Published inITNEXT·PinnedMember-onlyBare-metal Kubernetes with Kubeadm, NGINX ingress controller and HAProxyHere are some of my notes for setting up a “bare-metal” Kubernetes (k8s) cluster. I put bare-metal in double quotes because I actually used AWS EC2 instances but only as plain VMs, with the goal of being able to deploy this scenario in any cloud or on-premise infrastructure, without depending…Kubernetes8 min readKubernetes8 min read
Published inAWS Tip·May 10, 2022Member-onlyDeploying the Traefik Application Proxy with TLS in AWS EKSI’ve been reading many blogs posts, Stack Overflow replies, GitHub issues threads, etc., all about getting Traefik to work properly with TLS in an AWS EKS Kubernetes cluster. They all stopped short of giving an end-to-end solution which worked for me. …Traefik6 min readTraefik6 min read
Apr 2, 2022Member-onlyDifference between Ingress, Ingress controller, and API gateway in KubernetesThere is no shortage of articles explaining the concepts of Kubernetes Ingress controllers and Ingress objects. I want to add a quick explanation that helped me understand the difference between these two types of objects. An Ingress controller is similar to an nginx instance that you install on a host…Nginx3 min readNginx3 min read
Published inITNEXT·Jan 19, 2022Member-onlyDeploying an Istio Gateway with TLS in EKS using the AWS Load Balancer ControllerI have been using Linkerd as a service mesh for a while. A new requirement that has come up is to do service-to-service authorization, which is possible but cumbersome with Linkerd. Istio offers easier integration with Open Policy Agent and other external authorization systems. But this post is not about…Istio9 min readIstio9 min read
Published inAWS Tip·Jan 4, 2022Member-onlyDockerless containers with Podman on MacOSDocker the company has been throwing wrenches lately into what used to be a smooth user experience with their new Terms of Service for Docker Desktop and various limits imposed on image pulls from DockerHub. …Docker5 min readDocker5 min read
Published inTowards Dev·Dec 19, 2021Member-onlyBlogging in Golang with WriteFreely and CaddyI realize it is ironic to write a Medium post about setting up a personal blogging platform, but more and more people are looking at doing that these days — people who are concerned about privacy, or who want to have more control over their writing, or who want to…Golang4 min readGolang4 min read
May 24, 2021Member-onlyInstalling custom CA certificates in Ubuntu 20.04A fairly common scenario that I’ve encountered is to have a server that has self-signed SSL certificates. In that case, client utilities such as curl will refuse to work unless…Ssl1 min readSsl1 min read
Published inITNEXT·Apr 30, 2021Member-onlyAdventures with Nexus in Kubernetes: database corruption and storage managementKids, when they teach you not to run databases in Kubernetes, please pay attention! I wish I followed this advice before rolling out a Sonatype Nexus artifact repository in Kubernetes. …Kubernetes10 min readKubernetes10 min read
Published inTowards Dev·Mar 18, 2021Member-onlyUsing the Paketo nginx buildpack to build an nginx Docker imageCloud Native Buildpacks are a modern way of creating container images without a Dockerfile. They work by inspecting the source code and applying industry best practices in running build scripts for that particular language, then packaging up the build artifacts into an OCI compatible container image. …Buildpack5 min readBuildpack5 min read
Published inITNEXT·Mar 9, 2021Member-onlyGitOps with Flux and Helm OperatorThese are some notes I took for myself because I’ve done this exercise over and over again over the last couple of years. The idea is to use GitOps to deploy services to a Kubernetes cluster. The main advantage of GitOps in my view is that it allows all members…Gitops6 min readGitops6 min read
