Blog

Kubernetes canary deployment patterns: running v1 and v2 pods side by side with traffic split by replica count, header-based tenant targeting via Istio VirtualService and NGINX Ingress annotations, backward-compatible schema changes for shared databases, and rollback via traffic shift.

Wiring an Apache Airflow deployment on Kubernetes to load connections and variables from HashiCorp Vault via the Kubernetes auth method. Covers per-environment Vault ACL policies, the VaultBackend Helm values, and the mapping between Airflow Variables/Connections and Vault KV secret structure.