By Bhawani Singh6 min read
Pod-level resources for Tekton TaskRuns
A mutating webhook gives a Tekton build step and Docker-in-Docker sidecar one Pod-level resource budget, then verifies the limits in node cgroups.
About
Hi, I'm Bhawani
I build, I break, I keep CI/CD alive.
Platform engineer · Creator of dockstat · CI/CD & Kubernetes
Latest writing
All articles →
By Bhawani Singh9 min read
A Kube-Scheduler Plugin for Tekton Capacity Reservation
An out-of-tree kube-scheduler plugin that reserves node capacity across a Tekton PipelineRun's full lifetime, closing a gap none of Tekton's own coschedule modes cover on their own.
By Bhawani Singh12 min read
Pod Startup Forensics 7 / 7Pod Startup Forensics: Closure and What's Next
Closing the series: what six parts proved, the two scaling questions still untested, and the remaining exec-probe and production-kernel boundaries.
By Bhawani Singh7 min read
Pod Startup Forensics 6 / 7Pod Startup Forensics: Closing the Gap
Correlating socket syscalls and kubelet probe attempts into the merged timeline, then fixing a real cgroup-attribution bug that left most of those events unresolved.
Deep-dive series
Bio
- Platform Engineer focused on CI/CD at scale.
- Building scalable CI/CD systems with Tekton and AWS EKS.
- Comfortable with Rust, JavaScript, TypeScript, Go, and Java, with occasional detours into whatever else a problem needs.
- Writes Rust for fun — creator of dockstat, a build-log profiler.
- Building an agent harness that runs local models inside Firecracker microVMs.
- Cloud-native and container technology enthusiast.
- Building tools that make developers’ lives easier.