DevOps. Self-hosted. Security.
RSS FeedNotes on DevOps, infrastructure, self-hosting and cybersecurity — practical guides from real-world operations.
Read the posts below or head over to the About page.
Recent Posts
-
In-Place Pod Resize reaches GA in Kubernetes 1.35: resizing CPU/memory without restarting pods
Kubernetes 1.35 marks In-Place Pod Resize stable: requests and limits on a running pod can change without killing containers. We cover the resize subresource, container resize policies, what still forces a restart, VPA's InPlaceOrRecreate mode, and the fallout for the scheduler and cluster autoscaler.
-
Helm, grown up: OCI registries, dependencies, and charts without the pain
How to build a Helm chart you're not ashamed to hand off to GitOps: values.schema.json instead of copy-paste, library charts and condition instead of duplication, OCI registry publishing instead of index.yaml, and where Helm loses to Kustomize.
-
KRO: composite Kubernetes APIs without writing your own operator
Kube Resource Orchestrator bundles a Deployment, Service, ConfigMap, and an external Crossplane resource into a single composite CRD without a line of Go. We break down ResourceGraphDefinition, compare it to Crossplane Compositions and a condition-heavy Helm chart, and look at where KRO loses.
-
Scorecards for platform teams: measuring whether the service catalog actually works
A service catalog is a showcase; scorecards are the lever. How to compute quantitative security/reliability/documentation metrics on top of Trivy, Renovate, and Sentry you already run, via Backstage TechInsights, without buying a commercial IDP.