Articles

The intro article covered the why of OpenTofu. This one covers the how in production: state encryption with several key providers, key rotation, migrating an existing state, and the multi-environment patterns that hold up at scale.

Trivy scans images, Kyverno validates deployments, but what watches over what happens once the containers are running? Falco, the CNCF project, monitors syscalls in real time and alerts as soon as abnormal behavior is detected.

Migrating from Docker Swarm to Kubernetes doesn’t happen over a weekend. Concept mapping, migration patterns, pitfalls to avoid and a concrete hands-on review of a production migration.

K3S isn’t just a cluster for IoT. Here’s how to use it as a local development environment that mirrors your production, without the €2,000 monthly cloud bills.

Setting up a complete monitoring stack on Kubernetes with kube-prometheus-stack: installation, Grafana dashboards, alerting rules, Alertmanager and production best practices.

Traefik v3 isn’t just an IngressController. Middlewares, IngressRoute CRD, TCP/UDP routing, plugins, dashboard and observability: everything that makes Traefik a complete reverse proxy on Kubernetes.

GitOps is the standard for deploying to Kubernetes, and ArgoCD is its most popular implementation. A hands-on review: how it works, why it’s different from a classic CI/CD pipeline, and how to structure your deployments.

AWS, GCP and Azure dominate the public cloud, but European providers have matured. A hands-on review of OVHcloud and Scaleway, a technical comparison, and the case for a more sovereign cloud.

Securing a production Kubernetes cluster isn’t just a networking question. Vulnerability scanning, admission policies, least privilege: a hands-on review with Trivy and Kyverno.

Taskfile (Task) is a task runner written in Go that advantageously replaces Make for modern projects. A look at its history, its advantages, and a comparison with Make, Just and shell scripts.