Flipping the dataplane took about forty seconds. Dealing with what it broke took three weeks. That ratio is the honest summary of an eBPF migration, and almost nothing written about eBPF networking tells you about it. The posts are about throughput graphs and iptables rule counts. The work is about conntrack, kernel versions, asymmetric returnContinue reading “Multi-Cluster Calico Enterprise on eBPF: Notes From the Deep End”
Tag Archives: Kubernetes
Policy as Governance: What OPA and Kyverno Actually Buy You at Audit Time
The question that matters is never “do you have policies.” It is closer to this: on 3 March, a workload ran in this cluster with a mutable image tag. Name the control that should have prevented it. Show me that the control was in effect on that date. Show me every exception that was openContinue reading “Policy as Governance: What OPA and Kyverno Actually Buy You at Audit Time”
Hosted Control Planes in Production: Rebuilding Ephemeral Kubernetes Environments with Kamaji
The ticket said the test platform was broken. It wasn’t. Every worker node across four environments had been reclaimed inside roughly ninety seconds, mid-test-run, because I had pinned one instance family in one availability zone and handed AWS exactly one capacity pool to take back. That is the kind of mistake you only make once,Continue reading “Hosted Control Planes in Production: Rebuilding Ephemeral Kubernetes Environments with Kamaji”
The End of an Era: Migrating from Ingress NGINX to Gateway API
A practical guide for platform engineers navigating the future of Kubernetes traffic management The Wake-Up Call If you’re reading this, you’ve probably already heard the news that sent ripples through the Kubernetes community: Ingress NGINX, the battle-tested controller that’s been routing traffic for countless production clusters since the early days of Kubernetes, is being retired.Continue reading “The End of an Era: Migrating from Ingress NGINX to Gateway API”
Mastering Karpenter Autoscaling in Rancher RKE2
Have you ever experienced the endless struggle of fitting workloads into your Kubernetes clusters, feeling like you’re stuck in a never-ending game of Tetris? It can be quite a challenge, especially when demand suddenly surges, and you find yourself in a frenzy trying to adjust. But fear not, as we’re about to take a voyageContinue reading “Mastering Karpenter Autoscaling in Rancher RKE2”
Decoupling Terraform and Ansible: A Deep Dive into Infrastructure Management
Why Decouple Terraform and Ansible? Decoupling Terraform and Ansible allows for a clear separation of concerns in infrastructure management: Terraform excels at provisioning and managing cloud resources (infrastructure as code). Ansible specializes in configuration management and application deployment. By decoupling these tools, we can: Improve modularity and maintainability of our infrastructure code Enable independent scalingContinue reading “Decoupling Terraform and Ansible: A Deep Dive into Infrastructure Management”
Service Mesh Evolution in Kubernetes: 2023 State of the Art
Introduction 2023 marked significant advancements in service mesh technologies, with Istio, Linkerd, and Cilium emerging as leading solutions. Let’s explore the latest developments and best practices in Kubernetes service mesh implementations. Istio’s Ambient Mesh Overview In 2023, Istio’s Ambient Mesh became production-ready, offering a sidecar-less architecture: Key Features Reduced resource overhead Simplified operations Better securityContinue reading “Service Mesh Evolution in Kubernetes: 2023 State of the Art”
Kubernetes GitOps with ArgoCD: A 2021 Deep Dive
Introduction 2021 saw GitOps emerge as a leading practice for Kubernetes deployments, with ArgoCD becoming the de facto tool for implementation. Let’s explore how to implement GitOps effectively using ArgoCD in Kubernetes. What is GitOps? GitOps is a declarative approach to Kubernetes cluster management and application delivery where: Git repository is the single source ofContinue reading “Kubernetes GitOps with ArgoCD: A 2021 Deep Dive”
