Systems knowledge you can put to work.
Practical guides for Kubernetes, Linux, networking, observability, automation, and production infrastructure. Written for engineers operating real systems.
Start here
- Kubernetes Cluster operations, workloads, policy, and day-two troubleshooting.
- Rancher & RKE2 Install, upgrade, and run Rancher-managed RKE2 clusters.
- Linux & Systems Administration, kernel behavior, and the host layer under your workloads.
- Networking Load balancing, DNS, segmentation, and tracing packets end to end.
- Storage & Databases Persistent volumes, replication, backup, and recovery that holds up.
- Observability & SRE Metrics, logs, alerting, and reliability practice for production.
Reference designs
- Rancher on Small RKE2 Cluster Deploy Rancher on a highly available three-node RKE2 cluster on your own servers, with Traefik ingress, …
- Provisioning an RKE2 Cluster on Custom VMs Create a Rancher-managed RKE2 custom cluster on VMs or servers you provision yourself, using the node …
- Ingress NGINX Controller on RKE2: Retirement and the Traefik Default How ingress works on RKE2 now that Ingress NGINX is retired: Traefik is the default from v1.36, how to …
Latest writing
Demystifying Kubelet Configuration: The New /flagz Endpoint in Kubernetes v1.33
6 min readIf you’ve ever spent hours trying to figure out why a Kubernetes node is behaving differently than expected, you know the frustration of digging through logs, SSH sessions, and …
Kubernetes v1.37 DRA: Extended Resources GA, Device Taints
6 min readKubernetes v1.37 (released 2026-08-26) is the release where Dynamic Resource Allocation (DRA) can replace a device plugin without touching existing workloads: a Pod that asks for …
Live Pod Resizing in Kubernetes: A Practical Guide to InPlacePodVerticalScaling
9 min readOne of Kubernetes’ longstanding limitations has been the inability to change a running pod’s resource allocations without completely restarting it. For stateless applications …
Go 1.27: Generic Methods, encoding/json/v2 and uuid
7 min readGo 1.27 shipped on 2026-08-19 (the current patch release is 1.27.3). It is the release where methods can finally have their own type parameters, encoding/json moves onto the v2 …
Reddit Kubernetes Cluster Upgrade Failure: When Updates Take Down Production
19 min readOn March 14, 2023, Reddit experienced a multi-hour production outage affecting their entire platform during what should have been a routine Kubernetes cluster upgrade. The incident …
docker system prune -a --volumes: What It Deletes and How to Run It Safely
10 min readdocker system prune -a --volumes is the biggest single cleanup command in the Docker CLI, and it is also the one most often run without knowing what it will take. This guide covers …
Plex Media Server CVE-2026-96656 (CISA KEV): Check, Investigate and Patch
14 min readOn 2026-10-20, CISA added four Plex Media Server vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2026-96656, CVE-2026-96654, CVE-2026-96655 and …
Setting Up the Linode (Akamai) Cloud Provider for RKE2
7 min readIntroduction RKE2 runs fine on plain Linode instances, but without a cloud provider the cluster knows nothing about the platform underneath it. Service type=LoadBalancer stays …