Tag: kubernetes

Goldilocks + VPA: Right-Size Pods Without Guessing

Stop guessing Kubernetes pod resource limits. Goldilocks + VPA analyze real usage and recommend exactly what CPU and memory your containers need to run.

Capsule: Multi-Tenancy for Home Lab k3s

Stop handing out cluster-admin access to everyone. Capsule gives k3s lab tenants real namespace isolation without the overhead of spinning up vCluster.

Sealed Secrets vs External Secrets Operator

Sealed Secrets vs External Secrets Operator: which Kubernetes secret manager fits your GitOps workflow best — home lab cluster or production multi-tenant setup?

Dragonfly: P2P Container Image Distribution at Scale

Dragonfly turns your container registry into a P2P swarm. Stop hammering one registry with 200 nodes pulling 4GB GPU images at once.

Cilium on k3s: When eBPF Networking Pays

Replace flannel with Cilium 1.19 on k3s for eBPF routing, Hubble observability, WireGuard encryption, and L7 network policies — here's when it pays off.

k3s + Tailscale: Cluster Across Two Sites

Run a single k3s cluster spanning two physical sites using Tailscale as the WireGuard fabric — home lab server plus cloud VPS, one single kubectl context.

KubeVirt on k3s: VMs Next to Pods

Run real KVM virtual machines as Kubernetes resources on k3s. One control plane for pods and VMs — no more juggling Proxmox alongside your cluster every day.

OPA & Gatekeeper: Policy as Code

Open Policy Agent and Gatekeeper enforce rules across Kubernetes — block privileged pods, require labels, restrict images. Rego basics and real homelab constraints.

Longhorn vs Rook-Ceph

Two ways to give your K8s cluster persistent block storage — Longhorn for simplicity, Rook-Ceph for scale. Real homelab tradeoffs, not vendor marketing slides.

Gateway API vs Ingress in 2026

Ingress is the annotation-soup classic. Gateway API is the role-oriented future with proper L4/L7 separation. Here's when to migrate and when to wait.

Velero: K8s Backup and DR

Your cluster will fail. Velero captures everything — manifests, CRDs, persistent volumes — and lets you replay it on a fresh cluster. Setup, gotchas, real DR plans.

Kustomize vs Jsonnet for K8s Manifests

Kustomize patches YAML with overlays. Jsonnet is a real templating language with imports and functions. Here's which K8s manifest tool to pick.