#Kubernetes

Debug Distroless and Scratch Containers Live with kubectl debug

Attach a full-featured ephemeral debug container to a running minimal Kubernetes pod, share its process namespace, and inspect live processes and the filesystem without touching the image or restarting anything.

Tutorial · 3d ago0

GitOps on Kubernetes with ArgoCD: Declarative Deploys, Auto-Sync, and One-Click Rollbacks

Run ArgoCD on Kubernetes, manage multi-environment deployments with ApplicationSet, automate drift detection, and handle rollbacks correctly for controller-managed applications.

Tutorial · 4d ago0

Minimus Goes Free to Commoditize Hardened Container Images

By removing the registration wall, Minimus challenges Chainguard and shifts the container security focus from scanning to stripping bloat.

Article · 6d ago2

Detect and Alert on Suspicious Container Behavior at Runtime with Falco

Deploy Falco on Kubernetes via Helm, write custom rules for real attack patterns, and route live alerts to Slack through Falco Sidekick.

Tutorial · 6d ago0

AKS Goes Bare Metal to Capture the AI Workload

Microsoft strips the hypervisor and expands fleet management to turn Kubernetes into the default runtime for distributed AI.

Article · 1w ago1

Why DNS Breaks Inside Kubernetes on AWS

How ndots defaults, NodeLocal DNS, and EC2's hard packet limits conspire to break your cluster's name resolution.

Article · 1w ago0

Docker Compose vs Kubernetes: What Do You Actually Need?

A pragmatic guide to choosing the right container orchestration tool without drowning in unnecessary operational complexity.

Article · 2w ago0

Zero-Downtime Deploys for a Production Web App

Ship new versions of a Kubernetes web app with zero dropped requests using correct health probes, rolling and blue-green strategies, and backward-compatible expand/contract database migrations.

Tutorial · 3w ago0

nixidy: Ditch the 600-Line Helm Values File, Use Nix Instead

nixidy replaces Helm overrides, Kustomize overlays, and raw YAML with typed Nix expressions — turning Kubernetes manifest authoring into something closer to configuring a NixOS system.

Tutorial · 3w ago0

Trivy: One Scanner to Rule Your Containers, Repos, and Kubernetes Configs

Instead of stitching together five different security tools, Trivy handles CVEs, misconfigs, secrets, and SBOM generation across every target in your pipeline — from a single CLI.

Article · 3w ago0