8 posts with tag openshift

haproxy-spoe-rs: Deployment

Deploying the haproxy-spoe-rs SPOA agent in production — container image, podman-compose, Kubernetes, HAProxy configuration, health checking, logging, and systemd.

· 8 minutes reading time

vigil-log-relay: Kubernetes Log Collection Without a DaemonSet

vigil-log-relay streams logs from Kubernetes pods, HTTP endpoints, or Unix sockets and forwards them as ndjson to any TCP-capable log collector. No DaemonSet, no node-level access, no filesystem mounts — just a single binary with a namespace-scoped ServiceAccount.

· 10 minutes reading time

cert-manager-webhook-libdns: One Webhook, Many DNS Providers

How cert-manager-webhook-libdns enables DNS-01 across many DNS providers via libdns, with practical operational improvements, compatibility automation, and a quick Kubernetes deployment path.

· 3 minutes reading time

ESO (External Secrets Operator) Breaking Change in 0.10.0

ESO (External Secrets Operator) breaking change in 0.10.0: "secret does not contain needed label... Update secret label to use it with webhook".

· 2 minutes reading time

How does SNI Routing work in HAProxy

Learn how HAProxy container uses TLS Server Name Indication (SNI) to route encrypted TCP connections without decrypting them — enabling multiple services like Nextcloud and XMPP to share port 443.

· 4 minutes reading time
· 2 minutes reading time

Session stickiness in OpenShift

How OpenShift and Kubernetes handle session stickiness via HAProxy cookie-based routing.

· 6 minutes reading time
· 1 minute reading time