10 most common mistakes using terraform
Common Terraform anti-patterns and how to fix them: remote state, secret management, version pinning, modules, documentation, and directory structure.
By Engineers. For Engineers.
Notes from the pipetail team on Kubernetes, AWS, Terraform and the tooling around them.
Improve visibility in Helm workflows with Werf!
How Werf adds real-time deployment tailing and live pod status to Helm workflows, replacing blind waits with actionable feedback.
How would I proceed with Kubernetes deployments?
Alternatives to Helm for Kubernetes deployments using Kustomize overlays for templating and Kapp for ordered apply with automatic garbage collection.
Helmfile basics: get your Helm flow organized
Getting started with Helmfile to orchestrate multiple Helm releases using label selectors, environment overrides, and SOPS-encrypted secrets.
10 most common mistakes using kubernetes
Common Kubernetes mistakes: missing resource limits, misconfigured probes, no ingress controller, wrong autoscaling, weak RBAC, missing anti-affinity and PDBs.
More EKS tips to make your life easier
Practical EKS tips: IAM Roles for Service Accounts instead of kube2iam, Cluster Autoscaler scale-from-zero with ASG tags, and spot instance priority expander.
Getting started with PodSecurityPolicy on EKS
How to implement PodSecurityPolicy on Amazon EKS with proper RBAC bindings and why you must delete the default eks.privileged policy first.
GitLab Runner on EKS
Step-by-step guide to running a self-hosted GitLab Runner on AWS EKS using Terraform and GitLab Kubernetes integration.
AWS Systems Manager Session Manager: bye bye bastion hosts!
Replace bastion hosts with AWS SSM Session Manager for SSH access to private EC2 instances using IAM-based access control and session logging.
Applications are not easy, tracing is: context propagation
How to propagate trace context across microservices with OpenTelemetry using W3C Traceparent headers in Go.
More complicated EKS scenarios: EKS managed worker nodes without internet access
Setting up EKS managed nodes in a fully private VPC with no internet using VPC PrivateLink endpoints for ECR, EC2, and S3.
Applications are not easy, tracing is: a brief introduction to OpenTelemetry
Introduction to distributed tracing with OpenTelemetry in Go, from basic stdout exporters to production-ready LightStep integration.
DAPR: introduction to Distributed Application Runtime
Building microservices with DAPR sidecars on Kubernetes: pub/sub messaging with NATS, state management, and service invocation in Go and Vue.