DevOps. Self-hosted. Security.
RSS FeedNotes on DevOps, infrastructure, self-hosting and cybersecurity — practical guides from real-world operations.
Read the posts below or head over to the About page.
Recent Posts
-
PreDelete hooks in Argo CD 3.3: why deleting resources in GitOps was quietly dangerous
Argo CD 3.3 adds PreDelete hooks — a gate before an actual prune that simply didn't exist before. We cover what changed, the hook-delete-policy semantics, and how to protect stateful resources.
-
In-Place Pod Resize reaches GA in Kubernetes 1.35: resizing CPU/memory without restarting pods
Kubernetes 1.35 marks In-Place Pod Resize stable: requests and limits on a running pod can change without killing containers. We cover the resize subresource, container resize policies, what still forces a restart, VPA's InPlaceOrRecreate mode, and the fallout for the scheduler and cluster autoscaler.
-
Helm, grown up: OCI registries, dependencies, and charts without the pain
How to build a Helm chart you're not ashamed to hand off to GitOps: values.schema.json instead of copy-paste, library charts and condition instead of duplication, OCI registry publishing instead of index.yaml, and where Helm loses to Kustomize.
-
KRO: composite Kubernetes APIs without writing your own operator
Kube Resource Orchestrator bundles a Deployment, Service, ConfigMap, and an external Crossplane resource into a single composite CRD without a line of Go. We break down ResourceGraphDefinition, compare it to Crossplane Compositions and a condition-heavy Helm chart, and look at where KRO loses.