@guatu

SealedSecrets Key Backup: Don't Lose Your Encryption Keys

13h ago · 2 min read · I lost access to a SealedSecrets key once , not because I deleted it, but because I didn't know where it was stored. The cluster kept running, the apps kept deploying, but the moment I tried to rotate the key or redeploy a sealed secret, I hit a wall...

Ollama on Kubernetes: Recreate Strategy and Single-GPU Deadlock

1d ago · 3 min read · I deployed Ollama on Kubernetes, and the GPU worker node locked up mid-rollout. No logs, no error, just a dead pod that wouldn’t terminate and a new one that wouldn’t schedule. It wasn’t a crash. It wasn’t a timeout. It was a deadlock I’d never seen ...

Wildcard DNS + ndots:5: The TLS Nightmare and How to Fix It

2d ago · 4 min read · I was trying to pull a model from an external registry into my cluster when the connection just died. No 404, no timeout, just a blunt SSL: CERTIFICATE_VERIFY_FAILED. The error message specifically complained about a RemoteCertificateNameMismatch. TH...

MQTT Broker Selection: HiveMQ vs Mosquitto for Industrial Use

3d ago · 4 min read · I spent a month running both HiveMQ and Mosquitto in a production IoT setup with 2,500 endpoints. The difference between them wasn't in the marketing material , it was in the logs, the failed connections, and the way they handled message floods. Hive...

Proxmox API Tokens: Bash History Expansion and the ! Character

4d ago · 1 min read · I spent 45 minutes trying to figure out why my Proxmox API token kept getting exposed in logs. Turns out, it wasn't a security hole — it was Bash history expansion eating my token string and spitting it back in plaintext. The thing: Bash history expa...