Kubernetes

Kubectx and kubens are lightweight CLI tools that simplify switching between Kubernetes clusters and namespaces. This guide covers installation and basic usage for both tools.

Kubernetes Secrets use base64 encoding rather than true encryption, so their safety depends on surrounding practices like encryption at rest and access controls. This post covers best practices, built-in protections, and alternatives like Helm Secrets or HashiCorp Vault.

A practical checklist covering X.509 certificate requirements for Kubernetes nodes, users, and the API server. Includes deployment methods, cert-manager workflows, and Extended Key Usage configuration.

A practical guide to Kubernetes Network Policies, covering how Ingress and Egress rules work, AND/OR logic in rule layout, and the behavior of policyTypes.

A practical guide to backing up and restoring the etcd key-value database in a Kubernetes cluster. Covers snapshot-based and file-based backup methods, integrity checks, and static pod manifest updates.

A step-by-step guide to upgrading a Kubernetes cluster using kubeadm, covering control plane and worker node upgrades. Includes the full sequence from version planning through final verification.