Practical notes on running, securing and tuning workloads on Kubernetes - covering RBAC, secrets, resource management and the gotchas we’ve hit along the way.
Istio Service Mesh in Practice: What It Gives You and Where It Bites
What a service mesh actually solves, the Istio features worth adopting first, and the production gotchas - from sidecar overhead to an egress gateway TLS trap.
Read article →Kubernetes Resource Limits and JVM Heap Size
How the JVM picks its maximum heap size inside a Kubernetes container, and a sensible way to align -Xmx with your resource requests and limits.
Read article →Kubernetes Service Accounts and Secrets - Mounting Secrets as Volumes
A hands-on look at how Service Account RBAC interacts with secrets mounted as volumes in Kubernetes - and why an RBAC restriction doesn't stop a volume mount.
Read article →