https://kukie.tech/tags/hubble/Recent content in Hubble on HistoryHugoko-krThu, 22 Oct 2026 09:00:00 +0900https://kukie.tech/posts/kukie-infra-10/Thu, 22 Oct 2026 09:00:00 +0900https://kukie.tech/posts/kukie-infra-10/Isolating other people’s code on a shared EKS hosting cluster — why gVisor over plain containers, Fargate or per-team nodes, why Cilium replaces the default VPC CNI while the cluster is still empty, how the node bootstrap installs a pinned and checksummed gVisor that fails closed, the missing gvisor-bin directory that broke the first apply, and the app domain and __Host- cookie that keep user apps away from the dashboard.