Docker & Kubernetes
Images, Compose, pods, services, ingress, storage and day-2 operations.
Docker & Kubernetes articles
Kubernetes Jobs and CronJobs
A Job runs pods until they succeed; a CronJob creates Jobs on a schedule. Here's parallelism, retry limits, the missed-schedule trap, and history cleanup.
October 24, 2026Signing Container Images with cosign
cosign signs container images so you can verify what's running came from your pipeline. Keyless signing needs no key management — here's the workflow end to end.
October 24, 2026Kubernetes Version Upgrades Without Drama
Kubernetes releases every ~4 months and supports one-minor-version skew. Here's the upgrade order, the API deprecations that break things, and how to drain nodes safely.
October 24, 2026CoreDNS in Kubernetes
CoreDNS resolves Service names inside the cluster. Here's the Corefile, why ndots:5 makes external lookups slow, and how NodeLocal DNSCache fixes it.
October 24, 2026Horizontal Pod Autoscaling
HPA adds and removes pods to hit a target metric. Here's the algorithm, why it needs resource requests, tuning the flapping, and how it fits with node autoscaling.
October 24, 2026Kubernetes Network Policies
Pods can talk to any pod by default. NetworkPolicy locks that down — but only if your CNI enforces it. Here's a default-deny baseline and how to test it.
October 24, 2026StatefulSets Explained
StatefulSets give pods sticky names, sticky storage, and ordered operations — what databases and clustered apps need. Here's how each guarantee works.
October 24, 2026Debugging CrashLoopBackOff
CrashLoopBackOff is a symptom, not a cause. Here's how to find whether it's your code, your config, a probe, or the memory limit — in about two minutes.
October 24, 2026Docker Compose for Local Development
The compose setup that gives you a one-command dev environment: dependencies wait for healthchecks, code hot-reloads, and heavy services are opt-in via profiles.
October 24, 2026Docker Volumes vs Bind Mounts vs tmpfs
Named volumes for data Docker manages, bind mounts for code you edit, tmpfs for secrets in RAM. The differences bite in permissions and portability.
October 24, 2026Multi-Stage Docker Builds Explained
Compile in a fat image, copy only the artifact into a slim one. Multi-stage builds are the single biggest lever on image size and CVE count.
October 24, 2026Helm Chart Anatomy
A Helm chart is a directory of Go templates plus a values file. Here's what every file does and the template patterns you'll copy into every chart.
October 24, 2026