I run a bare-metal Kubernetes cluster using Cilium as the CNI, with service announcements handled through BGP peering to Cisco Nexus switches. For performance and source-IP preservation, my…
I run a bare-metal Kubernetes cluster with Cilium integrated with BGP and Cisco Nexus switches in an EVPN fabric. The cluster uses externalTrafficPolicy: Local for performance, and I…
I've been learning Kubernetes through a homelab and am trying to understand the practical purpose of mutual TLS, especially when using a service mesh such as Linkerd or…
I've been building a homelab Kubernetes cluster on Talos with Cilium and am trying to understand the practical purpose of mutual TLS, especially when using a service mesh…
I'm setting up a new Kubernetes cluster and want to improve its network security with Cilium. Each application runs in its own namespace, and FluxCD manages the deployments.…
I'm building a new Kubernetes cluster and want to improve its network security without creating an unmanageable number of policies. Each application runs in its own namespace, and…
I have an OKD cluster that is generally running well, but we are struggling with some OVN-Kubernetes features, especially EgressIP and EgressFirewall. We initially considered Cilium Enterprise because…
I'm a junior engineer designing a production-oriented reference architecture for on-premises Kubernetes and implementing it as reproducible Ansible code. The goal is not just to automate a cluster…
I'm a junior engineer designing a production-oriented reference architecture for on-premises Kubernetes and implementing it as reproducible Ansible code. The goal isn't just to automate an installation; it's…
I'm a DevOps engineer who wants to deepen my Kubernetes and Linux networking knowledge by building a small, simplified CNI plugin for educational purposes. I'm comfortable with Kubernetes,…
I'm a DevOps engineer who already knows Kubernetes and Linux, and I have programming experience in C++ but not Go. I'd like to build a small, educational CNI…
I'm building a three-node Kubernetes homelab where every node is both a control-plane and worker node. I'm considering using a single NIC per node with two VLANs trunked…
I'm building a small Kubernetes homelab with three nodes, each acting as both a control-plane and worker node. Each node has only one NIC, and I'm considering configuring…
I've started a new role where our team is re-platforming the cloud infrastructure after inheriting some unusual design decisions, including separate VPCs for nearly every resource type and…
I'm configuring a Cilium Gateway API route for Argo CD and want HTTPS both from the client to the gateway and from the gateway to the Argo CD…
I'm configuring Cilium Gateway API to expose Argo CD over HTTPS and want encryption on both hops: the client-to-gateway connection and the gateway-to-Argo CD Service connection. TLS passthrough…
I'm trying to install Calico from scratch, but the official instructions seem incomplete and several recent installation examples no longer work because the manifests and setup process have…
I'm running an IPv6-only Kubernetes cluster on-premises with globally routable addresses, BGP available, and Cilium as the CNI. Because of a temporary networking limitation in my KVM/OVN setup,…
I'm building my first Amazon EKS cluster from scratch after previously managing clusters created by other teams. I'm migrating from Beanstalk and currently plan to use Karpenter for…
Hi folks! I'm working on optimizing CoreDNS and want to set `ndots: 2` for a few specific apps in our staging environment to see how it goes. The…