Topic
12 articles
Trivy scans images, Kyverno validates deployments, but what watches over what happens once the containers are running? Falco, the CNCF project, monitors syscalls in real time and alerts as soon as abnormal behavior is detected.
Migrating from Docker Swarm to Kubernetes doesn't happen over a weekend. Concept mapping, migration patterns, pitfalls to avoid and a concrete hands-on review of a production migration.
K3S isn't just a cluster for IoT. Here's how to use it as a local development environment that mirrors your production, without the €2,000 monthly cloud bills.
Setting up a complete monitoring stack on Kubernetes with kube-prometheus-stack: installation, Grafana dashboards, alerting rules, Alertmanager and production best practices.
Traefik v3 isn't just an IngressController. Middlewares, IngressRoute CRD, TCP/UDP routing, plugins, dashboard and observability: everything that makes Traefik a complete reverse proxy on Kubernetes.
GitOps is the standard for deploying to Kubernetes, and ArgoCD is its most popular implementation. A hands-on review: how it works, why it's different from a classic CI/CD pipeline, and how to structure your deployments.
Securing a production Kubernetes cluster isn't just a networking question. Vulnerability scanning, admission policies, least privilege: a hands-on review with Trivy and Kyverno.
AWS, GCP and Azure dominate the public cloud, but European providers have matured. A hands-on review of OVHcloud and Scaleway, a technical comparison, and the case for a more sovereign cloud.
I sat and passed the CKA (Certified Kubernetes Administrator) in March 2026. Here's how I prepared, what the exam really tests, and what I concretely took away from it.
nerdctl mirrors Docker's syntax exactly, but talks to containerd directly. A handy tool for debugging a Kubernetes cluster, working without a Docker daemon, or experimenting with features Docker doesn't offer yet.
transfer.sh is a widely used command-line file-sharing tool, but it had no official Helm chart. I filled that gap with an open source contribution and opened a PR on the upstream repository.
The Gateway API has been GA since Kubernetes 1.28. Here's why it advantageously replaces Ingress, how it works, and how to set it up with Traefik.