28 posts with tag kubernetes

vigil-log-relay: Kubernetes Log Collection Without a DaemonSet

vigil-log-relay streams logs from Kubernetes pods, HTTP endpoints, or Unix sockets and forwards them as ndjson to any TCP-capable log collector. No DaemonSet, no node-level access, no filesystem mounts — just a single binary with a namespace-scoped ServiceAccount.

· 11 minutes reading time

AWFFull in the Cloud: Shipping Logs to Object Storage and Running in Containers

A practical guide to shipping web server access logs to AWS S3 or Azure Blob Storage using Fluent Bit, Vector, or Filebeat/Logstash — including persistent buffering, retry configuration, concurrent write safety, and log loss prevention. Covers running AWFFull as a stateless container against object storage logs and serving the generated reports as a static website.

· 10 minutes reading time

cert-manager-webhook-libdns: One Webhook, Many DNS Providers

How cert-manager-webhook-libdns enables DNS-01 across many DNS providers via libdns, with practical operational improvements, compatibility automation, and a quick Kubernetes deployment path.

· 3 minutes reading time

ESO (External Secrets Operator) Breaking Change in 0.10.0

ESO (External Secrets Operator) breaking change in 0.10.0: "secret does not contain needed label... Update secret label to use it with webhook".

· 2 minutes reading time

Building a native file upload handler for Caddy v2

How I built caddyv2-upload, a native file upload handler for Caddy v2 written in Go — the problem it solves, and how it works.

· 2 minutes reading time

How does SNI Routing work in HAProxy

Learn how HAProxy container uses TLS Server Name Indication (SNI) to route encrypted TCP connections without decrypting them — enabling multiple services like Nextcloud and XMPP to share port 443.

· 4 minutes reading time
· 2 minutes reading time

Session stickiness in OpenShift

How OpenShift and Kubernetes handle session stickiness via HAProxy cookie-based routing.

· 6 minutes reading time