Practical Kubernetes debugging: kubectl tricks, ephemeral containers, port-forward + tcpdump, network debug pods, stern logs, k9s, kubeshark, and the discipline.
Production incident response: clear roles (IC, comms, ops), runbooks that are actually useful, blameless postmortems, status pages, and how to learn from outages.
Production feature flags: kill switches, percentage rollouts, targeted segments, evaluation contexts, OpenFeature standard, and discipline for not drowning in flags.
Practical secret rotation: overlap windows, dual-secret support, AWS Secrets Manager rotation, application-side patterns, and the discipline that prevents incidents.
Production Postgres backups: pgBackRest setup, WAL archiving, PITR, restore testing, retention, and the patterns that work for self-hosted and managed.
Picking a deploy target in 2026: Cloudflare for edge-first, AWS for full control, Vercel for Next.js shops. Pricing, lock-in, and decision matrix.
What an SBOM is, why customers ask for one in 2026, the formats (CycloneDX, SPDX), tools (syft, grype, dependency-track), and the practical adoption path.
How to run on-call without burning out engineers. Rotation schedules, severity definitions, runbook templates, escalation, follow-the-sun, and the patterns from teams that ship reliable systems.
How to use Argo CD ApplicationSets to manage 50+ services across many clusters. Git generators, cluster generators, matrix generators, and the patterns that scale.
Practical IaC patterns: module structure, remote state with locking, drift detection, secret management, code review, and the discipline that prevents incidents.