Local DNS for home Kubernetes: tracing resolver loops from the router to CoreDNS
Make internal GitLab, Registry, and Vault names resolvable from nodes and Pods without passing the host's loopback resolver to CoreDNS.
Technical notes.
Writing
22 articlesPersist Vault audit logs on the host: permissions, HUP, and 90-day rotation
Configure the audit device, container storage, and logrotate separately, then verify that new requests reach the new file after rotation.
Running Qwen3.6 and Qwen3.8 in LM Studio on an M5 Pro
Using 4-bit MLX models locally on Apple Silicon while managing unified memory, context length, and thinking settings.
Distribute Registry credentials across namespaces with ClusterExternalSecret
Keep the credential in Vault, select namespaces with labels, and verify both Secret delivery and real image pulls.
Helping AI Understand My Kubernetes Infrastructure
I use my GitOps repository as shared working notes, so AI can understand the current setup before helping with changes, validation, and writing.
A Kubernetes MCP Tool That Can Look but Not Touch
Restricting AI access to SSH, Kubernetes, and OpenTelemetry diagnostics while keeping local LLM context small.
Run Airflow on Kubernetes with GitOps-managed values
Running Airflow with Argo CD, Helm, Vault, and External Secrets on my home Kubernetes cluster.
Replace Caddy with cloudflared: expose Kubernetes without opening ports 80 and 443
Move the public entry point and identity checks to Cloudflare, then reach internal services through an outbound-only Tunnel.
Remove an accidentally committed secret from Git—locally and remotely
Deleting the file is only the first step: rotate the credential, rewrite every reachable ref, verify the remote independently, and prevent the next leak.
Building a Native Encrypted DNS App for macOS with AI Coding: DNS Security Pro
How I turned my experience building an iOS product into a native SwiftUI system DNS manager with DoH and DoT support.
Use Mozilla SOPS with GitOps for encrypted Kubernetes Secrets
Encrypt Kubernetes Secret values in Git and let the GitOps controller decrypt them during deployment.
Run Istio ambient mode with waypoint proxies
How I enroll workloads into ambient mesh and add service-scoped L7 waypoints.
Use Vault and External Secrets in Kubernetes
How I sync Vault KV data into Kubernetes Secrets without committing secret values to Git.
How I use Argo CD to manage my home Kubernetes cluster
A practical GitOps bootstrap flow for my RKE-based home Kubernetes infrastructure.
Expose Kubernetes services with Istio Gateway API
How I route public domains through an Istio-managed Gateway and HTTPRoute.
Build an OpenTelemetry stack for Kubernetes apps
Keep the observability backend outside Kubernetes and collect application telemetry, Pod stdout, and host logs through separate collectors.
Bootstrap a new RKE cluster for GitOps
The checklist I use before Argo CD can safely take over a Kubernetes cluster.
Deploy Rancher Kubernetes Engine
Use Rancher Kubernetes Engine to build a configurable Kubernetes cluster with Docker-based components.
DNS Security for iOS/macOS
A DNS over HTTPS and DNS over TLS app for iOS and macOS.
Host your website on GitHub Pages
Host a static website for free with GitHub Pages, a custom domain, and Cloudflare DNS.
Deploy NFS StorageClass for Kubernetes
Use an NFS provisioner to provide persistent storage for a private Kubernetes cluster.
Start a Kubernetes cluster with kubeadm
A practical walkthrough for creating a private Kubernetes cluster with kubeadm.
