Enroll a Kubernetes Cluster into Teleport CE (Helm)
This post follows Teleport’s official Kubernetes Access “Getting Started” flow, using the Web UI guided enrollment (Helm) and validating access […]
Kubernetes, Teleport
Hands-On DevOps & Homelab Experiments
From Kubernetes and Ceph to Proxmox, Kafka, Jenkins, Vault, Android, and CI/CD, every guide here is a tested, step-by-step walkthrough from my lab.
Teleport
Enroll an Ubuntu 24.04 Server as a Teleport SSH Resource (Community Edition, Web UI)
This is a follow-up to my Teleport installation guide: That post builds a single-node Teleport cluster (Auth + Proxy +
Teleport
Install Teleport Community Edition on Ubuntu 24.04 (Internal DNS + Let’s Encrypt DNS-01 via Cloudflare, TLS on :443)
This guide installs a single-node Teleport cluster (Auth + Proxy + SSH service on one host) on Ubuntu 24.04, secured
Smallstep
Use Step CA as an ACME Server (ACME v2) and Issue/Renew TLS Certificates with Certbot + NGINX
This guide enables ACME v2 on an existing Smallstep Step CA deployment, then shows how a host like test.maksonlee.com can
Keycloak, Smallstep
Enable Step CA SSH Certificates with Keycloak OIDC (Groups → Principals) + Configure Ubuntu Servers to Trust the CA (Ubuntu 24.04 + Windows 11)
This post extends my previous Step CA deployment: Here we add SSH short-lived certificate login using: What you’ll build Users
AWS EC2, HashiCorp Vault
Move HashiCorp Vault OSS to Another AWS EC2 Instance (Ubuntu 24.04, File Storage, AWS KMS Auto-Unseal)
This post shows how to move a single-node Vault OSS deployment from one EC2 instance to another existing EC2 host
KVM
How to Move a KVM VM on Ubuntu 24.04 to VMware Workstation Pro on Windows (QCOW2 → VMDK)
This is the reverse of my previous migration (VMware Workstation → KVM). The safe, repeatable flow is: Shutdown the VM
Backstage, Grafana Alloy
Monitor Backstage with Grafana LGTM Stack using OpenTelemetry (Alloy OTLP → Mimir)
This post migrates Backstage backend monitoring from kube-prometheus-stack (ServiceMonitor + Prometheus scrape) to an LGTM-style push pipeline: Backstage (OpenTelemetry SDK)
Grafana Alloy, Kubernetes
Install Grafana Alloy on Kubernetes
This post installs Grafana Alloy on Kubernetes as a push-only OpenTelemetry gateway and exposes: We keep OTLP/gRPC (4317) enabled inside
Ceph, Grafana, Kubernetes
Install Grafana on Kubernetes and connect it to Mimir + Loki + Tempo
This post installs Grafana (UI) on your Kubernetes cluster and connects it to your existing backends: Note: Grafana can connect