Blog
Articles, videos, and write-ups on Cloud, DevOps, and Kubernetes.
✦ ARTICLEThe Control Plane Is Four Files
I'd never once looked inside /etc/kubernetes before this weekend. Here's what happened when I finally built a kubeadm cluster from scratch — static pods, mirror pods, etcd internals, and the two times I destroyed my own cluster.
✦ ARTICLEEvery CI Job Gets Its Own Kernel: GitHub Actions Runners on AWS Lambda MicroVMs
Building single-use, Firecracker-isolated GitHub Actions runners on the new Lambda MicroVMs primitive — architecture, full repro, and the snapshot-identity problem nobody talks about.
✦ ARTICLEInstalling the ADOT Collector on EKS: Every Trap I Hit, and How I Got Out
A start-to-finish walkthrough of installing the AWS Distro for OpenTelemetry addon on EKS — cert-manager prereqs, the v1beta1 config gotcha, pod-density scheduling failures, and verifying traces actually land in X-Ray.
✦ ARTICLEThe conntrack DNS Race Condition in Kubernetes
Why your pods get random 5-second DNS timeouts — a deep dive into the Linux conntrack table, the A vs AAAA query race through iptables SNAT, how to confirm it with conntrack -S, and four remediation paths including NodeLocal DNSCache.
Networking // Field Manual
Networking // Field Manual
Five modules, one mantra. Move from packets on a wire to VPCs in the cloud, with a debugging arsenal in between. An interactive, offline-ready reference built for DevOps and cloud engineers.
What Actually Happens When Internet Traffic Reaches Your EKS Pod
What Actually Happens When Internet Traffic Reaches Your EKS Pod
From Ingress YAML to a packet landing on your container — a full walkthrough of the AWS Load Balancer Controller, TargetGroupBinding, EndpointSlices, and the ready vs serving conditions that make rolling updates graceful.
How IRSA Really Works on EKS — and the One-Character Bug That Can Break It
How IRSA Really Works on EKS — and the One-Character Bug That Can Break It
A deep dive into IAM Roles for Service Accounts on Amazon EKS — how the JWT-to-IAM-credentials exchange actually works, what STS checks under the hood, and why a single stray character in your OIDC provider configuration can silently break everything.
What Actually Happens When You Run kubectl apply
What Actually Happens When You Run kubectl apply
A walkthrough of every component your YAML touches — from your terminal to the running container. AuthN, admission, etcd, controllers, scheduler, kubelet, CNI, and beyond.