Tag: kubernetes

Vector vs Fluent Bit: Modern Log Shippers

Vector vs Fluent Bit log shippers: Rust-based transforms and sinks vs lightweight C agent. Config, VRL, footprint, and when each wins.

Kaniko & Buildah: Daemonless Container Builds

Daemonless OCI image builds in CI without Docker-in-Docker risks. Kaniko vs Buildah compared, when each fits, and which one suits your pipeline.

ArgoCD ApplicationSets: One Manifest, Many Clusters

ArgoCD ApplicationSets let one template generate dozens of GitOps Applications across clusters. Covers List, Cluster, Git, Matrix, and PR generators with real patterns.

OPA & Rego: Policy as Code Beyond Kubernetes

OPA and Rego aren't just Kubernetes gatekeepers. Block :latest tags in CI, enforce Terraform resource tags, and filter HTTP APIs.

Headlamp: K8s UI Without the License Drama

Headlamp is the CNCF-backed Kubernetes UI that won't hold your clusters hostage. Deploy it, add OIDC auth, and extend it with plugins for your home lab setup.

K9s vs Lens vs Headlamp: Cluster UIs

K9s, Lens, and Headlamp compared for Kubernetes cluster management, find the UI that fits your workflow: terminal TUI, desktop GUI, or self-hosted web app.

Krew: Kubectl Plugins You'll Actually Use

Krew is the kubectl plugin manager. These are the plugins that genuinely save time in a home lab Kubernetes setup, plus exactly how to install them all fast.

KEDA: Event-Driven Autoscaling Self-Hosted

KEDA lets Kubernetes scale workloads on queue depth, cron schedules, and broker lag, including scale-to-zero for serious home lab resource savings overnight.

Crossplane vs Terraform for Home Lab

Crossplane vs Terraform and OpenTofu for home lab infra: GitOps-native Kubernetes CRDs versus battle-tested HCL, which one actually fits your k3s cluster?

Goldilocks + VPA: Right-Size Pods Without Guessing

Stop guessing Kubernetes pod resource limits. Goldilocks + VPA analyze real usage and recommend exactly what CPU and memory your containers need to run.

Capsule: Multi-Tenancy for Home Lab k3s

Stop handing out cluster-admin access to everyone. Capsule gives k3s lab tenants real namespace isolation without the overhead of spinning up vCluster.

Sealed Secrets vs External Secrets Operator

Sealed Secrets vs External Secrets Operator: which Kubernetes secret manager fits your GitOps workflow best, home lab cluster or production multi-tenant setup?