Sync HashiCorp Vault Secrets into Kubernetes using External Secrets Operator (ESO)
This post shows how to sync secrets from HashiCorp Vault OSS into a kubeadm Kubernetes cluster using External Secrets Operator
Identity, Security & PKI
Engineering field notes
Practical DevOps & Infrastructure Notes
Tested guides for Linux, cloud, containers, and self-hosted services.
Latest articles
Containers & Kubernetes
Upgrade a 3-Node kubeadm HA Kubernetes Cluster to v1.35.0 (kube-vip + MetalLB + Traefik) on Bare-Metal Ubuntu 24.04
This post shows how to upgrade a 3-node kubeadm cluster from Kubernetes v1.34.x → v1.35.0 on Ubuntu Server 24.04, where:
Networking & Connectivity
WireGuard Site-to-Site VPN: MikroTik hEX ↔ OPNsense 25.7 on AWS
This post upgrades the previous single-PC WireGuard client setup into a site-to-site VPN: Follow-up to: Architecture What changes vs “single
Cloud, Linux & Virtualization
Install and Setup AWS CLI v2 on Ubuntu 24.04
This post shows a complete, reproducible flow: Lab context 1. Install AWS CLI v2 on Ubuntu 24.04 (x86_64) 2. Create
Cloud, Linux & Virtualization
Install FreeBSD 14.3 on KVM using Cockpit (Ubuntu 24.04)
Prerequisites Before you start, your Ubuntu 24.04 host should already have: If you haven’t set these up yet, follow this
DevOps & Software Delivery
Show Argo CD Deployments in Backstage
This post adds Argo CD deployment visibility to your Backstage entity pages without creating a new tab. Instead, Argo CD
Identity, Security & PKI
Enable Keycloak SSO (OIDC + PKCE) for Argo CD
This post shows how to enable Keycloak authentication for an existing Argo CD deployment using OIDC + PKCE, so you
DevOps & Software Delivery
Show Kubernetes Objects for a Component in Backstage (Backstage Manages Itself, In-Cluster)
This is a follow-up to: This post enables the Backstage Kubernetes view without changing any Backstage source code and without
Observability & Operations
Deploy kube-prometheus-stack on a Bare-Metal Kubernetes Cluster (Traefik + Wildcard HTTPS)
This post shows how to deploy kube-prometheus-stack (Prometheus Operator + Prometheus + Alertmanager + Grafana + exporters) on a 3-node
Containers & Kubernetes
Install Lens on Windows 11 and Connect to a Self-Managed kubeadm Kubernetes Cluster (HA API + Traefik)
Lens is a desktop Kubernetes IDE that connects directly to the Kubernetes API server. The key to a stable setup