Tagged

Kubernetes

#kubernetes

Kubernetes

Reducing Pod Startup Times - Part 1: Running an Image Pool

A pod can sit in ContainerCreating for minutes on a node that has been up for weeks. It has capacity. It just doesn't have the image. Part 1: keeping an image pool warm on every node, and where that breaks.

ArgoCD

Too Long, Didn't Apply: Server-Side Apply for Oversized CRDs in Argo CD ApplicationSets

TemplatePatch is one of Argo CD's lesser-known features. It is also the cleanest way to enable server-side apply for exactly one generated Application - and to stop oversized CRDs from failing to sync.

Kubernetes

Migrating a Bitnami PostgreSQL Helm Release to CloudNativePG

The Bitnami catalog moved most images to bitnamilegacy and stopped updating them. CloudNativePG can bootstrap a new cluster straight from the running Bitnami instance — here's the walkthrough.

GitOps

The Argo CD Ownership Conflict — A kube-green Case Study

Any controller that writes to a field Argo CD also manages — sleep schedulers like kube-green, autoscalers, cert rotation, whatever — collides with self-heal the same way. Five ways to solve it, via a kube-green case study.

Cilium

A Highly Available Egress Gateway for Kubernetes with Cilium and kube-vip

Cilium's Egress Gateway gives your pods a static, routable identity for outbound traffic — but it won't manage that IP for you. Here's how to combine it with kube-vip to get a dynamic, BGP-announced, highly available egress IP.

Cilium

Consolidating to Cilium: Replacing kube-proxy, MetalLB, and ingress-nginx in Three Phases

In March 2026, ingress-nginx reached end-of-life. For clusters already running Cilium as their CNI, this is the right moment to go all-in: replace kube-proxy, MetalLB, and ingress-nginx with Cilium's built-in equivalents — ending up with a single networking component doing the work of four.

Kubernetes

Reviving a Kubernetes Cluster After Long-Term Downtime: Expired Certificates Edition

Learn how to recover a Kubernetes cluster after long-term downtime due to expired certificates. This step-by-step guide covers control plane restoration, worker node rejoining, and tips to prevent future issues.

Container

Docker Hub Rate Limits Are Coming – Here’s How to Outsmart Them with a private Registry

Avoid Docker Hub rate limits by using Harbor as a proxy cache. Learn how to install and configure Harbor, redirect image pulls in Kubernetes, Docker, Podman, and OpenShift, and reduce the costs of Docker Hub subscriptions with IDMS/ITMS, admission webhooks and CoreDNS rewrites.

Prometheus

Exposing Linux User and Group information with the Prometheus Textfile Collector

Learn how to set up the Textfile Collector to expose Linux user and group data as Prometheus metrics.

ArgoCD

Enhance Argo CD Observability: A Step-by-Step Guide to Integrating Prometheus Metrics into the UI

Bringing more observability to the Argo CD UI

Helm

Signing Helm Charts with PGP using the GitHub Releaser Action

This guide will show how you can sign your Helm Charts in an automated way by using the GitHub Releaser Action with a PGP key.

Firefox

Run a private Sync Server for Firefox on Kubernetes

If you don’t want to store all your data in the Firefox Cloud you can run your own self-hosted Firefox Sync Server.

Helm

Using GitHub as a Helm Chart Repository

Using GitHub Pages to create a Helm Repository in a secure and stable way.

Kubernetes

A minimal minikube cheat sheet

A collection of commands and tips and tricks for using minikube.

Kubernetes

Using minikube with nip.io on WSL2

Minikube combined with nip.io makes accessing and developing applications a breeze.

MySQL

Fixing the 'authentication plugin not loaded' issue on Bitnami's MySQL Helm Chart

When you upgrade an existing installation of the Bitnami MySQL Helm Chart from a version such as 10.x to an 11.x version, you might see this error message and have trouble starting your Pods: SQLSTATE[HY000] [1524] Plugin 'mysql_native_password' is not loaded The root

Kubernetes

How to permanently redirect traffic with nginx in Kubernetes

In this article I will show a quick way to permanently redirect traffic with the nginx Ingress Controller in Kubernetes using an Ingress object.

Helm

Automating Blackbox Monitoring for your Helm Chart

In this article, I explain the concept of Blackbox Monitoring, a Prometheus CRD for defining monitoring targets, and a possible implementation of these concepts with Helm.

ArgoCD

Deploying Helm Charts through ArgoCD: Streamlining Kubernetes Deployments

Learn how to deploy Helm Charts with ArgoCD with four different approaches.

ArgoCD

Deploying Helm Charts using ArgoCD and Helmfile

Deploying Helm Charts with ArgoCD using Helmfile is not supported out of the box. In this article, I will show how to extend ArgoCD using config management plugins to support Helmfile.

Helm

A brief introduction to the use of Helm

Learn what Helm is and how you can use it to install applications into Kubernetes clusters.

Kubernetes

Granting read-only access to kubenav

This blog article shows how to grant read-only access to kubenav using a service account and RBAC permissions.

Helm

Making your Helm Chart observable for Prometheus

In this blog post, I walk you through the various steps required to make an existing Helm chart observable by Prometheus.

Kubernetes

Get rid of hard-coded IPs in your Helm charts

DNS resolution in Helm charts can be achieved using the network function getHostByName. Follow this blog post to find out how to do this.

Kubernetes

Certifications for the cloud-native world

This article is a collection of certifications you can obtain in the cloud-native world. The list contains certifications for Kubernetes, Linux, Prometheus different Cloud Providers and many more.