Insights & field notes
Technical notes on Kubernetes, CI/CD, Linux and DevOps practices.
Trivy scans images, Kyverno validates deployments, but what watches over what happens once the containers are running? Falco, the CNCF project, monitors syscalls in real time and alerts as soon as abnormal behavior is detected.
The intro article covered the why of OpenTofu. This one covers the how in production: state encryption with several key providers, key rotation, migrating an existing state, and the multi-environment patterns that hold up at scale.
Migrating from Docker Swarm to Kubernetes doesn't happen over a weekend. Concept mapping, migration patterns, pitfalls to avoid and a concrete hands-on review of a production migration.
K3S isn't just a cluster for IoT. Here's how to use it as a local development environment that mirrors your production, without the €2,000 monthly cloud bills.
Setting up a complete monitoring stack on Kubernetes with kube-prometheus-stack: installation, Grafana dashboards, alerting rules, Alertmanager and production best practices.
Traefik v3 isn't just an IngressController. Middlewares, IngressRoute CRD, TCP/UDP routing, plugins, dashboard and observability: everything that makes Traefik a complete reverse proxy on Kubernetes.
GitOps is the standard for deploying to Kubernetes, and ArgoCD is its most popular implementation. A hands-on review: how it works, why it's different from a classic CI/CD pipeline, and how to structure your deployments.
Securing a production Kubernetes cluster isn't just a networking question. Vulnerability scanning, admission policies, least privilege: a hands-on review with Trivy and Kyverno.
AWS, GCP and Azure dominate the public cloud, but European providers have matured. A hands-on review of OVHcloud and Scaleway, a technical comparison, and the case for a more sovereign cloud.
Taskfile (Task) is a task runner written in Go that advantageously replaces Make for modern projects. A look at its history, its advantages, and a comparison with Make, Just and shell scripts.
I sat and passed the CKA (Certified Kubernetes Administrator) in March 2026. Here's how I prepared, what the exam really tests, and what I concretely took away from it.
nerdctl mirrors Docker's syntax exactly, but talks to containerd directly. A handy tool for debugging a Kubernetes cluster, working without a Docker daemon, or experimenting with features Docker doesn't offer yet.
transfer.sh is a widely used command-line file-sharing tool, but it had no official Helm chart. I filled that gap with an open source contribution and opened a PR on the upstream repository.
GitLab has thoroughly reworked the reusability of its pipelines. Typed inputs replace fragile variables, components structure sharing, and the catalog lets you discover them. A practical overview.
In August 2023, HashiCorp changed Terraform's license. A few weeks later, OpenTofu was born under the Linux Foundation's umbrella. A look at the project's genesis, what new things it brings, and why it deserves your attention.
The Gateway API has been GA since Kubernetes 1.28. Here's why it advantageously replaces Ingress, how it works, and how to set it up with Traefik.