~/writingtap a topic to filter
Notes on Kubernetes, AWS and backend, mostly things I keep seeing break.
24 posts · updated Nov 4, 2026
LATESTKubernetesNov 4, 2026 · 4 min read
Stop Ignoring EKS Version End-of-Life: Why Extended Support MattersDon't let your EKS cluster silently shift to Extended Support; learn how to track versioning and avoid surprise AWS pricing overhead.kuberneteseksRead post
October 20261 post
September 20261 post
August 20264 posts
Aug 26Stop Using 0.0.0.0/0 in Your Security GroupsOpen-to-the-world rules are a lazy security shortcut that leads to inevitable data exfiltration. Here is how to lock down your VPC traffic effectively.AWS8 min readAug 25Stop Allowing PostgreSQL Connections to BalloonUnbounded connection pools are a silent killer; here is how to use PgBouncer to prevent your database from buckling under a sudden spike in traffic.Backend9 min readAug 10Stop Over-Provisioning Your K8s Requests and LimitsIf you aren't measuring actual container utilization, you’re burning 40% of your cloud budget on idle CPU and RAM. Here is how to stop the waste.Kubernetes8 min readAug 6Stop Relying on Default EKS Node Termination HandlersIf you aren't gracefully handling Spot instance interruptions, your users are seeing 500s every time AWS reclaims capacity.Kubernetes8 min read
July 20265 posts
Jul 27Stop Using latest Tags in Your Docker ImagesUsing 'latest' is a production anti-pattern that hides deployment drift and makes rollbacks a guessing game. Use semantic versioning or commit hashes instead.Docker7 min readJul 17Stop Ignoring Kubernetes Liveness and Readiness ProbesIf your pods restart randomly or lose traffic during deployments, you don’t have an infrastructure problem—you have a probe problem.Kubernetes7 min readJul 14Stop Using Cluster-Admin for EverythingIf your service account can delete every pod in the cluster, you’re one compromised workload away from a cluster-wide incident.Kubernetes7 min readJul 9Stop Storing AWS Keys in GitHub SecretsUse OpenID Connect to let GitHub Actions assume an AWS IAM role and push to ECR — no long-lived access keys, ever.AWS9 min readJul 3Scoping Down an AWS IAM Wildcard PolicyA wildcard IAM policy isn't least privilege - it's a promise to get burned later. Here's how to scope permissions down with Access Analyzer and CloudTrail.AWS8 min read
June 20263 posts
Jun 17Container Security: Running as Non-RootWhy most containers run as root, why that's a security risk, and how to switch to a non-root user in your Dockerfile in about 5 minutes.Kubernetes8 min readJun 7Your Cache Is Making Things WorseHow a bad caching strategy creates more problems than it solves, and the questions worth asking before you reach for Redis or a CDN.Backend9 min readJun 2Vendor Lock-in: Speed vs. FlexibilityAsk this one question before choosing a managed cloud service-it might save you months of migration work later.AWS8 min read
May 20263 posts
May 26Stop Hardcoding AWS Keys.For EC2 workloads, attach an IAM role via an instance profile so your app obtains temporary credentials automatically. No hardcoded keys needed.DevOps7 min readMay 20I Panicked Over Nothing For An HourA debugging story from when I started with Kubernetes at my old job. I thought I'd broken everything. Turns out I was just looking in the wrong place.DevOps13 min readMay 17Communication Is a Skill Engineers NeedEngineers often fail not because they can't code, but because they can't explain what broke and why. Here's how to communicate better with stakeholders.Career8 min read
October 20251 post
February 20242 posts
Feb 12Docker Layers, Caching & Multi-Stage Builds ExplainedDocker Layer Caching: How Docker builds work, multi-stage builds, build optimization, and reducing image size with efficient layer management strategies.Docker15 min readFeb 5Dockerfile Labels: A Comprehensive GuideDockerfile Labels Guide: Metadata, versioning, maintainer info, and organizational best practices for Docker images and container orchestration.Docker10 min read
January 20243 posts
Jan 29Base Images: The Secret to Smaller Docker ImagesDocker Base Images Guide: Alpine, distroless, slim variants explained. Learn how choosing the right base image cuts container size by 50–80% or more.Docker12 min readJan 22Compressed vs. Uncompressed Docker ImagesDocker Image Optimization: Explore compressed vs uncompressed layers, size reduction strategies, and how Docker storage works to build efficient containers.Docker8 min readJan 15How to Create and Run a Docker ContainerLearn how to create a Docker container step by step: write a Dockerfile, build an image, and run and manage containers with the exact commands you need.Docker12 min read