Tag: devops

Open Policy Agent and Gatekeeper enforce rules across Kubernetes, block privileged pods, require labels, restrict images. Rego basics and real homelab constraints.

Claude Code puts an agentic AI assistant in your terminal for real homelab work, compose files, bash, Ansible, systemd. The honest take on cost and data.

Kustomize patches YAML with overlays. Jsonnet is a real templating language with imports and functions. Here's which K8s manifest tool to pick.

Argo Rollouts uses a Rollout CRD with a slick UI. Flagger watches your Deployment with a Canary CRD. Here's which progressive-delivery tool to pick.

Two Kubernetes-native pipeline engines from CNCF, Argo Workflows and Tekton. Different philosophies, same goal: stop using Jenkins. Honest comparison.

kubeadm is the official Kubernetes bootstrapper. k3sup is a one-shot SSH installer for k3s. Here's which one to use for your homelab cluster.

A real postmortem: how a forgotten survey-tool container, an uncapped Docker log driver, and rootless networking combined to kill prod for a Monday morning.

etcd powers Kubernetes. Consul is the service-discovery Swiss army knife. ZooKeeper is the grizzled veteran. Here's how to pick a coordination store.

Stop the .env-in-1Password dance. SOPS encrypts secrets per-key, age provides modern crypto, and git stores them safely. Here's how to ship it without the traps.

Zero-trust access for SSH, k8s, and databases, HashiCorp Boundary vs Teleport compared on identity, session recording, and self-host fit.

Three inner-loop dev tools for Kubernetes, Garden, Tilt, and Skaffold. Which one actually makes K8s development bearable? Honest comparison, no fluff.

Docker Compose Watch syncs your code into running containers without rebuilds. Here's how to set it up and why your dev loop is about to get a lot less painful.