Microservices are a popular architectural style for building scalable and maintainable applications. However, they also introduce complexity and overhead. Microservices are great for large applicat...

Applications generally have external dependencies, such as databases, message queues, and other services. Setting up and managing these dependencies can be time-consuming and error-prone, especiall...

K3s is an option for deploying a minimal k8s environment, when a full k8s environment may not be required, for example development and testing. This deployment method should work on EC2 instances,...

Bitnami’s sealed secrets allow secure storage of secrets in plain text such as in Git repos. The secrets are encrypted using a public key, the private key stays in the cluster, only the operator ru...

This terraform project will create a ready to use cluster with the necessary addons and features. All the source is available here: https://github.com/rizvn/eks-terraform The following tapology w...

IRSA allows connecting K8s service accounts with AWS IAM roles. This allows permissions to be managed through AWS IAM. In this blog post we will: create text file upload to AWS S3 create ia...

Below is how docker registry can be deployed with AWS EKS. The default AWS EKS images use containerd rather than moby as the container engine. This blog post was inspired by this post on the docke...

TCP Routes in envoy gateway allow routing TCP traffic in managed way similar to http. This post is inspired by this post on envoy gateway site. This blog post will set up the following: There ...

On AWS EKS, loadbalancer’s are created by setting the the service type to LoadBalancer. Each port defined on the service will be associated with a TargetGroup. Each TargetGroup will be associated w...

Set up oauth2 proxy with Azure AD Add Helm Repo to cluster helm repo add oauth2-proxy https://oauth2-proxy.github.io/manifests Generate cookie secret this is used to encrypt cookies, below is a ...