (Multi-Tenant) Logging with Kubernetes: Part 1

Laying the groundwork for a centralized multi-tenant logging system in Kubernetes using Fluentd, Fluent Bit, and OpenSearch.

Podman

An introduction to Podman, its differences from Docker, and its use in Kubernetes workflows.

How I Containerize and Deploy Spring Boot Applications on Kubernetes

Step-by-step guide to containerizing Spring Boot applications and deploying them on Kubernetes.

Runtime Environment Variables with React, Kubernetes, and Apache

How to manage runtime environment variables in a React application deployed on Kubernetes with Apache.

Monitor External Services with Prometheus Outside Kubernetes

Using Prometheus to monitor external services and infrastructure components that run outside your Kubernetes cluster.