Secure Kubernetes Dashboard with Cloudflare Zero Trust Tunnel
A practical checklist for locking down Kubernetes Dashboard with Cloudflare Tunnel and Zero Trust — no VPN, no open NodePorts.
PostgreSQL Logical Replication Across Kubernetes StatefulSets
A deep dive into PostgreSQL logical replication on Kubernetes StatefulSets — the wire mechanics, common misconfigurations, and production-safe wiring.
Kubernetes Pod Security Standards: Safe Rollout Without Breaking Workloads
Pod Security Standards replace the deprecated PodSecurityPolicy with a built-in admission controller that enforces three policy levels across namespaces. This tutorial walks through auditing existing workloads, remediating violations, and promoting namespaces to enforcement without disrupting running services.
Kubernetes NetworkPolicy: Namespace Isolation with Deny-All Baseline and Explicit Allow Rules
Kubernetes NetworkPolicy namespace isolation gives you precise control over which pods and namespaces can communicate — but only if you apply it correctly. This tutorial walks through building a layered isolation model: a deny-all baseline first, then surgical allow rules for DNS, intra-namespace traffic, and cross-namespace service access.
Argo CD Progressive Delivery: Canary Releases with Automated Health Gates
Progressive delivery with Argo CD and Argo Rollouts gives platform teams fine-grained control over canary promotions, replacing manual intervention with metric-driven health gates. This tutorial walks through defining a Rollout resource, wiring AnalysisTemplates to Prometheus, and operating a full canary cycle from image push to stable promotion.
Helm Release Rollback Strategy with Safe Values Promotion Across Environments
A structured walkthrough of building a Helm rollback workflow that validates values files before promoting across environments, preventing broken releases from ever reaching production. Covers schema validation, helm-diff previews, atomic upgrades, and CI/CD-integrated health-gated rollback.
Kubernetes HPA and VPA Rightsizing for Production Autoscaling
Horizontal and vertical autoscaling in Kubernetes serve different purposes, and running them together without a clear ownership model leads to resource contention and unpredictable pod behavior. This walkthrough establishes a production-grade HPA and VPA configuration where each controller owns a distinct resource dimension.
Postgres Database Backups on Kubernetes Using a Scheduled CronJob
Manual Postgres backups don't belong in a production Kubernetes environment — pods are ephemeral, PVCs can disappear, and human schedules are unreliable. This tutorial walks through a CronJob-based backup strategy that runs pg_dump on a schedule, ships compressed dumps to S3, and handles retention automatically.
Kubernetes Deployment Service and Ingress wiring in one manifest
A working example of Deployment, Service, and Ingress resources wired together in a single file, with the 503 that breaks it when names don't match.
Argo CD GitOps Sync and Rollback on Kubernetes
Deploy a sample application through Argo CD, configure automated sync policies that enforce Git as the single source of truth, and execute a tracked rollback when a bad revision reaches your cluster.
☕ Support us · 💳 Monobank