Docker & Kubernetes
Images, Compose, pods, services, ingress, storage and day-2 operations.
Kustomize Basics
Kustomize customizes plain YAML with overlays instead of templating. Here's bases vs overlays, the patch types, generators, and the gotchas around name suffixes.
September 13, 2026EKS vs Self-Managed Kubernetes
EKS runs the control plane for you; you still own nodes, networking, and add-ons. Here's the division of responsibility, the node options, and when self-managed is worth it.
September 11, 2026The AWS Load Balancer Controller
On EKS, the AWS Load Balancer Controller turns Ingress objects into ALBs and LoadBalancer Services into NLBs. Here's target types, ALB sharing, and the IAM/subnet-tag gotchas.
September 7, 2026Pod Security Admission
PSP is gone. Pod Security Admission enforces the Pod Security Standards via namespace labels — three levels, three modes. Here's how to roll it out without breaking things.
August 30, 2026Dockerfile Best Practices That Actually Matter
The handful of Dockerfile habits that cut build time and image size and remove the most common security findings.
August 27, 2026