Tag: #devops
Writing on GPUs, LLMs, MLOps, Kubernetes — and mindset · 193 posts
From Ingress to Gateway API — Why, What, and How It Changes
Starts from the limits of Ingress (annotation hell, no role separation), then lays out the Gateway API resource model in a mapping table. Covers the ingress2gateway migration tool, per-controller support status, a gradua
2026-06-14 · 8 min read #ingress#gateway-api#kubernetes#networking#migrationExposing TCP/UDP Services with Ingress — The Limits of L4 and How to Work Around Them
Ingress is fundamentally an L7 (HTTP) abstraction. Yet when you must expose TCP/UDP services like databases, game servers, or DNS, this post shows how to use the ingress-nginx ConfigMap, Traefik EntryPoints, TLS passthro
2026-06-14 · 8 min read #ingress#kubernetes#tcp#udp#networkingingress-nginx Security Hardening — WAF, mTLS, Blocking Annotation Risks
A security hardening guide for ingress-nginx: disabling snippet annotations and RBAC, ModSecurity/Coraza WAF integration, client-certificate mTLS, external auth, TLS policy, rate limiting, CVE response, multi-tenant isol
2026-06-14 · 11 min read #ingress#kubernetes#nginx#security#devopsAdvanced Ingress Protocols — gRPC, WebSocket, HTTP/2, HTTP/3
A practical guide to handling gRPC, WebSocket, HTTP/2, and HTTP/3 (QUIC) in Kubernetes Ingress. Covers per-controller support, annotations, TLS ALPN, troubleshooting, and the migration path toward the Gateway API, with h
2026-06-14 · 10 min read #ingress#kubernetes#grpc#websocket#http2Ingress Controller High Availability and Scaling
An operations guide to running an Ingress controller with zero downtime: HA topologies (DaemonSet vs Deployment+HPA), HA per exposure method, graceful drain and zero-downtime deploys, minimizing reload impact, leader ele
2026-06-14 · 11 min read #ingress#kubernetes#nginx#high-availability#networking2026 Ingress Controller Comparison — Benchmarking 8 Options and a Selection Guide
A comprehensive comparison of ingress-nginx, Traefik, HAProxy, Contour, Envoy Gateway, Kong, APISIX, and Emissary across configuration model, performance, observability, Gateway API support, and licensing. Includes selec
2026-06-14 · 13 min read #ingress#kubernetes#nginx#networking#devopsHAProxy Ingress Controller — A Battle-Tested Load Balancer Enters Kubernetes
A deep dive into how HAProxy, a load balancer proven over more than two decades, enters Kubernetes as an ingress controller. We cover the difference between the official haproxytech project and the community jcmoraisjr p
2026-06-14 · 20 min read #haproxy#ingress#kubernetes#load-balancing#networkingApache APISIX Ingress Controller — A Deep Dive into etcd-Based Dynamic Routing
A deep dive into how the Apache APISIX Ingress Controller delivers zero-downtime configuration changes through etcd-based dynamic routing. Covers the architecture, the ApisixRoute/ApisixUpstream/ApisixPluginConfig custom
2026-06-14 · 20 min read #apisix#ingress#kubernetes#api-gateway#networkingThe Complete Traefik Guide — IngressRoute, Middleware, and Dynamic Configuration
A practical walkthrough of Traefik from its architecture (EntryPoint, Router, Middleware, Service) to IngressRoute CRDs, middleware chaining, automatic TLS, Gateway API support, Helm deployment, and troubleshooting. It c
2026-06-14 · 14 min read #traefik#ingress#kubernetes#networking#devopsIngress Observability — Metrics, Access Logs, and Tracing
Define the golden signals for an Ingress controller and build a practical observability stack: ingress-nginx Prometheus metrics, Grafana dashboards, structured access logs shipped to Loki, OpenTelemetry distributed traci
2026-06-14 · 11 min read #ingress#kubernetes#nginx#observability#networkingingress-nginx Deep Dive — Architecture, Annotations, and Templates
A practitioner-focused deep dive into the ingress-nginx controller: its internal architecture, the essential annotation catalog, ConfigMap global tuning, snippet security risks, and the 2026 reality of maintenance mode a
2026-06-14 · 12 min read #ingress#kubernetes#nginx#networking#devopsIngress Multitenancy and Cost Optimization — A Platform Teams Choice
The trade-offs of a shared controller vs per-tenant controllers, namespace isolation, load balancer cost, resource quotas, noisy-neighbor prevention, security boundaries, and showback models — multi-tenant Ingress operat
2026-06-14 · 9 min read #ingress#kubernetes#networking#multitenancy#devopsKubespray Deep Dive — Building Production On-Prem Kubernetes with Ansible
A complete walkthrough of building production-grade Kubernetes clusters on bare metal with Kubespray. Covers inventory design, dissecting key groupvars, HA control planes, air-gapped environments, day-2 playbooks for upg
2026-06-13 · 30 min read #kubernetes#kubespray#ansible#onprem#baremetalBackstage Scaffolder — Turning Golden Paths into Code
How to codify golden paths with the Backstage Scaffolder. Covers a full template.yaml dissection, built-in actions and Nunjucks templating, custom action development, injecting organizational standards into skeletons, te
2026-06-13 · 14 min read #backstage#scaffolder#golden-path#platform-engineering#devopsBackstage in Production — TechDocs, Plugin Development, and the Production Checklist
Part 3 of the Backstage IDP series. Covers the docs-as-code pipeline with TechDocs and S3 publishing, frontend/backend plugin architecture and custom plugin development, the permission framework, upgrade strategy, and pe
2026-06-13 · 14 min read #backstage#techdocs#plugins#platform-engineering#devopsPlatform Engineering in Banking — The Marriage of Backstage and Governance
What platform engineering offers in a banking environment where approvals and security procedures stretch lead times to weeks. Covers Backstage golden paths with regulatory requirements built in, Scaffolder actions wired
2026-06-13 · 16 min read #devops#platform-engineering#backstage#finance#governanceBuilding an IDP with Backstage Part 1 — The Software Catalog Is Everything
A deep dive into the software catalog, the foundation of any Backstage-based Internal Developer Portal. Covers the entity data model, practical catalog-info.yaml authoring, GitHub auto-discovery, the ownership model, met
2026-06-13 · 15 min read #backstage#idp#platform-engineering#devops#software-catalogMastering systemd Timers — Time to Graduate from cron
Sparked by the Hacker News hit You do not love systemd timers enough, this post walks through the structural limits of cron and everything systemd timers offer. OnCalendar syntax, Persistent catch-up, failure notificatio
2026-06-12 · 15 min read #linux#systemd#cron#scheduling#devopsThe Terminal TUI Renaissance — Developers Leaving GUIs and Coming Back to the Terminal
With the HTTP client Slumber featured on HN and GeekNews, the TUI tool renaissance is back in the spotlight. This post covers the best TUIs by category — lazygit, k9s, lazydocker, yazi, btop — plus fzf recipes, tmux-base
2026-06-12 · 14 min read #tui#terminal#devops#productivity#toolsSCIM 2.0 Deep Dive — The Standard for Automated User Provisioning
SSO alone cannot manage the account lifecycle. This post takes a practitioner-level deep dive into SCIM 2.0: the spec structure (RFC 7642/7643/7644), User/Group schemas, REST endpoints and PATCH semantics, support in Okt
2026-06-12 · 18 min read #scim#iam#provisioning#sso#security