Recent posts tagged kubernetes

Context and Problem An AWS EKS Cluster was attacked, and its secrets were compromised. The Kubernetes Secrets were not encrypted, anyone who works with Kubernetes know they are only base64-encoded by defaulthttps://kubernetes.io/docs/concepts/confi...

title: "You patched PHP. The old image is still in your cluster's future." published: false description: "PHP2Shell CVE-2026-109618, CVE-2026-109619 as seen from a Kubernetes cluster: how fast the scanners caught up, where they stay blind, and why r...

title: "SOC 2, CRA, NIS2: they all ask your cluster the same five questions" published: true description: "A working engineer's read of SOC 2 and the EU instruments that landed alongside it, and why the hard part is not the controls but the evidence...

🛡️ Kubernetes Security Is Three Problems, Not One: Admission, Identity, Runtime > TL;DR > - Most Kubernetes compromises start inside the perimeter, where the firewall verifies nothing. > - Treat security as three independent problems: admission wha...

> A beginner-friendly Kubernetes networking story about Gateway API, Services, HTTPRoutes, DNS, a few misleading errors, and the joy of finally seeing a successful response. The mission The goal of this exercise was simple to say and slightly less ...

Traditional Kubernetes observability usually relies on sidecar proxies or application-level tracing, both of which introduce CPU and memory overhead. eBPF avoids this by running sandboxed C programs directly inside the Linux kernel, enabling zero-ins...

🌉 The GitOps Bridge: Keep Terraform and ArgoCD Out of Each Other's Way > TL;DR > - Infrastructure Terraform and applications ArgoCD/Flux have different change frequencies, approval flows, and blast radii. Coupling them is the root problem. > - The ...

🚦 Your Readiness Probe Is Lying to You > TL;DR > - KEDA's Metrics Server reported Ready even when its gRPC connection to the keda-operator was down. > - In that state the HPA silently stops receiving scale signals, while the replica still looks hea...

A field survey of the Kubernetes + LLM inference stack in 2026 — the problems that now have serious players, and the edges that are still genuinely underserved. If you run large language models on Kubernetes, you've probably noticed the ground shift...

Most Go tutorials stop at go run main.go. Real production starts after that. I had a working Go Jobs Tracker with Prometheus metrics, but it only ran on my laptop. If I close the lid, production dies. That is not production. This is how I took it f...

> 💡 HariKube, in one sentence:;HariKube is a petabyte-scale, versioned state machine with Kubernetes and Kafka interfaces.For technical deep-dive, please follow the link: →https://harikube.info/blog/kubernetes-is-harikubes-query-language-control-prot...

How does a Kubernetes cluster actually work? I’ve been learning Kubernetes and realized that it’s easy to memorize terms like Control Plane, Worker Node, API Server, Scheduler, and kubelet without really understanding how they fit together. So I p...

Recently, I interviewed for a Staff Site Reliability Engineer SRE role, where I encountered some interesting system design challenges around building a scalable, highly available, cloud-native application. The discussion reinforced an important less...

In the past, many people asked me what problem we solve, what we want to achieve, where HariKubehttps://harikube.info/ is heading, or why it is better than X. These conversations almost always drifted toward Kubernetes hyperscaling, application moder...

How to Set Up SafeLine WAF on Kubernetes If your apps already run on Kubernetes, SafeLine fits right in — it's a containerized reverse-proxy WAF, so you deploy it like any other workload and route protected traffic through it. Where SafeLine sits ...

A new video is out! I’m explaining Kubernetes networking in my little way, especially how Pods, Services, and DNS work together. If you’re learning Kubernetes and networking has been confusing, this one is for you. How Kubernetes Networking Works ...

A pod dying and a system recovering are not the same thing. That gap is where most of the interesting failures actually live, and it's what pushed me to build fault-sentinelhttps://github.com/aashiruu/fault-sentinel, a lightweight, Kubernetes-native ...

Kubernetes can feel confusing when you first start learning it. Pods. Nodes. Services. Deployments. Scaling. There are so many new terms that it is easy to focus on memorizing definitions instead of understanding how everything connects. I recentl...

Building production-grade microservices has meant wrestling with legacy anti-patterns, dealing with tightly coupled databases, managing complex service meshes, and burning 20 to 40 percent of our development cycles purely on repetitive infrastructure...