Kubernetes & Platform Engineering Toolkit
Free config generators, incident playbooks, and decision guides built for platform engineers. No account needed.
Kubernetes Generators
FeaturedAutoscaling / KEDA Config Builder
Generate Kubernetes HPA or KEDA ScaledObject YAML from target metrics.
K8s Deployment & Pod Generator
Generate secure Kubernetes Deployment or Pod YAML with securityContext and resource limits.
Kubernetes YAML Linter
Lint Kubernetes YAML manifests for best practices, missing limits, probes, and security configurations.
NetworkPolicy Generator
Generate Kubernetes NetworkPolicy YAML to secure pod-to-pod communication.
RBAC Generator
Generate Kubernetes Roles and Bindings without handwriting verbose YAML.
Karpenter NodePool Generator
Generate NodePool and EC2NodeClass YAML for Karpenter v1 with instance families, capacity types, and disruption budgets.
All tools — filter by category below
Incident Playbooks
Step-by-step decision trees for live incidents — covering the most common failure modes in production Kubernetes and cloud environments. Each playbook walks you from first signal to root cause.
HTTP Status Playbook
Decision tree with checks and fixes for status codes.
Incident Triage Playbook
Severity classification and first checks.
Latency Spike Playbook
p95/p99 checks across DB, cache, and network.
Error Rate Playbook
Find top endpoints, recent deploys, and rollback steps.
DNS Outage Playbook
Resolver checks, TTL validation, and failover steps.
TLS Handshake Failures
Cert expiry, chain issues, SNI, and cipher mismatch.
502/503/504 Debugger
Gateway timeout vs upstream failure checks.
Disk Full Incident
Cleanup order, logs, tmp, and rotation steps.
Memory Leak Identification
Identify, diagnose, and fix memory leaks in production containers.
OOMKill Discovery
Diagnose and resolve Out-Of-Memory (OOM) kills in Kubernetes.
Slow DB Query
Identify, analyze, and optimize slow database queries.
TLS/SSL Cheat Sheet
Compare cipher suites, key sizes, and protocol versions.
Nginx Directives
Commonly used Nginx snippets for proxying and caching.
Linux Networking
ss, netstat, tcpdump, and traceroute quick refs.
PromQL
Common PromQL query patterns for latency and errors.
Dockerfile Best Practices
Layering, caching, and security guidance for production images.
Kubectl Quick Reference
Essential kubectl commands for day-to-day Kubernetes operations.
Advanced Git
Powerful Git commands for serious troubleshooting and productivity.
HTTP Headers
Essential HTTP headers for security, caching, and performance.
nftables
Tables, chains, rules, NAT, sets, and iptables migration commands.
k9s
Keyboard shortcuts, resource commands, and config for the k9s Kubernetes TUI.
Podman
Containers, pods, Kubernetes integration, rootless ops, and systemd.
Helm
Install, upgrade, rollback, debug, and manage Helm chart releases.
Terraform
Core workflow, state management, imports, workspaces, and debugging.
AWS CLI
EKS, ECR, S3, IAM, EC2, SSM, and Secrets Manager quick reference.
jq
JSON slicing, filtering, mapping, and kubectl output processing.
curl
HTTP requests, headers, auth, TLS, downloads, and timing breakdowns.
OpenSSL
Inspect certificates, generate keys and CSRs, test TLS, and convert formats.
systemd
systemctl, journalctl, unit files, timers, targets, and overrides.
Kustomize
Base and overlay structure, patches, generators, and CLI commands.
Linux Commands Cheat Sheet (DevOps)
Files, processes, networking, logs, permissions, and transfer — the incident-day essentials.
Docker CLI Cheat Sheet
Containers, images, volumes, networks, Compose, and cleanup commands.
Kubernetes YAML Cheat Sheet
Manifest skeletons for Deployment, Service, Ingress, PVC, HPA, CronJob, and NetworkPolicy.
ArgoCD vs Flux CD
Detailed comparison of the two leading GitOps controllers for Kubernetes.
Terraform vs Pulumi
Comparing industry-standard HCL with modern code-first Infrastructure as Code.
Prometheus vs Datadog
Deep dive into open-source monitoring vs. enterprise SaaS observability.
GitHub Actions vs GitLab CI
Comparing the most dominant CI/CD platforms for modern DevOps teams.
The CI/CD Trinity
Comprehensive 3-way comparison: GitHub Actions vs GitLab vs Jenkins.
Vercel vs AWS Amplify
The DX king vs the AWS code-first powerhouse. Detailed feature and pricing breakdown.
Tailscale vs WireGuard
Comparing the ease of Tailscale with the raw performance of WireGuard.
Istio vs Linkerd
The battle of Kubernetes service meshes: Feature-rich vs. Simplicity-first.
Helm vs Kustomize
Templates vs. Overlays. Which one should you use for your K8s manifests?
EKS vs GKE vs AKS
Which cloud provider has the best managed Kubernetes service?
Docker vs Podman
The industry standard vs the daemonless, rootless alternative.
Next.js vs Remix
Deep dive into the two most popular React frameworks for the edge.
Backstage vs Port
Battle of the Internal Developer Portals: Open-source flexibility vs SaaS speed.
Podscape vs Lens vs k9s
Security-first desktop GUI vs the most mature K8s workbench vs the fastest terminal UI.
