Posts

Managing DNS records manually is one of those tasks that starts simple but quickly becomes a pain in the neck. Every time you deploy a new service, create a new route, or change an IP address, you're manually logging into your DNS provider's web interface, clicking through menus, and hoping you don't make a typo. If you’re running Kubernetes with Gateway API or Ingress resources, you’re probably already annotating your routes with hostnames. Wouldn’t it be nice if those DNS records just… appeared? ...

If you've been living under a rock, or maybe just busy with real life stuff, you might've missed the recent news that the fan favorite ingress-nginx is going to be deprecated As someone who uses this software extensively both personally and professionally, this is a hard pill to swallow, but a perfect opportunity to prioritise learning the Gateway API. After all, if you’re going to migrate anyway, you might as well take the leap sooner rather than later ...

I've been working with Kubernetes for some time now, and while my preferred platform is Talos, one of the challenges I've always faced is how to test, develop and iterate quickly without spinning up a full cluster or dealing with expensive cloud resources. That is where kind (Kubernetes in Docker) comes in handy What problem does this solve? Kind allows you to quickly and easily spin up Kubernetes clusters from within docker itself. I use this when I need to test things like GitOps configurations that have multiple cluster requirements (think ApplicationSets in ArgoCD). ...

In recent times I've been automating the builds of many Kubernetes clusters (1500+!) across my organisation, but one of the challenges I've faced has been how to manage secrets. It’s one of those things that can be a real headache if you don’t automate the pain away, particularly when it comes to a large number of clusters Enter The External Secrets Operator What problem does this solve? If your organisation is anything like mine, secret management at scale can become a real issue (Yes, we have historically seen secrets committed to git). ...