Containers, orchestration, cloud infrastructure, and the practices that keep production reliable.
A recovery-first etcd procedure covering consistent snapshots, encryption keys, revision bumps, restore topology, and proof that Kubernetes reconciles.
A precise guide to Guaranteed, Burstable, and BestEffort Pods, including request math, cgroup enforcement, OOM behavior, and node-pressure eviction.
How Kubernetes impersonation headers and RBAC verbs support least-privilege authorization tests while preserving identity, scope, and audit evidence.
How Server-Side Apply records field ownership, detects conflicting intent, supports shared objects, and differs from replacement and merge patch workflows.
How tail sampling buffers complete traces, evaluates outcome-aware policies, controls memory, and preserves representative telemetry during failures.
How to operate Amazon ECR as a controlled OCI artifact supply point with least-privilege access, immutable identity, scanning, retention, and recovery.
A practical model of ECS task definitions, services, capacity providers, networking, IAM, deployments, and the responsibilities AWS does not remove.
What AWS manages in EKS, what remains in your account, and how node choices, VPC networking, identity, observability, availability, and cost interact.
How App Runner builds, deploys, scales, secures, and observes HTTP services-and where its simplified platform stops being the right abstraction.
What Fargate manages, how task-level isolation and resource sizing work, and when its operational simplicity outweighs reduced host control.