Search for a command to run...
Articles tagged with #kubernetes
OpenTofu reference — drop-in Terraform replacement, now with native state encryption and built-in testing. Migration is usually trivial If you're using Terraform Open Source, switching to OpenTofu is mostly changing the binary. Your .tf files don't n...
Harbor patterns for running a self-hosted container registry in Kubernetes. Why Harbor over a plain Docker registry Plain Distribution (the open source registry) is just push/pull. Harbor adds: Project isolation with RBAC Vulnerability scanning (Tri...
Dapr patterns for distributed microservices on Kubernetes. The core idea: stop implementing distributed systems primitives yourself # Without Dapr: you implement retry logic, service discovery, circuit breaker, mTLS response = requests.get(f"http://u...
Cilium patterns for eBPF-based K8s networking. The feature that makes Cilium different: L7 NetworkPolicy Standard K8s NetworkPolicy can only filter by IP/port. Cilium goes further: kind: CiliumNetworkPolicy spec: endpointSelector: matchLabels: ...
Argo Rollouts patterns for progressive delivery in Kubernetes. Canary rollout with explicit pauses strategy: canary: steps: - setWeight: 10 # 10% → new version - pause: {duration: 5m} # wait 5 min - setWeight: 30 ...
OPA and Gatekeeper patterns for K8s policy enforcement. ConstraintTemplate: the Rego lives here spec: targets: - target: admission.k8s.gatekeeper.sh rego: | package requiredlabels violation[{"msg": msg}] { provi...