1 min read
Azure Container Apps vs Azure Kubernetes Service: When to Use Each
Choose Container Apps when: You want managed infrastructure Your team lacks Kubernetes expertise You have event driven or HTTP workloads You need rapid time…
Kubernetes
57 articles
1 min read
Kubernetes Cost Optimization on AKS: Lessons from 2025
Kubernetes cost optimization is continuous. Review these metrics weekly and adjust based on actual usage patterns.
1 min read
Azure Container Apps: Serverless Deployment for AI Workloads
AI applications often have variable load patterns with periods of high demand followed by quiet periods. Container Apps scales to zero during idle times…
1 min read
Azure Machine Learning Managed Endpoints: Advanced Deployment Patterns
Configure autoscaling rules that balance responsiveness with cost for production deployments while maintaining service level objectives.
1 min read
Kubernetes Ai: Building Modern AI Systems
Understanding kubernetes ai is essential for production AI systems. Here's what you need to know.
1 min read
Azure Container Apps Updates: Serverless Containers at Scale
Container Apps provides a powerful, serverless container platform. Tomorrow, I will cover Jobs in Container Apps in more detail.
1 min read
Containerization and Kubernetes: Lessons Learned in 2022
Containerization and Kubernetes: Lessons Learned in 2022
1 min read
Cloud Native Maturity: Where Organizations Stand in 2022
Lift and shift migrations VMs in the cloud Traditional architectures Using managed services Basic automation Some containerization Microservices…
1 min read
Azure Container Apps for Production Workloads
Container Apps sits between App Service and AKS: Simpler than AKS : No cluster management, no node pools More flexible than App Service : Any container, any…
1 min read
Azure Arc-Enabled SQL Managed Instance
Azure Arc-enabled SQL Managed Instance delivers enterprise SQL Server capabilities with cloud-native operations on any infrastructure.
1 min read
Azure Arc-Enabled PostgreSQL Hyperscale
Azure Arc-enabled PostgreSQL Hyperscale brings the best of Azure's managed database services to wherever your data needs to live.
1 min read
Dapr vs Service Mesh: Choosing the Right Approach
Aspect Dapr Service Mesh Focus Application building blocks Network infrastructure mTLS Via mesh integration Native State Management Built in Not provided…
1 min read
Open Service Mesh: Azure's SMI-Compatible Mesh
Open Service Mesh: Azure's SMI-Compatible Mesh
1 min read
Linkerd: Lightweight Service Mesh for Kubernetes
Linkerd offers simplicity and low overhead, ideal for teams wanting service mesh benefits without complexity.
1 min read
Istio on AKS: Complete Service Mesh Implementation
Istio on AKS: Complete Service Mesh Implementation
1 min read
Service Mesh Comparison: Istio vs Linkerd vs Open Service Mesh
Feature Istio Linkerd OSM mTLS Yes Yes Yes Traffic Management Advanced Basic Moderate Observability Extensive Good Good Resource Usage High Low Moderate…
1 min read
eBPF in Kubernetes: The Technology Behind Modern Networking
eBPF programs run in a sandboxed virtual machine within the Linux kernel, processing events without kernel modifications.
1 min read
Cilium Preview on AKS: eBPF-Based Networking
eBPF (Extended Berkeley Packet Filter) allows running sandboxed programs in the Linux kernel without changing kernel source code, enabling efficient…
1 min read
Calico on AKS: Advanced Network Policies
Calico provides enterprise grade network security for AKS with features beyond standard Kubernetes Network Policies.
1 min read
Kubernetes Network Policies: Securing Pod Communication
Network Policies provide essential microsegmentation for Kubernetes clusters. Enable a CNI that supports policies (like Azure CNI or Calico) to enforce them.
1 min read
Pod Security Admission: Replacing Pod Security Policies
Three built in levels: Privileged : Unrestricted (equivalent to no PSP) Baseline : Prevents known privilege escalations Restricted : Heavily restricted,…
1 min read
Seccomp by Default: Kubernetes Container Security
Seccomp (Secure Computing Mode) limits which system calls a process can make, reducing the attack surface.
1 min read
Ephemeral Containers: Debugging Kubernetes Pods
Inside the debug container: Ephemeral containers enable live debugging of production pods without disruption, making troubleshooting faster and safer.
1 min read
containerd Runtime: Understanding the Container Engine
containerd provides core container functionality: image management, container execution, and storage through a modular design with plugins.
1 min read
Dockershim Removal: Migrating to containerd on AKS
Dockershim was a Kubernetes component that translated Docker API calls to the Container Runtime Interface (CRI). With its removal, containerd communicates…
1 min read
Kubernetes 1.24 Features: Deep Dive into New Capabilities
Handle node failures gracefully: Configure node shutdown behavior: Control traffic routing for services: Track batch job progress: Stricter API validation:…
1 min read
Azure Kubernetes Service 1.24: New Features and Breaking Changes
Dockershim removal Seccomp by default Pod security admission Ephemeral containers GA Storage capacity tracking With Dockershim removed, containerd is now…
1 min read
Azure Container Apps GA: Serverless Containers Made Simple
Unlike AKS where you manage the cluster, Container Apps abstracts away the infrastructure. You focus on your containers while Azure handles scaling, load…
1 min read
Prometheus Remote Write to Azure Monitor: Unified Metrics
Prometheus remote write to Azure Monitor provides a powerful, unified metrics platform for cloud-native applications.
