https://sathpal.com/articles Sathpal: AI, Cloud & Observability Architect, Grafana Champion, CKAD, and community builder. Explore talks, thought leadership, community impact, and an AI profile assistant. en Thu, 18 Jun 2026 00:00:00 GMT https://sathpal.com/blog/aks-vs-eks-vs-gke https://sathpal.com/blog/aks-vs-eks-vs-gke Thu, 18 Jun 2026 00:00:00 GMT AKS Fundamentals The managed-Kubernetes comparison tables miss the point. The Kubernetes is the same everywhere. What differs is the cloud it's wired into, and that's the actual decision. https://sathpal.com/blog/first-three-aks-dashboards https://sathpal.com/blog/first-three-aks-dashboards Thu, 11 Jun 2026 00:00:00 GMT AKS Day-2 Ops You can drown a new AKS cluster in metrics on day one. Resist. Three dashboards answer the questions you'll actually have at 2 a.m. Start there, add the rest when you miss them. https://sathpal.com/articles/aks-node-pools-architecture https://sathpal.com/articles/aks-node-pools-architecture Tue, 09 Jun 2026 00:00:00 GMT AKS Scaling & Cost Most AKS clusters run every workload on one undifferentiated pool of VMs and call it simple. It isn't simple. It's expensive, fragile, and one bad neighbor away from an outage. Node pools are where workload intent becomes infrastructure. https://sathpal.com/blog/kustomize-over-helm-sometimes https://sathpal.com/blog/kustomize-over-helm-sometimes Thu, 28 May 2026 00:00:00 GMT AKS GitOps & CI/CD Helm became the default for everything, including jobs it's bad at. For your own cluster configuration, Kustomize is often the calmer choice, and knowing when is the whole skill. https://sathpal.com/articles/aks-tenancy-one-cluster-or-many https://sathpal.com/articles/aks-tenancy-one-cluster-or-many Tue, 19 May 2026 00:00:00 GMT AKS Fundamentals Consolidate into one cluster and you fight noisy neighbors and blast radius. Split into many and you drown in upgrade toil. The right answer isn't a number. It's an isolation boundary you can defend. https://sathpal.com/blog/flux-on-aks-in-20-minutes https://sathpal.com/blog/flux-on-aks-in-20-minutes Thu, 14 May 2026 00:00:00 GMT AKS GitOps & CI/CD GitOps sounds like a platform project. Getting your first Flux reconciliation running on AKS is closer to a coffee break, and it changes how you think about deploys immediately. https://sathpal.com/blog/pdb-five-lines-that-save-upgrades https://sathpal.com/blog/pdb-five-lines-that-save-upgrades Thu, 07 May 2026 00:00:00 GMT AKS Day-2 Ops Most AKS upgrade outages aren't upgrade bugs. They're a missing PodDisruptionBudget: five lines of YAML standing between a rolling node drain and all your replicas dying at once. https://sathpal.com/articles/gitops-on-aks-pull-not-push https://sathpal.com/articles/gitops-on-aks-pull-not-push Tue, 28 Apr 2026 00:00:00 GMT AKS GitOps & CI/CD CI pipelines that push kubectl into your cluster feel fast and quietly rot your reliability. GitOps inverts the arrow: the cluster pulls its own desired state, and 'what's deployed' stops being a mystery. https://sathpal.com/blog/aks-version-support-window https://sathpal.com/blog/aks-version-support-window Thu, 16 Apr 2026 00:00:00 GMT AKS Day-2 Ops Kubernetes versions age out on a schedule, and AKS only supports a rolling window. Fall off the back of it and you're running unsupported infrastructure under production, usually discovered at the worst moment. https://sathpal.com/articles/aks-upgrades-are-a-feature https://sathpal.com/articles/aks-upgrades-are-a-feature Tue, 07 Apr 2026 00:00:00 GMT AKS Day-2 Ops A cluster that can't be upgraded calmly isn't finished. It's a liability with a