Kubernetes solves real problems: declarative workload management, self-healing deployments, horizontal pod autoscaling, resource isolation, and rolling updates without downtime.
What it does not solve: the underlying cluster nodes still need patching. The etcd database still needs backups. The network policies still need to be explicitly defined. The secrets still need to be properly managed.
For Sabivox on EKS: we use managed node groups (AWS handles OS patching), automated etcd backups via Velero, NetworkPolicy resources to enforce inter-pod communication rules, and External Secrets Operator to sync secrets from AWS Secrets Manager.
Kubernetes is the most powerful infrastructure primitive I have used. Use it with discipline.
— Dick Bassey | DevDick | 2024