DevOps Daily with Fexingo: CI/CD, Kubernetes, and Modern Software Operations

Fexingo

Lucas and Luna dissect the daily realities of DevOps, from CI/CD pipeline design to Kubernetes cluster management and the human systems that keep software running. Each episode grounds abstract principles in real incidents—a failed deployment at a major retailer, a postmortem from a cloud outage, a configuration drift disaster—and traces the operational decisions that turned them around. Lucas brings the technical precision of a working engineer, while Luna pushes on the team dynamics, cost trade-offs, and organizational bottlenecks that separate resilient operations from fragile ones. They discuss monitoring strategies, incident response playbooks, infrastructure-as-code trade-offs, and the cultural friction between development velocity and operational stability—always with concrete examples, never with buzzwords. This is the show for engineers, SREs, and platform leads who want to hear two seasoned practitioners argue through the hard choices: when to rewrite vs. patch, how much observability is enough, and how to keep a multi-cloud deployment from becoming a management nightmare. By the end, you'll carry away a sharpened question about your own stack and a new way to think about reliability. #DevOps #CICD #Kubernetes #SiteReliabilityEngineering #PipelineAutomation #InfrastructureAsCode #IncidentResponse #Monitoring #Observability #CloudOperations #ContainerOrchestration #Postmortem #DeploymentStrategy #Technology #FexingoBusiness #BusinessPodcast #SoftwareEngineering #PlatformEngineering Keep every episode free: buymeacoffee.com/fexingo

  1. 10h ago

    How Kubernetes Pod Security Contexts Cause Permission Headaches

    In this episode of DevOps Daily, Lucas and Luna dig into the surprisingly common but often misunderstood world of Kubernetes Pod Security Contexts. They use a real-world case of a microservice that kept failing with permission errors after an update to show how securityContext settings interact with container images, volumes, and admission controllers. You'll learn why setting the right user ID and file system group matters, the difference between fsGroup and supplementalGroups, and how to debug these issues using ephemeral containers and securityContext validation. They also touch on the shift to Pod Security Standards and how to audit your cluster for risky configurations. If you're tired of guessing why Pods start but can't write to volumes or read from ConfigMaps, this episode gives you a clear mental model and practical tips to fix it fast. #PodSecurityContexts #KubernetesSecurity #KubernetesPermissions #DevOps #CI/CD #Containers #Microservices #InfrastructureAsCode #CloudNative #KubernetesTroubleshooting #SecurityContext #fsGroup #PodSecurityStandards #KubernetesAdmissionControl #Technology #FexingoBusiness #BusinessPodcast #DevOpsPodcast Keep every episode free: buymeacoffee.com/fexingo

    How Kubernetes Pod Security Contexts Cause Permission Headaches

  2. 1d ago

    How Kubernetes Metrics Server Latency Breaks HPA Scaling

    In this episode of DevOps Daily, Lucas and Luna dig into a deceptively simple failure mode: the Kubernetes Metrics Server takes a few extra seconds to return pod metrics, and the Horizontal Pod Autoscaler overreacts. They walk through a real incident where a 45-second metrics delay caused wild replica swings, wasted cloud spend, and a brief outage. Lucas explains how the HPA's default tolerance window interacts with the Metrics Server's 15-second scrape interval and why a simple misconfiguration can turn a steady workload into a yo-yo. They discuss how to monitor metrics-server latency, the role of the --horizontal-pod-autoscaler-sync-period flag, and why tuning your autoscaler's behavior to actual metrics freshness is more important than chasing the latest feature. Along the way, they tie the lesson to the broader principle: in Kubernetes, the control plane's speed dictates your application's stability. A short, honest word about listener support keeps the show ad-free, then it's back to the metrics trench. #Kubernetes #HorizontalPodAutoscaler #MetricsServer #DevOps #SRE #CloudNative #Scaling #Observability #Prometheus #ContainerOrchestration #Infrastructure #Performance #IncidentManagement #TechPodcast #FexingoBusiness #BusinessPodcast #Technology #DevOpsDaily Keep every episode free: buymeacoffee.com/fexingo

