Field notes

Notes from production Kubernetes.

Upgrades, image CVEs, readiness gaps, and the places where they collide — written for the people who get paged. Reproducible commands, honest limits, no vendor fan fiction.

RSS feed →
3 August 2026·8 min read

What a Kubernetes PR check should say

A green CI check on a manifest change tells you the YAML parses. Rendering the diff against live cluster state — and failing on the five regressions that actually page you — is a different job.

kubernetes cicd devops sre
Read post →
3 August 2026·8 min read

RBAC your security team will approve

Every observability vendor wants cluster access. Four questions decide the review — and one of them, about secrets, has an answer that RBAC genuinely cannot express.

kubernetes security rbac sre
Read post →
3 August 2026·7 min read

Falling behind on Kubernetes costs 6×

EKS, GKE and AKS all charge $0.10 per cluster-hour on a supported version and $0.60 once you fall behind. Three pricing teams, one identical number — and it's the one that gets an upgrade funded.

kubernetes finops eks upgrades
Read post →
3 August 2026·9 min read

Upgrade blockers and CVEs hit the same workloads

Removed APIs and image vulnerabilities get tracked in two different backlogs, by two different people. They land on the same workloads far more often than that split implies — here's how to pull both lists and join them by workload.

kubernetes devops security sre
Read post →

See what's on your clusters

One read-only Helm install · first report in under an hour · secrets and images never leave your cluster.

Questions? hello@runtimez.io