3h ago · 2 min read · OpenTofu reference — drop-in Terraform replacement, now with native state encryption and built-in testing. Migration is usually trivial If you're using Terraform Open Source, switching to OpenTofu is mostly changing the binary. Your .tf files don't n...
Join discussion3h ago · 2 min read · Kubernetes Operators reference — idempotent reconciliation, CRDs, and finalizers. The Operator pattern in one sentence An Operator is a controller that watches a custom resource and reconciles actual state to desired state using domain-specific knowl...
Join discussion5h ago · 2 min read · Kubernetes NetworkPolicy — the gotcha that breaks everything if you miss it. Always include DNS in egress rules egress: - ports: - protocol: UDP port: 53 - protocol: TCP port: 53 # MUST include this or pod DNS resolut...
Join discussion6h ago · 1 min read · Kubernetes Gateway API is GA (v1) since K8s 1.28. Here's why it's replacing Ingress. Traffic splitting is first-class (no annotation hacks) rules: - matches: - path: {type: PathPrefix, value: /api} backendRefs: - name: api-service-s...
Join discussion6h ago · 2 min read · Pulumi patterns for teams comfortable with TypeScript but not HCL. Why Pulumi over Terraform (and when not to) Real for loops, real conditionals, real functions. No count hacks, no for_each maps with ternary operators. Your IDE works. Types work. Uni...
Join discussion6h ago · 1 min read · NGINX Ingress Controller annotation patterns I keep referencing. Path rewrite (strip /api prefix) annotations: nginx.ingress.kubernetes.io/rewrite-target: /$2 paths: - path: /api(/|$)(.*) # $2 = everything after /api pathType: Implementati...
Join discussion6h ago · 2 min read · Argo Events patterns — the event-driven glue that wires external signals into Argo Workflows. The pipeline: EventSource → EventBus → Sensor → Trigger GitHub webhook → EventSource → NATS EventBus → Sensor (filter) → Argo Workflow trigger Three YAML fi...
Join discussion6h ago · 2 min read · OpenCost patterns for understanding where your Kubernetes spend actually goes. The question it answers "How much does the production namespace cost this week? Which deployment is burning the most?" kubectl port-forward -n opencost svc/opencost 9003 ...
Join discussion6h ago · 1 min read · Knative patterns for serverless workloads on Kubernetes. Autoscale-to-zero in 10 lines of YAML apiVersion: serving.knative.dev/v1 kind: Service metadata: name: hello spec: template: metadata: annotations: autoscaling.knative.dev...
Join discussion6h ago · 2 min read · Harbor patterns for running a self-hosted container registry in Kubernetes. Why Harbor over a plain Docker registry Plain Distribution (the open source registry) is just push/pull. Harbor adds: Project isolation with RBAC Vulnerability scanning (Tri...
Join discussion