Posts Tagged "Kubernetes"

Most Infrastructure as Code Is Broken — and Reconciliation Is Only Half the Reason

Run terraform plan against infrastructure nobody has touched in a month and watch it propose changes. That drift is the absence of a reconciliation loop. But the missing loop is only half of why most Infrastructure as Code is broken — and bolting a loop onto the other half just gets you to broken faster.

Control Repositories

A control repository is a git repository whose contents declare what should be running, intended to be reconciled by an automated controller. It looks like a source repo, but the discipline is different — reviews focus on what the system should be, duplication is often intentional, and the head of main is the state of the platform right now.

Metrics, Logs, Traces, and Events: What's Actually Different

Four observability signals that get thrown around interchangeably. Understanding what makes each one distinct and where they overlap determines whether your observability stack scales or collapses under its own weight.

FluxCD vs ArgoCD: Architectural Comparison

A deep comparison of the architectural differences between FluxCD and ArgoCD for experienced Kubernetes platform engineers, covering CRD design, state management, controller models, and where each tool wins.

GitOps

GitOps is not just keeping YAML in git. It is a specific operational model where a controller in the cluster continuously reconciles actual state against desired state declared in a git repository, providing audit trail, reproducibility, drift correction, and safe rollback.

Shell Functions

A collection of useful shell functions and aliases for Kubernetes debugging and daily operations, from context switching to JWT decoding to Prometheus config extraction.

Cross-Cloud Kubernetes Clusters with AWS IRSA and Talos Linux

How to provision Kubernetes clusters on Talos Linux with OIDC-based AWS IRSA integration using Terraform, enabling cross-cloud workloads that authenticate to AWS services without static credentials.

Vault Operator Notes

Operational notes on running the Vault Operator in Kubernetes, covering CRD configuration, secrets management, authentication testing, and Cert Manager integration.