Writing
Engineering notes
Things I've learned while breaking, fixing and operating infrastructure.
It Worked Yesterday. Kubernetes Rejected It Today.
A workload that had been deploying fine for weeks suddenly got rejected at admission. The trail led from a namespace policy change straight into Pod Security Admission, restricted, and seccomp.
Why HTTP Requests Were Hanging in Kubernetes
Some requests started hanging with no error, no crash, and nothing useful in the logs. Chasing it down led through TCP, encapsulation, and eventually MTU.
The hidden cost of Kubernetes
Coming soonKubernetes isn't expensive by itself. The things around it are.
What I learned running infrastructure at scale
Coming soonA collection of lessons that only become obvious after something breaks in production.