7 min read
AKS Cost Review: Fix Requests First, Then Nodes, Then Billing
A practical order for cutting AKS spend in early 2022: right-size pod requests, tune the cluster autoscaler, then use spot, stop/start and reservations.
8 min read
A New AKS Cluster Baseline for 2022: What Changed in Late 2021
The AKS features that reached GA in 2021 and change how I'd build a new cluster in January 2022: Azure RBAC, no local accounts, auto-upgrade and Key Vault CSI.
1 min read
GitOps Practices: Declarative Infrastructure and Application Delivery
1. Declarative : Desired state is expressed declaratively 2. Versioned and Immutable : Git stores the canonical desired state 3. Pulled Automatically :…
1 min read
Kubernetes Adoption in the Enterprise: Lessons from 2021
Most enterprises settled on managed Kubernetes. Azure Kubernetes Service (AKS) became the default choice for Azure shops: Flux and ArgoCD emerged as the…
1 min read
Azure Container Apps Preview: Serverless Containers Made Simple
Azure Container Apps provides a sweet spot between serverless functions and full Kubernetes - the power of containers without the operational complexity of…
1 min read
Azure Arc-Enabled Data Services: Run Azure Data Anywhere
Arc-enabled data services bring cloud-native database capabilities to any environment. Whether you need SQL Server or PostgreSQL, you can run managed…
1 min read
Azure Arc-Enabled Kubernetes: Manage Kubernetes Clusters Anywhere
Arc enabled Kubernetes provides: Inventory and grouping : Organize clusters in Azure Resource Manager GitOps configurations : Deploy applications using Git…
2 min read
Deep Dive into Azure Monitor for Containers
Azure Monitor for Containers (the Container Insights feature) is the native Azure observability solution for AKS that doesn't require running your own…
2 min read
Building Effective Grafana Dashboards for AKS
Grafana is the visualisation layer that makes Prometheus metrics interpretable at a glance—and for AKS, the starting point is the community dashboards that…
2 min read
Prometheus Metrics Collection in AKS
Prometheus became the observability standard for Kubernetes because its data model—time-series metrics with labels—maps naturally to the dynamic…
2 min read
Comprehensive AKS Monitoring with Container Insights
Container Insights is the Azure Monitor feature that closes the observability gap for AKS clusters—without it, you have Kubernetes metrics available in the…
2 min read
Azure AD Workload Identity for AKS: The Future of Pod Identity
Azure AD Workload Identity is the architecture-level improvement over AAD Pod Identity that removes the NMI DaemonSet and uses Kubernetes native service…
1 min read
Secure Azure Access with AKS Pod Identity
AAD Pod Identity was the original mechanism for giving Kubernetes pods an Azure AD identity so they could access Azure resources—Key Vault secrets, Storage…
2 min read
Serverless Kubernetes with AKS Virtual Nodes
Virtual nodes in AKS enable pods to run on Azure Container Instances rather than on VM-based node pool nodes—useful for burst workloads that spike…
2 min read
Cost Optimization with AKS Spot Node Pools
AKS Spot node pools are the cost reduction lever that can cut compute spend by up to 90%—at the cost of accepting that Azure may evict spot nodes with a…
2 min read
Designing AKS Node Pools for Production Workloads
Node pools are the AKS mechanism for running heterogeneous workloads on a single cluster—different VM SKUs, OS types, and node configurations within the…
2 min read
Azure Kubernetes Service Upgrades: A Practical Guide
AKS cluster upgrades are the operational task that feels straightforward until you do them in production and discover the nuances—node cordoning order, pod…
1 min read
Helm Charts for Azure Kubernetes Service
Helm charts provide a powerful way to package and deploy applications to AKS with Azure specific integrations. By leveraging values files for environment…
1 min read
Container Monitoring on Azure: AKS Insights and Beyond
Container Insights is the built in monitoring solution for AKS: This deploys: OMS agent as DaemonSet Metrics collection Log forwarding to Log Analytics…
1 min read
Prometheus with Azure Monitor: Unified Observability
Azure Monitor for Prometheus addresses these while maintaining compatibility.
1 min read
Running Windows Containers on Azure Kubernetes Service
Many enterprises have legacy .NET Framework applications that cannot easily migrate to .NET Core. Windows containers provide a path to containerization…
1 min read
Azure Kubernetes Service Networking Deep Dive
AKS networking is the part of Kubernetes that looks like a detail until it becomes a blocker. "I can't reach the on-prem database from the cluster" is a…
2 min read
Extending Azure Management with Azure Arc
Azure Arc is the product I've recommended most in 2021 that clients are slowest to adopt. Not because they don't need it—they do—but because "manage your…
8 min read
Azure Arc for Kubernetes: One GitOps Baseline Across Every Cloud
How to use the Azure Arc enabled Kubernetes preview, Flux GitOps and Azure Policy to give EKS, GKE and on-prem clusters one governed baseline.
7 min read
AKS, ACI or App Service? Choosing an Azure Container Platform
How I decide between AKS, Azure Container Instances and App Service for containers in early 2021, and why AKS is often the wrong first choice.
1 min read
Azure Kubernetes Service: Managed Kubernetes
Azure Kubernetes Service: Managed Kubernetes
8 min read
Rolling, Blue-Green and Canary Deployments on AKS
How to choose between rolling updates, blue-green and canary releases on AKS, what each one actually guarantees, and when the extra machinery pays off.