Posts

Proposal: Migration from Cluster Autoscaler to Karpenter for EKS Cluster Overview The most common approach to scaling Kubernetes clusters in AWS is to use Cluster Autoscaler (CA), which automatically adjusts the number of nodes based on pod resource requirements. However, CA has limitations when managing mixed-instance Auto Scaling Groups (ASG), leading to inefficiencies in scaling down nodes. To address these issues, we propose migrating to Karpenter, a Kubernetes-based node provisioning solution that offers advanced features like direct EC2 provisioning and customizability....

Manually setting up PHP applications can be tedious and error-prone. By using AWS services and Terraform, we can automate our infrastructure setup, providing a scalable and secure environment for our PHP blog. This guide will walk we through a basic architecture, considerations, and common pitfalls. At the end, we’ll be able to host our blog with minimal effort and manage it like a pro. The Architecture The setup consists of the following components:...

Optimizing Vault Costs with serviceaccount_name for Identity Aliases Hashicorp Vault SaaS bills on client usage, and a client is everything from a user to a machine. More on this here. The problem is that when a developer removes a chart and redeploys it, vault will count the Kubernetes ServiceAccount as a distinct new app, which isn’t quite true, because it’s the same app we had before and we were billed for....

A Beginner’s Guide to DNS - From Domain Purchase to Establishing Your Online Presence The Common Query: What Happens After Buying a Domain? As an IT professional with a sysadmin background and cloud infrastructure focus, I often get DNS-related questions from programmers and colleagues who are just starting out with their own websites. One common confusion that arises post-purchase is about the role and setup of DNS hosting. This post aims to clarify these concepts, using my own experience with setting up https://cloudcat....

Managing Secrets in Kubernetes with Helm and HashiCorp Vault In the dynamic landscape of cloud migrations, securely and efficiently managing application configurations, particularly secrets, is a critical task. This article explores a practical scenario where an organization is migrating its applications from on-premises infrastructure to Amazon EKS, using HashiCorp Vault’s CSI driver to handle secrets. Here, we’ll dive into the challenges and solutions of using environment variables to access these secrets—a common yet sensitive practice—and provide a step-by-step guide to implementing robust solutions using Helm hooks....