Internal Workflows Deserve Their Own Stack
Internal traffic should travel an independent path at every layer – gateway, pods, database – not just live behind a different URL prefix.
Kubernetes
I Switched My Homelab Rack to Wired Ethernet and the Bandwidth Got Worse
I cabled my five-node rack behind a switch to get off wifi. The cutover worked. Internet bandwidth dropped 50-85% across the cluster. Here is what happened and why I am keeping it anyway.
Swapping Two USB Wifi Adapters Broke Both Kubernetes Nodes
Two HP worker nodes dropped off my cluster after I pulled their USB wifi adapters. When I plugged them back in, neither came up. The adapters were fine – I’d put them in the wrong machines.
Wifi Power Save Killed My Kubernetes Database Performance
A simple SELECT by primary key took 6 seconds. Postgres was fine. The network was fine. The culprit was a default Linux wifi setting I’d never heard of.
The Day I Realized Every Developer Could Read Prod DB Credentials: A Microservices Migration Story
In the ATG monolith, production DB credentials lived behind a JBoss SSH gate — effectively unreachable without infra access. After modernizing to microservices on Azure Kubernetes, every developer’s Azure account could read prod DB, Redis, and Service Bus secrets from Key Vault with a single CLI command. VPN and device whitelisting gated the network path, but not the humans. The migration didn’t just change our architecture — it quietly widened the insider blast radius.
From PVC to NFS: Zero-Downtime Blog Deployments on Bare-Metal Kubernetes
A ReadWriteOnce PVC meant my blog couldn’t run two replicas. Switching to NFS from a NAS gave me zero-downtime rolling updates and a one-command deploy workflow.
Building a Self-Hosted Photo Gallery on Kubernetes with Immich, Authentik, and Cloudflare Tunnel
How I built a Google Photos alternative running on a 3-node Kubernetes cluster at home, protected by MFA authentication, and exposed securely via Cloudflare Tunnel with zero open ports.