I’ve been reading many blogs posts, Stack Overflow replies, GitHub issues threads, etc., all about getting Traefik to work properly with TLS in an AWS EKS Kubernetes cluster. They all stopped short of giving an end-to-end solution which worked for me. …

There is no shortage of articles explaining the concepts of Kubernetes Ingress controllers and Ingress objects. I want to add a quick explanation that helped me understand the difference between these two types of objects. An Ingress controller is similar to an nginx instance that you install on a host…

I have been using Linkerd as a service mesh for a while. A new requirement that has come up is to do service-to-service authorization, which is possible but cumbersome with Linkerd. Istio offers easier integration with Open Policy Agent and other external authorization systems. But this post is not about…

Docker the company has been throwing wrenches lately into what used to be a smooth user experience with their new Terms of Service for Docker Desktop and various limits imposed on image pulls from DockerHub. …

I realize it is ironic to write a Medium post about setting up a personal blogging platform, but more and more people are looking at doing that these days — people who are concerned about privacy, or who want to have more control over their writing, or who want to…

Kids, when they teach you not to run databases in Kubernetes, please pay attention! I wish I followed this advice before rolling out a Sonatype Nexus artifact repository in Kubernetes. …

Cloud Native Buildpacks are a modern way of creating container images without a Dockerfile. They work by inspecting the source code and applying industry best practices in running build scripts for that particular language, then packaging up the build artifacts into an OCI compatible container image. …

These are some notes I took for myself because I’ve done this exercise over and over again over the last couple of years. The idea is to use GitOps to deploy services to a Kubernetes cluster. The main advantage of GitOps in my view is that it allows all members…