Containers and Kubernetes
Containers and Kubernetes are the core of most modern platforms we run. We build and operate clusters on EKS, AKS and GKE, harden them, upgrade them on a schedule and keep the cost of running them under control.
Each page here covers one tool: what it does, how we configure it for production, the failure modes we have learned to avoid, and honest guidance on when a simpler option, such as a managed container service, is the better answer.
Technologies in this category
Kubernetes
Kubernetes is an open-source system that schedules containers across a fleet of machines, restarts them when they fail and exposes them through stable networking. We design, harden and operate production clusters on EKS, AKS and GKE, covering access control, networking, autoscaling, upgrades and monitoring.
Amazon EKS
Amazon EKS is AWS's managed Kubernetes service: AWS runs the control plane, and you run nodes and workloads inside your own VPC. We design EKS clusters, wire them to IAM, VPC networking and Karpenter, control cost, and run the upgrade cycle so clusters stay supported and secure.
Azure AKS
Azure Kubernetes Service (AKS) is Microsoft's managed Kubernetes service: Azure runs the control plane and you manage node pools and workloads. We design AKS clusters around Microsoft Entra ID, workload identity, Azure networking and upgrade channels, then operate them with monitoring and cost control.
Google GKE
Google Kubernetes Engine (GKE) is Google Cloud's managed Kubernetes service, available in Autopilot mode, where Google manages nodes, and Standard mode, where you do. We choose the mode, design VPC-native networking and Workload Identity, set release channels, and operate GKE clusters with cost and security controls.
Docker
Docker packages an application and its dependencies into an immutable image that runs the same on a laptop, in CI and in production. We help teams write lean, non-root, scanned and signed images, speed up builds, run a private registry and move from Compose to Kubernetes or a managed container service.
Helm
Helm is the package manager for Kubernetes. A chart bundles templated manifests and default values so an application installs, upgrades and rolls back as one versioned release. We write and review charts, set up private chart repositories, and deliver releases through GitOps with sensible values, testing and upgrade safety.
Karpenter
Karpenter is an open-source Kubernetes node autoscaler that launches right-sized instances directly for pending pods and consolidates underused nodes. It is most mature on AWS and EKS. We configure NodePools, Spot strategy, disruption budgets and interruption handling so it saves money without hurting availability.
Istio
Istio is an open-source service mesh that adds mutual TLS, traffic management and telemetry between services without changing application code. It does this through sidecar proxies or, in ambient mode, shared node proxies. We help teams decide whether a mesh is justified, then install, secure and operate it safely.