    How Kubernetes Metrics Server Latency Breaks HPA Scaling

  3. 2d ago

    How Kubernetes Finalizers Locked Our Namespace for Three Weeks

    In Episode 160 of DevOps Daily, Lucas and Luna drill into a deceptively simple Kubernetes footgun: object finalizers and namespace deletion. When a team at a mid-sized fintech tried to clean up a failed release, a single finalizer on a custom resource (CRD) silently held the namespace in 'Terminating' for three weeks. The episode walks through exactly how finalizers work under the hood, why the namespace didn't just vanish, how they finally traced it via kubectl and the API server logs, and the three guardrails they now enforce: auditing finalizers before deletion, using kubectl patch to remove them only when safe, and linting CRDs to block finalizers that don't self-heal. Lucas and Luna also discuss when a finalizer is worth keeping (like for cleanup jobs) versus when it becomes a footgun, and they stress-test a couple of common workarounds. No fluff, just a real ops story with concrete commands you can use today. #Kubernetes #Finalizers #Namespaces #CRD #DevOps #CloudNative #Troubleshooting #kubectl #APIServer #ClusterOps #SRE #Fintech #ProductionIssue #TechOps #CloudInfrastructure #DevOpsDaily #FexingoBusiness #BusinessPodcast Keep every episode free: buymeacoffee.com/fexingo

    How Kubernetes Finalizers Locked Our Namespace for Three Weeks

  4. 3d ago

    How Kubernetes Object Finalizers Block Namespace Deletion

    In this episode of DevOps Daily, Lucas and Luna dig into a surprisingly common Kubernetes headache: namespaces stuck in the Terminating state because of object finalizers. They walk through a real incident where a single stuck custom resource with a finalizer held up an entire namespace deletion, blocking a whole environment teardown and causing pipeline failures. You'll learn what finalizers actually do, how they can silently break cluster cleanup, and the step-by-step debugging approach — from checking finalizers with kubectl to patching or force-deleting when needed. They also discuss safe alternatives and when it's better to fix the controller instead of bypassing the safety mechanism. This episode gives you a concrete mental model and a few kubectl commands you'll actually use in production. #KubernetesFinalizers #NamespaceDeletion #K8sOperators #CloudNative #DevOps #KubectlTips #ClusterCleanup #KubernetesTroubleshooting #ControllerDesign #CustomResourceDefinitions #TechPodcast #FexingoBusiness #BusinessPodcast #Technology #SoftwareEngineering #InfrastructureAsCode #SiteReliabilityEngineering #CloudInfrastructure Keep every episode free: buymeacoffee.com/fexingo

    How Kubernetes Object Finalizers Block Namespace Deletion

  5. 4d ago

    Why Kubernetes Pods Restart When Nodes Reboot

    When a Kubernetes node reboots for a kernel update or hardware maintenance, pods don't just vanish and come back cleanly. The kubelet marks them as terminated, the container runtime loses state, and what looks like a routine maintenance window turns into failed readiness probes, stuck terminating pods, and a cascade of restarts. In episode 158 of DevOps Daily, Lucas and Luna break down the actual mechanics of node reboot behavior: how the kubelet handles graceful shutdown, why container runtimes like containerd and CRI-O can orphan processes, and why your deployment's restartPolicy is the hidden variable that decides whether that reboot is a blip or a production incident. They also walk through a real scenario where a node reboot during off-peak hours caused a payment service to restart with cold caches, triggering a 5x latency spike. If you've ever wondered why your pods don't come back the way they left, or why a simple reboot feels like playing roulette with your uptime, this episode gives you the mental model and the practical mitigations: preStop hooks, terminationGracePeriodSeconds, and podDisruptionBudgets that actually work. #Kubernetes #NodeReboot #Kubelet #ContainerRuntime #PodRestart #DevOps #SRE #CloudNative #Containerd #CRIO #PreStopHook #TerminationGracePeriod #PodDisruptionBudget #SiteReliability #Infrastructure #Tech #FexingoBusiness #BusinessPodcast Keep every episode free: buymeacoffee.com/fexingo

    Why Kubernetes Pods Restart When Nodes Reboot

  6. 5d ago

    How Kubernetes Node Journal Rotation Hides Crash Loops

    In this episode of DevOps Daily, Lucas and Luna dig into a silent killer in Kubernetes clusters: systemd journal rotation. When the kubelet's logs are rotated out before a crash is captured, debugging becomes guesswork. They walk through the mechanics of journald's size and time-based rotation, the systemd-journald daemon's default rate limits, and how a busy cluster can lose critical kubelet logs in seconds. They share a real-world scenario where a node crash loop went unnoticed for hours because the logs were gone. They also discuss practical fixes: setting SystemMaxUse and RuntimeMaxUse, adjusting RateLimitIntervalSec, forwarding logs to a central aggregator, and using node problem detector to catch issues early. By the end, you'll know exactly how to ensure your kubelet logs survive the next incident. #Kubernetes #DevOps #Systemd #Journald #LogRotation #Kubelet #CrashLoop #Troubleshooting #SiteReliability #CloudNative #Observability #Logging #NodeProblemDetector #IncidentResponse #TechPodcast #Business #FexingoBusiness #Podcast Keep every episode free: buymeacoffee.com/fexingo

