Category
Architecture
Decisions when building SaaS on Kubernetes: tenants, networking, storage.
← Clear filter
ArchitectureGitOps with Argo CD or a control plane? What teams without a platform team actually need
GitOps with Argo CD brings review, history and drift correction – plus a second repository, a secrets strategy and a tool that needs looking after. What small teams actually need, and when GitOps is still the better choice.
- Kubernetes
- CI/CD
ArchitectureScaleway Kapsule vs. AWS EKS: managed Kubernetes in Europe compared
A free control plane against $73 a month, Cilium on a private network against the VPC CNI, API keys against Pod Identity: a fair comparison of Kapsule and EKS – including where EKS comes out ahead.
- Kapsule
- Scaleway
- Migration
ArchitectureA Heroku alternative in Europe: from PaaS to your own cloud without a platform team
Since February 2026 Heroku has stopped building new features. What you have to replace when you move – from the build to the Postgres add-on –, which options exist in Europe and how the migration works, step by step.
- Migration
- Scaleway
- CI/CD
ArchitectureKubernetes hosting or bring your own cloud? Who owns your infrastructure
Hosting, managed Kubernetes or bring your own cloud: the three models sound alike, yet they split ownership, billing and operations in completely different ways. A comparison in four questions – and when each one fits.
- Kubernetes
- Scaleway
- Costs
ArchitectureHelm charts and their disks: what is left after helm uninstall
A Helm chart often brings its own disks, for example for the database bundled in the chart. Some disappear on uninstall, data and all, others stay around forever. You want to know which before you start.
- Volumes
- Backups
- Kubernetes
ArchitectureFrom ingress-nginx to Envoy Gateway: switching controllers without a dark window
Change the ingress class and deploy: the new controller serves, the old one no longer does, and DNS still points at the old one. The host answers 404 until the TTL expires. Here’s a better way.
- Ingress
- Kubernetes
- TLS
ArchitecturePersistent volumes on Kubernetes: ReadWriteOnce, Recreate and the snapshot before deletion
A rolling update with a volume is a deadlock waiting to happen. And deleting a volume from the manifest is data loss waiting to happen. Five rules that prevent both.
- Volumes
- Kubernetes
- Backups
ArchitectureMulti-tenant SaaS: a namespace per customer or a row per customer?
Multi-tenancy is not a yes-or-no question. Most SaaS vendors need both: rows for the many small customers and namespaces for the few large ones.
- SaaS
- Multi-tenant
- Kubernetes