Last week my colleague Pieter suggested me a nice article about “Long-term DORA data reveals systemic performance plateaus and shifts, allowing organizations to connect improvements to architectural, cultural, and process changes.” So starting from my current level of Jira Lead Time Analyzer i developed in vibe coding, I tried to improve my report accordingly again … Read more
In modern software delivery, CI/CD pipelines are the backbone of speed, consistency, and reliability. They help engineering teams build, test, and deploy code quickly while keeping releases predictable across environments. But as systems grow, pipelines often become a hidden bottleneck. What starts as a simple setup for a small project can gradually turn into a … Read more
Introduction You are an administrator of a large Kubernetes cluster shared by many teams. You want to grant each team access only to the resources they are permitted to use. In this guide, I’ll show you how to configure permissions with Tailscale and secure your Kubernetes API so you can provide access without exposing your … Read more
Introduction SeaweedFS is a distributed object store and file system that can expose an S3-compatible API. It is useful when you want to replace MinIO with lighter self-hosted object storage for applications such as photo backups, static hosting, or internal services that expect S3. The reason to move away from MinIO is simple: the public … Read more
I was given read access to a mid-sized production Kubernetes cluster — 3 namespaces, ~40 workloads, running on EKS. No insider knowledge. Just tools, curiosity, and 60 minutes. Here’s everything I found. The Setup The cluster belonged to a startup that had been running Kubernetes in production for about 18 months. They had a dedicated … Read more
Role‑Based Access Control (RBAC) is one of the most critical security layers in any Kubernetes cluster because it decides who can perform which actions on which resources. In many organizations, RBAC is the difference between “one compromised account destroys the cluster” and “blast radius is limited to a small, controlled scope.” This blog will take … Read more
😅 This Started With Pure Frustration I can’t even count how many times this has happened. I’d sit down thinking, “Let’s quickly set up a Kubernetes cluster.” It always starts simple. Nothing fancy, just a quick setup for testing or deployment. But somehow, it never stays simple for long. First, the container runtime takes longer … Read more
I usually don’t get excited about Kubernetes version numbers. Most releases come, we skim the changelog, upgrade when forced, and move on. But v1.35 made me stop for a bit. Not because it’s flashy.Because it feels… mature. Kubernetes v1.35 was released on December 17, 2025, and it’s called Timbernetes — The World Tree Release. The … Read more
If you’ve worked with Kubernetes long enough, you already know this truth: Most Kubernetes issues don’t start in the cluster. They start in YAML. A missing resource limit.A privileged container left unnoticed.No readiness probe, no liveness probe. Everything looks fine… until it isn’t. That’s exactly the problem K8sGuardian Engine is built to solve. K8sGuardian Engine … Read more
This is not a copy‑paste documentation blog. This guide comes from real incidents, real mistakes, and real recoveries in production. To be honest, most teams start thinking seriously about Kubernetes Disaster Recovery only after something bad has already happened. I was no different. For a long time, I believed that High Availability was enough. Then … Read more