Docker & Kubernetes
Images, Compose, pods, services, ingress, storage and day-2 operations.
Docker & Kubernetes articles
How to Shrink a Docker Image
Most images are 5–20x bigger than they need to be. Here's the checklist that gets a 1.2 GB image down to 80 MB without losing anything you use.
October 24, 2026The kubectl Commands You Actually Use Daily
Not every kubectl flag — the two dozen invocations that cover 95% of operating a cluster, with the jsonpath and -o custom-columns tricks that save the most time.
October 24, 2026ingress-nginx with TLS and cert-manager
The standard cluster edge: ingress-nginx for L7 routing, cert-manager for automatic TLS. Here's a working setup and the failure modes.
October 24, 2026The Kubernetes Pod Lifecycle
What actually happens between 'apply' and 'Running', the difference between pod phase and container state, and how a pod shuts down cleanly.
October 24, 2026Kubernetes Requests vs Limits, and OOMKilled
Requests are a scheduling promise; limits are a hard ceiling. Getting them wrong means either OOMKills or a half-empty cluster.
October 24, 2026Liveness, Readiness, and Startup Probes
Readiness gates traffic, liveness restarts, startup protects slow boots. Get them confused and you either drop requests or restart-loop a healthy app.
October 24, 2026Node Pressure and Pod Evictions
When a node runs low on memory or disk, the kubelet starts evicting pods. Which ones, in what order, and how to stop it happening to the wrong ones.
October 24, 2026Kubernetes RBAC: Roles and Bindings
Four objects, one rule: a Role says what, a Binding says who. Here's how they combine and how to debug a 403 in one command.
October 24, 2026ConfigMaps and Secrets Done Right
ConfigMaps and Secrets are almost the same object. The differences that matter: how you consume them, and that a Secret is not encrypted unless you make it so.
October 24, 2026Kubernetes Services and Endpoints
A Service is a stable virtual IP plus a load-balancing rule. Endpoints are the pods behind it. When traffic doesn't flow, one of those two is wrong.
October 24, 2026Container Networking: bridge, host, none, and Custom Networks
The four network modes, why you should almost always use a user-defined bridge, and what -p actually does to your firewall.
October 24, 2026Persistent Volumes and Claims, Explained
PVC is a request, PV is the fulfilled storage, StorageClass is the factory. Most 'Pending PVC' problems are an access-mode or provisioner mismatch.
October 24, 2026