GKE posts — Mohcine NAZRHAN

Jul 1, 2026·5 min read

Upgrading an Istio Service Mesh: What We Learned About Rollbacks, Auth, and Capacity

A high-severity Envoy vulnerability turned a "routine" service mesh patch into a multi-version upgrade on GKE — and into lessons on configuration drift, revision-based rollbacks, execution identity, capacity, and verifying outcomes instead of objects.

Mar 20, 2026·5 min read

When Security Met Kubernetes: My SentinelOne Journey on GKE

Installing a security agent on Kubernetes sounded like a one-liner. Deploying SentinelOne as a DaemonSet on GKE turned into a crash course in Helm, corporate proxies, internal registries, version pinning, CI/CD and platform engineering.

May 3, 2025·5 min read

I Cut GKE Costs Without Rebuilding the Platform

An over-provisioned GKE cluster, large fixed nodes sitting mostly idle — and how Node Auto-Provisioning plus honest resource requests cut the cost by roughly 50% without redesigning the platform.