Page 2 — Technical articles on Kubernetes, K3s, and Proxmox
In a K3s cluster, ping succeeds but HTTP requests just hang — the culprit may be an MTU mismatch inside your VXLAN overlay network. This guide covers Flannel/Calico MTU design, the PMTU blackhole phenomenon, and a step-by-step diagnostic process.
Ten years after Kubernetes launched, AI agents and LLM inference have upended three of its core assumptions: how GPUs are allocated, how autoscaling decisions are made, and how model serving is built. Here's how to rethink your K3s cluster with Dynamic Resource Allocation, KEDA, and KServe.
You configured a kubernetes service monitor on K3s, but nothing shows up in Prometheus Targets. 90% of the time, the cause is one of four connection points: label selectors, port names, RBAC, or the namespaceSelector. Here's a step-by-step diagnostic guide.
A growing number of individuals are replacing ISP-supplied routers with self-built mini PCs running open-source firmware. The same logic applies to edge Kubernetes: a hardware selection checklist and a GitOps operating model for standardizing dedicated appliances out of the fleet.
You've adopted SAST, DAST, and container scanning — yet incidents still slip into production. This article reframes CI/CD pipeline security as a four-layer design problem and walks through concrete implementation patterns for K3s/Kubernetes environments.
Even with cert-manager installed, K3s production certificates can silently expire due to Issuer misconfiguration, failed DNS validation, Let's Encrypt rate limits, or Secrets that never get reloaded. This post covers the monitoring and design choices that turn ACME auto-renewal from 'installed' into 'actually working.'
When you can't rely on a cloud load balancer for on-prem or edge K3s clusters, why does Layer2 (ARP) load balancing eventually hit a wall? A practical look at MetalLB's BGP mode vs. Cilium's BGP Control Plane, and how to decide when to migrate.
The people who go from zero Kubernetes experience to Kubestronaut (holder of every CNCF certification) share one trait: they built a breakable K3s homelab before touching an exam prep book. Here's why.
Container security guidelines often stop at 'we run a scanner.' This guide walks through the practical checklist you need to pass before production in K3s: minimal base images, vulnerability scanning, SBOM generation, signing, and admission control.
Why do Kubernetes costs on EKS/AKS balloon unexpectedly? We break down how autoscaling and cross-AZ billing hide costs, and explore how K3s-based managed infrastructure turns them into a fixed cost.