just another tech blog site...

Expose kubernetes service using CloudFlare Argo Tunnel

Last February, I blogged how to use Inlets which allows you to expose your on-prem kubernetes cluster to the big bad internet using an exit node which is a public VPS. It works as it claims but this may not be for everyone as you need to pay extra $/mo for the public VPS. Like anything in IT- there’s many ways to skin a cat. Now, i’ll be detailing another way to achieve this using CloudFlare Argo Tunnel w
Read More

Remove failed node in TKG after MachineHealth checks mark it failed

With Tanzu Kubernetes Grid Cluster API implements Machine Health-Check that provides node health monitoring and node auto-repair for Tanzu Kubernetes clusters. In action, what happens is it automatically consolidates the desired state with regards to node configuration in the event of failure. Saw this in action when power wen-out and caused one my worker nodes to be corrupted. As a response, the cluster-api provisio
Read More

Goodbye Metallb – Hello AVI LB. How to use Avi LB on your on-prem kubernetes

NOTE: This post is based on Tanzu Kubernetes Grid. If you are using other kubernetes release, installing/using AVI Kubernetes Operator manually should work. With the release of Tanzu Kubernetes Grid ( tkg 1.3), Avi Kubernetes Operator can be pre-configured as part of kubernetes cluster creation. This helps streamline setting up Type:LoadBalancer especially for on-prem kubernetes install. This is HUGE as it removes th
Read More

Setup Harbor Registry with Traefik as Ingress Controller and LetsEncrypt Certificate

For this post, I’ll document how to setup Harbor registry using Traefik as an ingress controller with a valid certificate from LetsEncrypt . Documentation around the topic is scattered in different places and people just assumes you’ll figure out the trivial details. So without further ado… let’s start with a quick pre-requisites. Pre-requisite As an image registry, Harbor needs to have a vali
Read More

Expose your On-Prem Kubernetes to the Internet with Inlets!

DISCLAIMER: I’m not affiliated with inlets/ openfaas. I bought inlets-pro license on my own as it’s a cool tech which answers limitations to my current home-lab setup. As with anyone running an on-premise Kubernetes, exposing services internally is straight forward process – setting up services/ ingress. voila! You got your application consumable by anyone internal to your network. Now to have it ac
Read More

Salt Stack Enterprise Installation gotchas

New year.. new stack (get it?) For this year – I wanted to learn a new configuration management I’ve been using at home. Although ansible CLI has been good and dependable, AWX has left a bad taste. The high resource utilization and cumbersome way of installing in Kubernetes are good reason to look at other options. Good thing, being with VMware allows us to try the softwares that are currently in our solu
Read More

Certified Kubernetes Security Specialist (CKS) – Exam Tips

Happy New Year!Before the end 2020, I managed to pass the recently released Certified Kubernetes Security Specialist (CKS). It took two tries to pass it since the domain is a whole new beast compared to CKA-CKAD. In addition, studying for it was also a challenge since it was just released officially last November 2020. For people looking at how to prepare, here’s some general tips in preparing for the exam (wit
Read More

Continuous deployment of Tanzu Kubernetes Cluster using Gitlab CICD

Quick demonstration of how to utilize tkg-cli and Gitlab CICD to provision kubernetes cluster. This allows anyone to provision/scale/delete kubernetes cluster by just committing a cluster definition to git – a common usecase when employing GitOps. Overview of how it’s done: Python script gets executed as part of the GitlabCICD which does a git diff to determine the appropriate action to perform Any files
Read More

How to reuse a PersistentVolume/PV in Kubernetes

If you’re reading this – you either: sweating as you can’t recover a data from a POD that was using a PV or.. looking for ways to safely delete PODs without affecting storage stored in a PV Either way, came across the same dilemma while I was migrating my apps to argocd. Took awhile to search for this so I’m documenting for anyone wanted to have the solution. If the PV is already released, ski
Read More