Top Cloud-Native & Kubernetes Certifications [2026 Guide]

Preflight is a VSCode extension that reviews your code changes and generates PR summaries using AI — all before your code leaves your machine.

What is an AI agent actually made of? A practical breakdown of agent anatomy — planning, reflection, tool use, memory, and multi-agent patterns — with diagrams and real examples.

This short post explains how to integrate Google Drive into your Next.js application. It covers setting up NextAuth.js, creating API routes for Google Drive access, and building a simple UI.

Learn how to streamline your deployment process using Fly.io, GitHub Actions, and Dagger. This guide walks you through setting up automatic deployments a simple todo app, from basic Fly.io CLI usage to creating efficient, reusable deployment pipelines with Dagger.

While developing microservices locally is possible, running and testing them in a production-like Kubernetes environment is complex. A typical development workflow while developing service in Kubernetes can significantly slow you down - from building a Docker image, pushing it, restarting the deployments, and testing the changes in a shared cluster. In this article, I'll look at a tool called Signadot. Signadot introduces a concept of sandboxes that allow you to considerably shorten your developer workflow and go from minutes to mere seconds!

CNCF announced a new certification targeting Istio. Istio Certified Associate is meant for engineers, CI/CD practitioners or anyone interested in Istio. We did a full week of streams on YouTube, going through the exam curriculum. This article contains notes, tips, and observations from the Istio Mesh Week live streams

Set up a global rate limiter in Istio using Envoy's rate limit service: deploy the service, configure descriptors for real-world scenarios, and monitor rate limits with Prometheus and Grafana.

I share a quick look into my history with Istio and how I've seen it evolve from an incubating project to a graduated one.

Hands-on Cilium network policy tutorial: write ingress and egress NetworkPolicies, add Layer 7 (HTTP-aware) rules with CiliumNetworkPolicy, and visualize allowed and denied flows with Hubble.

Deep dive into Kubernetes networking: how kube-proxy programs iptables rules, pod-to-pod and pod-to-service traffic, the role of CNI and kubelet, and iptables vs. IPVS mode — with hands-on examples you can trace yourself.

Complete guide to Istio ServiceEntry: add external services to the mesh, choose between DNS, STATIC, and NONE resolution, configure endpoints for static IPs, and fix 502 errors with REGISTRY_ONLY mode.

Yes, you can apply an Istio DestinationRule to all workloads in the mesh. Learn how DestinationRule scoping works (root namespace vs. workload namespace), how to set mesh-wide TLS and traffic policies, and the gotchas to avoid.