AWS
AWS EKS adds a Kubernetes control plane on top of AWS infrastructure, which means you're testing both Kubernetes abstractions and AWS-specific behavior. A Pod that works in local kind or minikube may fail in EKS due to IAM Roles for Service Accounts (IRSA), VPC CNI networking, or
Testing
Kubernetes is designed for resilience — but resilience requires testing. A pod that doesn't restart cleanly, a deployment that fails to roll over to healthy nodes, a service that routes traffic to terminating pods — these failures are silent until they happen at 3am during peak traffic. This guide covers
Testing
Canary deployments reduce release risk by routing a small percentage of production traffic to the new version before rolling it out fully. If the canary behaves badly — error rates spike, latency increases, business metrics drop — you roll back with minimal user impact. Argo Rollouts is the most capable Kubernetes-native
Testing
Progressive delivery is the practice of gradually rolling out changes to users while automatically verifying that the release meets your quality standards at each step. Flagger is a Kubernetes operator that automates this process — it manages canary deployments, traffic mirroring, and A/B testing with automated analysis and rollback. Unlike
Testing
Kubernetes made it dramatically easier to deploy and scale applications. It also made it dramatically easier to build complex distributed systems that fail in ways no single developer fully understands. A pod gets evicted. A node runs out of memory. The network between two namespaces develops 200ms of latency. Do
IaC Testing
Kustomize makes Kubernetes manifest management tractable. It does not make it safe. Overlays can silently remove resource limits, merge in insecure defaults, or produce structurally invalid YAML that only breaks at apply time. Testing Kustomize configurations before kubectl apply means catching those failures in CI—not during an incident. The
MLOps
Seldon Core and KServe deploy machine learning models as Kubernetes-native inference services. Testing these deployments means verifying the inference API, the Kubernetes resource state, canary rollouts, and model-level correctness — before and after going to production. What to Test Layer What to verify Kubernetes resources InferenceService is Ready, replicas
Envoy
Envoy is the data plane proxy behind Istio, AWS App Mesh, and Contour. It handles routing, load balancing, authentication, rate limiting, and observability for your services. When Envoy is misconfigured, the symptoms are subtle — requests fail under specific conditions, rate limits don't enforce correctly, or health checks pass
DevOps
Crossplane Compositions map abstract claims (XR) to concrete managed resources. A bug in patch-and-transform logic can create the wrong resources or delete existing ones when a new claim is submitted. crossplane beta render validates Composition logic locally without touching a real Kubernetes cluster. uptest runs integration tests that
Trivy
Trivy is a fast, comprehensive open-source vulnerability scanner from Aqua Security that scans container images, filesystems, Git repositories, Kubernetes manifests, and IaC files. This guide covers local scanning, GitHub Actions integration, SBOM generation, and managing findings with .trivyignore. Key Takeaways Trivy scans more than just OS packages. It detects
Deployment
Progressive delivery automatically routes a small percentage of traffic to a new version, analyzes metrics, and either advances the rollout or triggers an automatic rollback. The system replaces human judgment in the deployment pipeline — which means the testing focus shifts to validating that the automation itself is correctly configured. Progressive
Testing
Chaos Mesh is a Kubernetes-native chaos engineering platform. It injects failures — pod crashes, network delays, CPU stress, disk failures — directly into your cluster via Kubernetes CRDs, without modifying application code. The goal is to discover resilience failures before they happen in production. Why Chaos Engineering Your monitoring, alerting, and