    How Kubernetes Node Journal Rotation Hides Crash Loops

  7. 6d ago

    How Kubelet Eviction Signals Trigger Silent Pod Deaths

    In this episode of DevOps Daily, Lucas and Luna dig into a classic Kubernetes failure mode: kubelet eviction signals that silently kill pods. The trigger is often memory pressure on the node, and the fallout is worse than a crash — the pod vanishes without a proper termination, leaving no time for graceful shutdown. They walk through a real-world scenario from an e-commerce platform where the memory limit was set too high, the node ran out of memory, and the eviction manager picked victims in an order nobody expected. Lucas explains the difference between soft and hard eviction thresholds, and why the kubelet's eviction signal isn't just about memory — it can also be driven by disk pressure, inodes, or even PID limits. They also cover the critical role of the eviction manager's ranking by QoS class, and why Burstable pods often get hit first. The conversation wraps with practical advice: monitor eviction signals early, set realistic memory requests, and test your graceful shutdown path with real load. If you've ever lost a pod without a clear reason, this episode gives you the mental model to troubleshoot it fast. #KubeletEviction #Kubernetes #PodDeaths #MemoryPressure #EvictionManager #QoSClasses #BurstablePods #GracefulShutdown #NodePressure #DevOps #SRE #CloudNative #ContainerOrchestration #TechPodcast #FexingoBusiness #BusinessPodcast #SoftwareOperations #CI/CD Keep every episode free: buymeacoffee.com/fexingo

    How Kubelet Eviction Signals Trigger Silent Pod Deaths

  8. Aug 14

    How Kubernetes HPA Fails When Custom Metrics Lag

    In this episode of DevOps Daily, Lucas and Luna dive into the hidden pitfalls of Horizontal Pod Autoscaler (HPA) with custom metrics. They explore a real-world incident where a stale external metric from a monitoring system caused the HPA to scale down a critical service during a traffic spike, leading to degraded performance and a cascade of alerts. The discussion covers how HPA evaluates metrics, the dangers of metric staleness and missing data, and practical strategies to prevent such failures—like setting proper thresholds, using multiple metrics, and implementing safeguards like the stabilization window and scale-down policies. Tune in to learn how to keep your autoscaling reliable and avoid the 'zombie metric' trap. #Kubernetes #HPA #Autoscaling #CustomMetrics #DevOps #SRE #Monitoring #Prometheus #CloudNative #Infrastructure #Scaling #Reliability #Microservices #ContainerOrchestration #TechPodcast #FexingoBusiness #BusinessPodcast #DevOpsDaily Keep every episode free: buymeacoffee.com/fexingo

    How Kubernetes HPA Fails When Custom Metrics Lag
See All (162)

About

Lucas and Luna dissect the daily realities of DevOps, from CI/CD pipeline design to Kubernetes cluster management and the human systems that keep software running. Each episode grounds abstract principles in real incidents—a failed deployment at a major retailer, a postmortem from a cloud outage, a configuration drift disaster—and traces the operational decisions that turned them around. Lucas brings the technical precision of a working engineer, while Luna pushes on the team dynamics, cost trade-offs, and organizational bottlenecks that separate resilient operations from fragile ones. They discuss monitoring strategies, incident response playbooks, infrastructure-as-code trade-offs, and the cultural friction between development velocity and operational stability—always with concrete examples, never with buzzwords. This is the show for engineers, SREs, and platform leads who want to hear two seasoned practitioners argue through the hard choices: when to rewrite vs. patch, how much observability is enough, and how to keep a multi-cloud deployment from becoming a management nightmare. By the end, you'll carry away a sharpened question about your own stack and a new way to think about reliability. #DevOps #CICD #Kubernetes #SiteReliabilityEngineering #PipelineAutomation #InfrastructureAsCode #IncidentResponse #Monitoring #Observability #CloudOperations #ContainerOrchestration #Postmortem #DeploymentStrategy #Technology #FexingoBusiness #BusinessPodcast #SoftwareEngineering #PlatformEngineering Keep every episode free: buymeacoffee.com/fexingo

Information