Topic
13 articles
Trivy scans images, Kyverno validates deployments, but what watches over what happens once the containers are running? Falco, the CNCF project, monitors syscalls in real time and alerts as soon as abnormal behavior is detected.
The intro article covered the why of OpenTofu. This one covers the how in production: state encryption with several key providers, key rotation, migrating an existing state, and the multi-environment patterns that hold up at scale.
Migrating from Docker Swarm to Kubernetes doesn't happen over a weekend. Concept mapping, migration patterns, pitfalls to avoid and a concrete hands-on review of a production migration.
K3S isn't just a cluster for IoT. Here's how to use it as a local development environment that mirrors your production, without the €2,000 monthly cloud bills.
Setting up a complete monitoring stack on Kubernetes with kube-prometheus-stack: installation, Grafana dashboards, alerting rules, Alertmanager and production best practices.
Traefik v3 isn't just an IngressController. Middlewares, IngressRoute CRD, TCP/UDP routing, plugins, dashboard and observability: everything that makes Traefik a complete reverse proxy on Kubernetes.
GitOps is the standard for deploying to Kubernetes, and ArgoCD is its most popular implementation. A hands-on review: how it works, why it's different from a classic CI/CD pipeline, and how to structure your deployments.
Securing a production Kubernetes cluster isn't just a networking question. Vulnerability scanning, admission policies, least privilege: a hands-on review with Trivy and Kyverno.
Taskfile (Task) is a task runner written in Go that advantageously replaces Make for modern projects. A look at its history, its advantages, and a comparison with Make, Just and shell scripts.
I sat and passed the CKA (Certified Kubernetes Administrator) in March 2026. Here's how I prepared, what the exam really tests, and what I concretely took away from it.
transfer.sh is a widely used command-line file-sharing tool, but it had no official Helm chart. I filled that gap with an open source contribution and opened a PR on the upstream repository.
GitLab has thoroughly reworked the reusability of its pipelines. Typed inputs replace fragile variables, components structure sharing, and the catalog lets you discover them. A practical overview.
In August 2023, HashiCorp changed Terraform's license. A few weeks later, OpenTofu was born under the Linux Foundation's umbrella. A look at the project's genesis, what new things it brings, and why it deserves your attention.