Podo Stack

Podo Stack

Home
Notes
Archive
About
Issue #035 - HolmesGPT, Job retries, and the IfNotPresent hole from 2015
An incident agent that is read-only until someone says yes, one retry budget for a thousand shards, the tenancy tool that changes your namespace count…
 • Ilia Gusev
The rolling update myth: your frontend is talking to next week's backend
version skew, session stickiness, deployment pinning, Gateway API, skew protection
 • Ilia Gusev
The scheduler that starts 7 of your 8 GPU pods, then bills you for all 8
partial scheduling, gang scheduling, Kueue ClusterQueue/LocalQueue, topology-aware placement
 • Ilia Gusev
Issue #034 - Gonzo, CloudEvents, and the container that held while the policy didn't
A k9s-inspired log viewer, an event envelope that stops at the envelope, Kubernetes Dashboard's official pick for what comes next, and five sandbox…
 • Ilia Gusev
The Flux Kustomization that adopted a namespace it never should have touched
path scope, targetNamespace, prune: true, atomic paths, .fluxignore
 • Ilia Gusev
The 25% of your node that's gone before the first pod lands
kube-reserved, eviction thresholds, pause containers, DaemonSet overhead, hosted control plane fees
 • Ilia Gusev
Issue #033 - TOON, zot, and the RCE Kubernetes calls working as intended
A token format that beats JSON by half, a registry that ditched the database, the Probe CRD gap nobody's closed, and a WebSocket handshake that skips…
 • Ilia Gusev

August 2026

LowCardinality: the dictionary stops at 8192
The rule of thumb everyone repeats is downstream of one default setting, and crossing it produces no error - just a column that quietly goes back to…
 • Ilia Gusev
Knative and PDB: protects nothing, blocks drains forever
A PodDisruptionBudget on a Knative revision cannot stop the autoscaler removing your pod, and it can absolutely stop you draining the node it runs on
 • Ilia Gusev
Issue #032 - Keyless signing: nobody manages signing keys anymore
The key-custody problem is solved and what replaced it is a verification problem, which is harder to notice when you have got it wrong
 • Ilia Gusev
Topology-aware routing: 7 replicas work, 8 don't
The annotation refuses to act when the arithmetic looks risky, the newer trafficDistribution field has no such guard, and migrating between them quietly…
 • Ilia Gusev
Informer resync: the API call that never happens
Lowering resyncPeriod to get fresher data is advice built on a misreading, and the client-go source settles it in one line
 • Ilia Gusev
© 2026 Ilia · Privacy ∙ Terms ∙ Collection notice
Start your SubstackGet the app
Substack is the home for great culture