8 posts in series Kubernetes & OpenShift Best Practices in 2026

• kubernetes
• openshift
• best-practices
• guide
• platform-engineering

A seven-part field guide to running Kubernetes and OpenShift in production in 2026 — workloads, resources, scaling, security, Day-2 operations, and compliance.

• kubernetes
• openshift
• architecture
• best-practices
• platform-engineering
• finops

Kubernetes in 2026 is boring infrastructure — the real question is whether you run it well. When K8s or OpenShift fits, when it does not. Part 1 of 7.

• kubernetes
• openshift
• containers
• best-practices
• security
• pod-security

Container image hygiene, health probes, graceful shutdown, and securityContext — what every workload running in Kubernetes has to get right. Part 2 of 7.

• kubernetes
• openshift
• best-practices
• performance
• finops
• cgroups

How Kubernetes enforces CPU and memory boundaries: requests vs limits, QoS classes, cgroup v2, and what happens when a container hits its limit. Part 3 of 7.

• kubernetes
• openshift
• best-practices
• scaling
• resilience
• hpa

HPA, VPA, cluster autoscaler, pod disruption budgets, and topology spread — how to scale Kubernetes workloads and keep them available under load. Part 4 of 7.

• kubernetes
• openshift
• best-practices
• security
• rbac
• network-policy
• supply-chain

RBAC, Pod Security Admission, NetworkPolicy, and supply-chain controls — the security practices every Kubernetes production workload needs. Part 5 of 7.

• kubernetes
• openshift
• best-practices
• gitops
• observability
• finops
• runtime-security

GitOps with Argo CD and Flux, observability, FinOps controls, and cluster upgrade strategies — keeping a Kubernetes cluster healthy after launch. Part 6 of 7.

• kubernetes
• openshift
• best-practices
• security
• compliance
• audit

NIS2, DORA, PCI-DSS, HIPAA, and CRA controls mapped to Kubernetes configuration — audit logging, log retention, and incident reporting. Part 7 of 7.