Replace Caddy with cloudflared: expose Kubernetes without opening ports 80 and 443
Move the public entry point and identity checks to Cloudflare, then reach internal services through an outbound-only Tunnel.
Tag · 14 stories
#cloud
→
Remove an accidentally committed secret from Git—locally and remotely
Deleting the file is only the first step: rotate the credential, rewrite every reachable ref, verify the remote independently, and prevent the next …
Use Mozilla SOPS with GitOps for encrypted Kubernetes Secrets
How I keep encrypted secret values in Git without turning the repo into a password dump.
Run Istio ambient mode with waypoint proxies
How I enroll workloads into ambient mesh and add service-scoped L7 waypoints.
Run Airflow on Kubernetes with GitOps-managed values
How I keep Airflow Helm values in Git while runtime Secrets come from Vault.
Use Vault and External Secrets in Kubernetes
How I sync Vault KV data into Kubernetes Secrets without committing secret values to Git.
Use Argo CD to manage my home Kubernetes cluster
A practical GitOps bootstrap flow for my RKE-based home Kubernetes infrastructure.
Expose Kubernetes services with Istio Gateway API
How I route public domains through an Istio-managed Gateway and HTTPRoute.
Build an OpenTelemetry stack for Kubernetes apps
A Docker Compose observability backend for metrics, logs, and traces from Kubernetes apps.
Bootstrap a new RKE cluster for GitOps
The checklist I use before Argo CD can safely take over a Kubernetes cluster.
Deploy Apache Airflow on Kubernetes
A short deployment note for running Apache Airflow on top of a Kubernetes cluster.
Deploy Rancher Kubernetes Engine
Use Rancher Kubernetes Engine to build a configurable Kubernetes cluster with Docker-based components.
Deploy NFS StorageClass for Kubernetes
Use an NFS provisioner to provide persistent storage for a private Kubernetes cluster.
Start a Kubernetes cluster with kubeadm
A practical walkthrough for creating a private Kubernetes cluster with kubeadm.