#anvaplus articles

AVAndrei Vasiliuandreivasiliu.comMar 3 · 6 min read

GitOps Your Identity: Integrating Keycloak with Argo CD

Introduction: More Than Just a Login Screen In our last post, we deployed a production-ready Keycloak cluster. But an Identity Provider (IdP) in isolation is just a database of users. Its true power l

0

AVAndrei Vasiliuandreivasiliu.comFeb 25 · 6 min read

Stop Outsourcing Identity: A Production Guide to Keycloak on Kubernetes

Introduction: Take Back Control of Your Identity Over the last few months, we've built a platform that rivals small enterprise setups. We have established a resilient networking layer with automated T

0

AVAndrei Vasiliuandreivasiliu.comFeb 22 · 7 min read

The Database Dilemma

Introduction: The "Stateful" Reality Check In our last post, we solved the persistence layer by deploying Longhorn on Talos Linux. We finally have a place to put data. But a raw block device isn't a d

0

AVAndrei Vasiliuandreivasiliu.comFeb 14 · 6 min read

The State of Persistence - Deploying Longhorn on Talos Linux

Introduction: The Paradox of Statelessness Kubernetes is designed to be ephemeral. Pods die, nodes are replaced, and the cluster heals itself. This "stateless" philosophy is efficient for application

0

AVAndrei Vasiliuandreivasiliu.comFeb 6 · 6 min read

The Path to Automated TLS - Part 3 Automated Certificates with Cert-Manager

Introduction: Locking it Down - From HTTP to HTTPS In the preceding chapters, we established the networking foundation for a production-grade bare-metal Kubernetes platform. In Chapter 1, we implemented MetalLB to provide stable LoadBalancer IPs, so...

0

AVAndrei Vasiliuandreivasiliu.comFeb 4 · 8 min read

The Path to Automated TLS - Part 2 The Gateway to the Cluster - Traefik and Technitium

Introduction: From IP Address to Intelligent Gateway In Chapter 1, we laid the foundational pillar by solving the bare-metal IP address problem with MetalLB. Our test NGINX service successfully acquired the IP 10.20.0.90, proving our cluster can now ...

0

AVAndrei Vasiliuandreivasiliu.comFeb 2 · 6 min read

The Path to Automated TLS - Part 1 Bridging the Gap - Networking with MetalLB

The Path to Automated TLS: A Three-Part Guide The path to achieving fully automated, production-grade TLS on a bare-metal Kubernetes homelab is a rewarding but detailed journey. To do it justice, I've structured this guide as a three-part series... a...

0

AVAndrei Vasiliuandreivasiliu.comJan 23 · 6 min read

From Vault to Pod: Automating Kubernetes Secrets with 1Password and External Secrets

After building a Kubernetes cluster and setting up Argo CD to manage its configuration, what's the very next thing you should install? For me, both in production and in my homelab, the answer is always the same: External Secrets Operator. This post e...

0

AVAndrei Vasiliuandreivasiliu.comJan 18 · 6 min read

Stop Drifting: How to Lock Down Your Cilium CNI with Argo CD

In my last post, Stop Using the Wrong CNI: Why Your Homelab Deserves Cilium in 2026, we established a production-grade networking foundation for our Talos Kubernetes cluster. But a powerful CNI is only half the story. To truly manage our cluster like...

0

AVAndrei Vasiliuandreivasiliu.comJan 11 · 6 min read

Stop Using the Wrong CNI: Why Your Homelab Deserves Cilium in 2026

In my last post, The Four-Repo GitOps Structure for My Homelab Platform, I laid out the architectural blueprint for managing my homelab like a production environment. Building on the automation I detailed in my popular post, Need for Speed: Automatin...

0

#anvaplus

Search Hashnode