-
Easy Kubernetes Secret Integration with ExternalSecrets
In a Kubernetes cluster, A Kubernetes Secret is a resource type to hold sensitive data for the apps to use, such as an API key or database password. Secrets are namespaced so if I have RBAC access to a namespace, I can pretty much see all the secrets there, as the secrets are only base64…
-
Installation of Fedora 36 on Dell XPS 13 9380
I happened to have acquired a used Dell XPS 13 9380, which is a nice little ultrabook with Intel 8th gen i7 CPU, 16GB memory(not upgrade-able), 512GB nvme SSD and a beautiful 13″ 4k screen. It has Windows 10 installed. Of course I have no intention to continue to use the stock Windows 10. At…
-
Better Resilience for Kubernetes Pods
I happened to notice that all 3 pods serving this blog in my Kubernetes cluster were allocated to a same node. I thought Kubernetes will try its best to shuffle pods of a deployment into different nodes by default but guess I expected too much. Note the knode3 below Have you spotted the problem? In…
-
How to Regulate Egress Access in Kubernetes with Istio
Usually I don’t mind to give pods unlimited egress access, ie. the pods I deployed can access the whole internet if it needs to. However when the pods take input from users it’s a whole different story. For example, running some sandbox applications such as an online Python learning environment, the workload can be abused…
-
Flyway Container, MySQL and SSL/mTLS
Flyway is a handy utility to manage database schema migrations. Very similar to the schema migration mechanism in Ruby on Rails or Django, but Flyway is a standalone tool. So it’s best suited for some project which doesn’t have database schema management yet. I needed to use Flyway for a project I worked with, the…
-
Bill Shock: The Real Cost of Tesla Model 3 After 1 Year
VicRoads timely reminded me that it’s time to renew my Tesla Model 3’s registration(rego), so it’s been a year already. I think it might be interesting to calculate the real cost of owning a (Tesla) EV. I also put imaginary figures of my previous diesel BMW there for an unfair comparison. Tesla Model 3 Previous…
-
Some Field Test with Google Cloud Run
Recently I got a chance to migrate on-premise applications to GCP(Google Cloud Platform), and ran the apps in containers via Cloud Run. Here are some pros and cons that I think about the fully managed Cloud Run. Pros: Very easy to get started. As long as the app can run in a container, it can…
-
Some Tips for CKA Exams
I’ve passed my CKA exam on my first attempt, it’s not hard because it’s the entry level certificate for Kubernetes but still a good preparation is necessary even for someone already experienced in Kubernetes. First of all, the exam is fully hands-on: every question requires a set of commands done in a terminal provided in…