countdown. Treat upgradability as a design goal and the scariest part of running AKS becomes routine. https://sathpal.com/blog/autoscaler-wont-fix-bad-limits https://sathpal.com/blog/autoscaler-wont-fix-bad-limits Thu, 02 Apr 2026 00:00:00 GMT AKS Scaling & Cost Teams add the cluster autoscaler hoping it fixes capacity pain. It can't, because the autoscaler trusts your resource requests, and most resource requests are fiction. https://sathpal.com/blog/aks-spot-node-pools https://sathpal.com/blog/aks-spot-node-pools Thu, 26 Mar 2026 00:00:00 GMT AKS Scaling & Cost Spot nodes can cut a chunk of your AKS bill for the right workloads. The catch is in the word 'right': put the wrong thing there and you've architected a flaky outage. https://sathpal.com/articles/aks-cost-architecture https://sathpal.com/articles/aks-cost-architecture Tue, 17 Mar 2026 00:00:00 GMT AKS Scaling & Cost AKS makes it trivial to spend money and hard to see where it went. Cost on Kubernetes isn't a billing problem you fix later. It's an architecture property you design in, or pay for forever. https://sathpal.com/blog/aks-private-clusters-tradeoffs https://sathpal.com/blog/aks-private-clusters-tradeoffs Thu, 05 Mar 2026 00:00:00 GMT AKS Security A private cluster takes your API server off the public internet, a real security win that quietly breaks half your tooling. Go in knowing both halves. https://sathpal.com/articles/aks-workload-identity https://sathpal.com/articles/aks-workload-identity Tue, 24 Feb 2026 00:00:00 GMT AKS Security Every static credential in your cluster is a small bet that it never leaks. Workload Identity lets your AKS pods talk to Azure with no secret to leak at all, and the migration is more about discipline than difficulty. https://sathpal.com/blog/stop-using-aks-admin-kubeconfig https://sathpal.com/blog/stop-using-aks-admin-kubeconfig Thu, 19 Feb 2026 00:00:00 GMT AKS Security `az aks get-credentials --admin` is the handiest command in AKS and the one most likely to end up in an incident report. There's a better default, and switching costs nothing. https://sathpal.com/blog/aks-ingress-appgw-or-nginx https://sathpal.com/blog/aks-ingress-appgw-or-nginx Thu, 12 Feb 2026 00:00:00 GMT AKS Networking The AKS ingress debate isn't about which is better. It's about where you want your routing logic to live: in Azure, or in your cluster. https://sathpal.com/articles/azure-cni-vs-kubenet https://sathpal.com/articles/azure-cni-vs-kubenet Tue, 03 Feb 2026 00:00:00 GMT AKS Networking Most AKS networking choices are tunable later. The CNI is not. Pick wrong and you're rebuilding the cluster, so make this one with the next three years in view, not the next sprint. https://sathpal.com/blog/aks-pod-no-internet https://sathpal.com/blog/aks-pod-no-internet Thu, 22 Jan 2026 00:00:00 GMT AKS Networking A pod that can't curl the outside world is an AKS rite of passage. It's almost always one of three things, and none of them are the pod's fault. https://sathpal.com/articles/aks-control-plane-mental-model https://sathpal.com/articles/aks-control-plane-mental-model Thu, 15 Jan 2026 00:00:00 GMT AKS Fundamentals AKS hides the control plane so well that teams forget it exists, until an upgrade, an outage, or a bill reminds them. Here's the mental model that makes the managed boundary obvious. https://sathpal.com/blog/what-managed-means-in-aks https://sathpal.com/blog/what-managed-means-in-aks Fri, 09 Jan 2026 00:00:00 GMT AKS Fundamentals Managed Kubernetes doesn't mean Azure runs your cluster. It means Azure runs the part you'd most like to ignore, and quietly hands you the rest.