Kubecost vs Vantage vs Infracost
The ultimate FinOps showdown: Pre-deployment estimates vs runtime visibility vs unified cloud billing.
EKS vs GKE
Amazon EKS vs Google GKE: provisioning speed, networking, autoscaling, and cost compared.
EKS vs AKS
Amazon EKS vs Azure AKS: IAM, networking, Windows support, and cost compared for 2026.
Vault vs External Secrets
Full secrets platform vs. Kubernetes-native secret sync: which fits your team?
vLLM vs Ollama
Production LLM serving vs local developer inference: PagedAttention throughput vs pull-and-run simplicity.
Karpenter vs Cluster Autoscaler
Direct node provisioning vs ASG-based scaling — which Kubernetes autoscaler fits your cluster?
Loki vs Elasticsearch
Label-based cheap log storage vs full-text indexed search power for Kubernetes logging.
Fluentd vs Fluentbit vs Vector
Three-way log pipeline comparison: ecosystem breadth vs K8s-native efficiency vs Rust-powered throughput.
Pulumi vs CDK vs CDKTF
Cloud-agnostic SDK vs AWS L2 constructs vs Terraform provider ecosystem — three modern IaC approaches compared.
Rancher vs OpenShift vs Tanzu
Enterprise Kubernetes platforms: open-source multi-cluster management vs security-first developer platform vs VMware integration.
cert-manager vs Cloud Certs
In-cluster TLS automation vs cloud-managed certificates — when to use each for your Kubernetes PKI strategy.
ArgoCD vs Jenkins X
GitOps pull-based delivery vs opinionated cloud-native CI/CD — which fits modern platform teams.
EKS Fargate vs EC2 Nodes
Serverless Kubernetes compute vs managed EC2 instances — cost, scalability, and operational trade-offs on AWS.
Terraform vs OpenTofu
BUSL-licensed incumbent vs the Linux Foundation fork — license, governance, state encryption, and migration trade-offs.
NGINX Ingress vs Gateway API
The retiring default ingress controller vs its role-oriented successor — traffic features, ownership model, and migration path.
Cilium vs Calico
eBPF-native networking vs the battle-tested policy engine — L7 policy, observability, BGP, and operational trade-offs.
GitHub Actions vs Jenkins
Managed, GitHub-native CI/CD vs the self-hosted automation server you run yourself — setup, scaling, maintenance, and cost.
containerd vs Docker vs CRI-O
Kubernetes container runtimes compared — what each is for, why Kubernetes moved off Docker, and which belongs on your nodes.
Terraform vs Ansible
Infrastructure provisioning vs configuration management — declarative state vs playbooks, and why most teams use both.
Kafka vs RabbitMQ vs SQS
Event streaming vs message broker vs managed queue — ordering, replay, throughput, and operational cost for async messaging.
NGINX vs HAProxy vs Traefik
Reverse proxies and load balancers compared — static vs dynamic config, raw performance, TLS automation, and Kubernetes ingress fit.
gRPC vs REST
Binary contract-first RPC vs resource-oriented HTTP APIs — performance, streaming, browser support, and where each fits.
OpenTelemetry vs Prometheus
A telemetry framework vs a metrics backend — why these aren't really competitors, and how they fit together.
Thanos vs Cortex vs Mimir
Long-term, scalable Prometheus compared — sidecar augmentation vs multi-tenant TSDBs, and which to pick for global metrics at scale.
Apple container vs OrbStack vs Colima
Docker Desktop alternatives on the Mac — Apple's VM-per-container tool vs the polished shared-VM incumbent vs the free Lima-based workhorse.
Learning Roadmaps
Opinionated, stage-by-stage paths from fundamentals to production maturity — with progress tracking and links to tools at every step.
Roadmaps
3 pathsPlatform Engineering Roadmap
9 stages from Linux fundamentals to IDP maturity — with progress tracking and links to tools at every step.
SRE Roadmap
8 stages covering SRE principles, SLOs, incident management, chaos engineering, and reliability at scale.
DevSecOps Roadmap
8 stages integrating security into every phase — from SAST and supply chain to Kubernetes runtime defence.
Topic Hubs
5 hubsKubernetes Hub
Standardize your cloud-native workflows with production-ready manifests.
Networking Hub
Everything you need to design, troubleshoot, and optimize cloud networks.
CI/CD Hub
Generators and comparisons for every layer of your delivery pipeline.
Security Hub
Cryptography primitives, SSH tools, JWT inspection, and cert checking.
Observability Hub
SLO calculators, Prometheus alert builders, log parsers, and on-call playbooks.
Knowledge & Reference
5 articlesCloud Architecture Patterns
Deep dive into Sidecar, Circuit Breaker, and Service Mesh patterns.
FinOps & Cost Optimization
Practical strategies for reducing AWS, GCP, and Kubernetes spending.
Compliance for DevOps
A guide on SOC2, HIPAA, and PCI-DSS for infrastructure teams.
DevOps Glossary
Master modern engineering terminology with our comprehensive glossary.
SRE & DevOps FAQ
Common hurdles and architectural questions, answered by engineers.
Need this managed for you, not just automated?
We're also a hands-on DevOps consultancy — Kubernetes, CI/CD, and cloud infrastructure.