Infrastructure tutorials

Production-grade guides for Linux, servers, security and performance. Copy-paste commands, multi-distro support, written by engineers who run this in production.

devops Intermediate

Configure ArgoCD Image Updater for automated container deployments

Set up ArgoCD Image Updater to automatically detect and deploy new container image versions in your GitOps workflow. Includes Git repository integration, webhook configuration, and monitoring setup.

25 min 4 distros 533 views
security Advanced

Configure Istio security policies with external authorization services integration

Set up comprehensive Istio security policies with external authorization services, JWT validation, and RBAC integration for enterprise-grade service mesh security and compliance.

45 min 4 distros 479 views
security Advanced

Set up container runtime security with Falco and Sysdig for threat detection

Configure Falco for runtime security monitoring and Sysdig Agent for container visibility to detect threats in Kubernetes environments. Implement behavioral analysis, custom security rules, and threat detection policies for production container workloads.

45 min 4 distros 443 views
security Advanced

Implement Istio security scanning and vulnerability management for Kubernetes service mesh

Set up comprehensive security scanning and vulnerability management for Istio service mesh using Trivy, Falco, and security policies to protect Kubernetes workloads from threats and compliance violations.

45 min 4 distros 463 views
security Advanced

Set up Kubernetes container image security scanning with Trivy and admission controllers

Implement automated security scanning for Kubernetes container images using Trivy scanner and admission controllers to block vulnerable images before deployment.

45 min 4 distros 580 views
monitoring Advanced

Configure advanced Jaeger sampling strategies for high-traffic environments

Configure probabilistic, adaptive, and remote sampling strategies for Jaeger distributed tracing to optimize performance and storage costs in high-throughput production environments while maintaining observability.

45 min 4 distros 503 views
monitoring Intermediate

Configure Jaeger distributed tracing on Kubernetes cluster with Helm charts and Elasticsearch backend

Deploy Jaeger distributed tracing on Kubernetes using Helm charts with Elasticsearch backend storage. Configure ingress, SSL certificates, and Prometheus integration for production-ready distributed tracing observability.

45 min 4 distros 527 views
devops Advanced

Configure Spark on Kubernetes with cluster autoscaling for dynamic workloads

Deploy Apache Spark 3.5 on Kubernetes with automatic cluster scaling, dynamic resource allocation, and comprehensive monitoring for production data processing workloads.

45 min 4 distros 705 views
devops Advanced

Implement Kubernetes secrets management with HashiCorp Vault integration

Set up HashiCorp Vault with Kubernetes to dynamically inject secrets into pods using the Vault Secrets Operator. This tutorial covers authentication configuration, operator deployment, and automated secret injection with annotations.

45 min 4 distros 684 views
security Advanced

Configure ClamAV cluster with Kubernetes deployment for high availability antivirus scanning

Deploy a distributed ClamAV antivirus cluster on Kubernetes with persistent storage, load balancing, and monitoring for enterprise-grade threat detection and scanning.

45 min 4 distros 1,074 views
monitoring Intermediate

Configure Prometheus Alertmanager with custom webhook integrations for Slack, Microsoft Teams, and PagerDuty notifications

Set up Prometheus Alertmanager with webhook receivers for Slack, Microsoft Teams, and PagerDuty notifications. Configure routing rules, test notifications, and implement alert escalation workflows for comprehensive monitoring coverage.

45 min 4 distros 939 views
devops Advanced

Configure Kubernetes secrets management with Vault integration for secure container orchestration

Set up HashiCorp Vault Agent Injector to automatically inject secrets into Kubernetes pods without storing sensitive data in container images or configuration files. This production-grade approach replaces hardcoded secrets with dynamic, secure credential management.

45 min 4 distros 630 views

Don't want to manage this yourself?

We handle infrastructure for businesses that depend on uptime. Fully managed, with one fixed contact who knows your setup.

You get one fixed contact who knows your setup

Rotterdam 13:47 · reachable in a message, no ticket form