Tag: #devops
Writing on GPUs, LLMs, MLOps, Kubernetes — and mindset · 196 posts
Ingress Traffic Splitting — Canary and Blue-Green Deployments in Practice
A practical walkthrough of ingress-nginx canary annotations, Argo Rollouts integration, per-controller traffic splitting comparisons, blue-green patterns, and metric-based automated promotion. It also covers the 2026 shi
2026-06-14 · 16 min read #ingress#kubernetes#canary#argo-rollouts#deploymentTraefik Advanced — Middleware Design, TLS Options, Multi-Provider
A production-focused deep dive into Traefik middleware chains, forwardAuth-based SSO, TLSOption and mTLS, weighted routing and mirroring, multi-provider composition, and Yaegi plugins. We also cover canary deployments, o
2026-06-14 · 15 min read #traefik#middleware#tls#kubernetes#networkingKong Ingress Controller Guide — API Gateway-Style Ingress Through Its Plugin Ecosystem ♪ Listenable
A deep dive into Kong Ingress Controller (KIC) from an API Gateway perspective. We cover the architecture of Kong Gateway and KIC, DB-less versus DB mode, CRDs such as KongPlugin, KongIngress, and KongConsumer, the core
2026-06-14 · 20 min read #kong#ingress#kubernetes#api-gateway#networkingFrom Ingress to Gateway API — Why, What, and How It Changes
Starts from the limits of Ingress (annotation hell, no role separation), then lays out the Gateway API resource model in a mapping table. Covers the ingress2gateway migration tool, per-controller support status, a gradua
2026-06-14 · 8 min read #ingress#gateway-api#kubernetes#networking#migrationExposing TCP/UDP Services with Ingress — The Limits of L4 and How to Work Around Them
Ingress is fundamentally an L7 (HTTP) abstraction. Yet when you must expose TCP/UDP services like databases, game servers, or DNS, this post shows how to use the ingress-nginx ConfigMap, Traefik EntryPoints, TLS passthro
2026-06-14 · 8 min read #ingress#kubernetes#tcp#udp#networkingingress-nginx Security Hardening — WAF, mTLS, Blocking Annotation Risks
A security hardening guide for ingress-nginx: disabling snippet annotations and RBAC, ModSecurity/Coraza WAF integration, client-certificate mTLS, external auth, TLS policy, rate limiting, CVE response, multi-tenant isol
2026-06-14 · 11 min read #ingress#kubernetes#nginx#security#devopsAdvanced Ingress Protocols — gRPC, WebSocket, HTTP/2, HTTP/3
A practical guide to handling gRPC, WebSocket, HTTP/2, and HTTP/3 (QUIC) in Kubernetes Ingress. Covers per-controller support, annotations, TLS ALPN, troubleshooting, and the migration path toward the Gateway API, with h
2026-06-14 · 10 min read #ingress#kubernetes#grpc#websocket#http2Ingress Controller High Availability and Scaling
An operations guide to running an Ingress controller with zero downtime: HA topologies (DaemonSet vs Deployment+HPA), HA per exposure method, graceful drain and zero-downtime deploys, minimizing reload impact, leader ele
2026-06-14 · 11 min read #ingress#kubernetes#nginx#high-availability#networking2026 Ingress Controller Comparison — Benchmarking 8 Options and a Selection Guide
A comprehensive comparison of ingress-nginx, Traefik, HAProxy, Contour, Envoy Gateway, Kong, APISIX, and Emissary across configuration model, performance, observability, Gateway API support, and licensing. Includes selec
2026-06-14 · 13 min read #ingress#kubernetes#nginx#networking#devopsHAProxy Ingress Controller — A Battle-Tested Load Balancer Enters Kubernetes ♪ Listenable
A deep dive into how HAProxy, a load balancer proven over more than two decades, enters Kubernetes as an ingress controller. We cover the difference between the official haproxytech project and the community jcmoraisjr p
2026-06-14 · 20 min read #haproxy#ingress#kubernetes#load-balancing#networkingApache APISIX Ingress Controller — A Deep Dive into etcd-Based Dynamic Routing
A deep dive into how the Apache APISIX Ingress Controller delivers zero-downtime configuration changes through etcd-based dynamic routing. Covers the architecture, the ApisixRoute/ApisixUpstream/ApisixPluginConfig custom
2026-06-14 · 20 min read #apisix#ingress#kubernetes#api-gateway#networkingThe Complete Traefik Guide — IngressRoute, Middleware, and Dynamic Configuration
A practical walkthrough of Traefik from its architecture (EntryPoint, Router, Middleware, Service) to IngressRoute CRDs, middleware chaining, automatic TLS, Gateway API support, Helm deployment, and troubleshooting. It c
2026-06-14 · 14 min read #traefik#ingress#kubernetes#networking#devopsIngress Observability — Metrics, Access Logs, and Tracing
Define the golden signals for an Ingress controller and build a practical observability stack: ingress-nginx Prometheus metrics, Grafana dashboards, structured access logs shipped to Loki, OpenTelemetry distributed traci
2026-06-14 · 11 min read #ingress#kubernetes#nginx#observability#networkingingress-nginx Deep Dive — Architecture, Annotations, and Templates
A practitioner-focused deep dive into the ingress-nginx controller: its internal architecture, the essential annotation catalog, ConfigMap global tuning, snippet security risks, and the 2026 reality of maintenance mode a
2026-06-14 · 12 min read #ingress#kubernetes#nginx#networking#devopsIngress Multitenancy and Cost Optimization — A Platform Teams Choice
The trade-offs of a shared controller vs per-tenant controllers, namespace isolation, load balancer cost, resource quotas, noisy-neighbor prevention, security boundaries, and showback models — multi-tenant Ingress operat
2026-06-14 · 9 min read #ingress#kubernetes#networking#multitenancy#devopsKubespray Deep Dive — Building Production On-Prem Kubernetes with Ansible ♪ Listenable
A complete walkthrough of building production-grade Kubernetes clusters on bare metal with Kubespray. Covers inventory design, dissecting key groupvars, HA control planes, air-gapped environments, day-2 playbooks for upg
2026-06-13 · 30 min read #kubernetes#kubespray#ansible#onprem#baremetalBackstage Scaffolder — Turning Golden Paths into Code
How to codify golden paths with the Backstage Scaffolder. Covers a full template.yaml dissection, built-in actions and Nunjucks templating, custom action development, injecting organizational standards into skeletons, te
2026-06-13 · 14 min read #backstage#scaffolder#golden-path#platform-engineering#devopsBackstage in Production — TechDocs, Plugin Development, and the Production Checklist
Part 3 of the Backstage IDP series. Covers the docs-as-code pipeline with TechDocs and S3 publishing, frontend/backend plugin architecture and custom plugin development, the permission framework, upgrade strategy, and pe
2026-06-13 · 14 min read #backstage#techdocs#plugins#platform-engineering#devopsPlatform Engineering in Banking — The Marriage of Backstage and Governance
What platform engineering offers in a banking environment where approvals and security procedures stretch lead times to weeks. Covers Backstage golden paths with regulatory requirements built in, Scaffolder actions wired
2026-06-13 · 16 min read #devops#platform-engineering#backstage#finance#governanceBuilding an IDP with Backstage Part 1 — The Software Catalog Is Everything
A deep dive into the software catalog, the foundation of any Backstage-based Internal Developer Portal. Covers the entity data model, practical catalog-info.yaml authoring, GitHub auto-discovery, the ownership model, met
2026-06-13 · 15 min read #backstage#idp#platform-engineering#devops#software-catalog