Kubernetes
Articles tagged Kubernetes — notes and deep-dives grouped under this topic.
-
Helm versus Kustomize in 2026: who renders, and where the chart comes from
Helm vs Kustomize in 2026: under Argo CD half the usual arguments do not apply — there are no Helm releases there, and the real line between the engines runs through who can show the registry a credential.
-
Kubernetes multi-tenancy: namespace, vCluster or a separate cluster
The three models are usually laid out on one scale — cheap and weak on the left, expensive and solid on the right. The scale breaks in two places, and the decision rests on three independent questions.
-
Istio Ambient Mesh: sidecarless and the end of the double hop
Ambient took Envoy out of every pod. Where that removes the double hop and the overhead — and where the sidecar is still justified.
-
Cilium and eBPF: replacing kube-proxy and removing iptables from Kubernetes networking
Everyone sees eBPF as a speedup, but the real value is a decision rule: where replacing kube-proxy pays off, and where iptables still wins.
-
Ingress NGINX reaches EOL: migrating to Gateway API without panic
Why the end of kubernetes/ingress-nginx is about risk, not roadmap, and how to move to Gateway API in stages.
-
OOMKilled forensics: from pmap to cgroups memory.stat
Exit code 137 leaves no stack trace and no final log line, while the dashboard swears there was plenty of memory. The tools that answer «where did the memory go» — while the pod is still alive.
-
Three levers against Kubernetes overspend: idle, scale-to-zero, right-sizing
The average cluster runs at 20–30% utilization. You pay for the rest. Three levers that recover the money without rewriting your architecture.
-
Kubernetes 1.36 (Haru): What Actually Changes in Production
Mutating webhooks have started dying, Ingress NGINX is retired, HPA scale-to-zero is still alpha. A pragmatic 1.36 triage for the platform team — without the blogosphere hype.
-
A Kubernetes Debugging Agent: Query Templates or Scripts?
Zinchenko hands the LLM MetricsQL templates; my VM skill feeds the agent a finished aggregate. I dissect the flexibility-versus-reproducibility axis and why read-only by blacklist is weaker than an allowlist.