Cloud-Native Reference Stack
- Instant download
- Lifetime updates
- Secure Stripe checkout
- EU VAT invoice
Cloud-Native Reference Stack
Opinionated end-to-end reference architecture for a modern Kubernetes-based platform. 12 concerns, one tool each, ship to production with a 3-5 person platform team. What's inside: • The 12-concern c
- Production-tested examples you can copy-paste today
- PDF format, optimized for screen and print
- Free updates whenever the source CLI changes
- Search-friendly, code-block heavy, no fluff
About this ebook
Opinionated end-to-end reference architecture for a modern Kubernetes-based platform. 12 concerns, one tool each, ship to production with a 3-5 person platform team.
What's inside:
• The 12-concern checklist platform teams use to scope themselves.
• Cluster baseline: K8s version, runtime, CNI (Cilium kube-proxy-free).
• Ingress and Gateway API with Cilium Gateway + cert-manager.
• Service mesh decision tree: Istio Ambient vs Linkerd vs Cilium.
• SPIFFE / SPIRE workload identity federated across clusters.
• Argo CD app-of-apps reference layout with ApplicationSet per tenant.
• Progressive delivery with Argo Rollouts via Gateway API weights.
• External Secrets + Vault for secret distribution.
• Kyverno baseline policies (PSS Restricted, require resources, verify-images).
• Supply chain: cosign signing + SBOM + Kyverno admission verification.
• Observability: Prometheus + Loki + Tempo + Grafana + OTel Collector.
• SLOs + error budgets with sloth + Pyrra; auto-freeze deploys on burn.
• Multi-tenancy: namespace + ResourceQuota + default-deny NetworkPolicy.
• FinOps: OpenCost chargeback, idle-pod detection, rightsizing via VPA.
• Backstage scaffolder templates for self-service tenant onboarding.
• CloudNativePG + Strimzi database operators, MinIO object storage.
• Velero cross-region DR pattern + quarterly restore drill.
• 10 common errors, reference monorepo layout.
Tested against Kubernetes 1.30 / 1.31 on EKS, GKE, AKS, OpenShift 4.17. Lifetime updates while the recipes are maintained, delivered via /library.
Before you buy
- Instant digital delivery — by completing checkout you consent to immediate access. See the digital delivery policy.
- Refunds available within 14 days if you have not yet downloaded the file. Full terms in the refund policy.
- Your purchase email becomes your library sign-in. Tax is calculated and shown on the next step.