Conceptual, architectural explainers — how a subsystem actually works underneath.
How Artifact Registry manages container images and language packages with explicit locations, repository-level access, vulnerability analysis, and cleanup policies.
How Cloud Run turns containers into managed services and jobs, including scaling, traffic splitting, IAM, networking, observability, and cold-start tradeoffs.
How GKE divides control between Google and the customer across Autopilot and Standard modes, including scaling, identity, networking, upgrades, security, and cost.
A deep guide to Helm charts and releases, value precedence, dependencies, lifecycle operations, GitOps, secrets, validation, and Helm 4 compatibility.
How Karpenter provisions right-sized Kubernetes nodes for pending pods and safely manages Spot, expiration, consolidation, IAM, and production disruption on EKS.
How KEDA turns queue and event metrics into pod or Job scaling, with authentication, timing controls, observability, backpressure, and production safeguards.
How GatewayClass, Gateway, and typed Route resources improve multi-team traffic management beyond a single overloaded Ingress object.
How to design Collector pipelines for metrics, logs, and traces without creating an unbounded queue, telemetry leak, or new single point of failure.
A complete operational model for tfstate files: what they contain, how remote backends coordinate teams, and how to migrate or recover state without corrupting it.
A source-grounded tour of Haiku's app_server, from window and view mirroring to clipping, buffered drawing, drivers, and diagnosis.