on DevOps space
Optimizing Vault Costs with serviceaccount_name for Identity Aliases Hashicorp Vault SaaS bills on client usage, and a client is everything from a user to a machine. More on this here. The problem is that when a developer removes a chart and redeploys it, vault will count the Kubernetes ServiceAccount as a distinct new app, which isn’t quite true, because it’s the same app we had before and we were billed for. ...
A Beginner’s Guide to DNS - From Domain Purchase to Establishing Your Online Presence The Common Query: What Happens After Buying a Domain? As an IT professional with a sysadmin background and cloud infrastructure focus, I often get DNS-related questions from programmers and colleagues who are just starting out with their own websites. One common confusion that arises post-purchase is about the role and setup of DNS hosting. This post aims to clarify these concepts, using my own experience with setting up https://cloudcat.digital as a practical example. ...
Managing Secrets in Kubernetes with Helm and HashiCorp Vault In the dynamic landscape of cloud migrations, securely and efficiently managing application configurations, particularly secrets, is a critical task. This article explores a practical scenario where an organization is migrating its applications from on-premises infrastructure to Amazon EKS, using HashiCorp Vault’s CSI driver to handle secrets. Here, we’ll dive into the challenges and solutions of using environment variables to access these secrets—a common yet sensitive practice—and provide a step-by-step guide to implementing robust solutions using Helm hooks. ...
A New Perspective on Helm Charts Whale hello there (docker pun) DevOps enthusiasts! As someone who’s been navigating the waters of AWS and Helm for years, I’ve largely relied on the tried-and-tested methods like ChartMuseum and S3 backends for managing Helm charts. Occasionally, I’ve also pulled charts directly from version control when the stakes weren’t too high on audit trails, because it’s straightforward and gets the job done when conditions allow. ...
In the dynamic world of software architecture, the debate between microservices and serverless functions (like AWS Lambda) is similar to the classic face-off between Ryu and Ken in the Street Fighter world. Both have their strengths, their unique moves, and their situational advantages. As developers, we’re often in the position to make a choice between the two, so let’s break down the details in a clear, concise, and human manner. ...