How to securely manage secrets in a GitOps environment. Compares Sealed Secrets, SOPS, External Secrets Operator, and CSI Driver, with practical architecture and best practices for Vault + ESO + ArgoCD.
When connecting to AWS ElastiCache through Tailscale VPN from an on-premises K3s cluster, only large packets were being dropped while small ones went through fine. This post covers the root cause and how I resolved it.
Everything you need for real-world GitOps adoption — from the four core principles (declarative definitions, version control, pull-based deployment, continuous reconciliation) to the differences from traditional CI/CD, repository strategies, Kustomize/Helm usage, and secret management.
From Service types through Ingress, MetalLB on-premises, and finally Istio Gateway — following the limits each layer ran into and how the next one answered them.
A deep dive into how the JavaScript event loop works and how Node.js handles threading — unpacking how a single-threaded language pulls off asynchronous processing.
From Java’s ‘Write Once, Run Anywhere’ philosophy to Spring’s Tomcat thread pool, HikariCP connection pool, and Java 21 Virtual Threads. Includes a structural comparison with Node.js.
From declarative management, through Base/Overlay structure and patch strategies, to a comparison with Helm — how to tame YAML that gets copied once per environment by using inheritance instead.