4 node bare metal cluster 192gb of shared mem, 36odd cores. There is interest in bare metal #kubernetes it seems lots of people are thinking about what happens when trump/bezos break the cloud security model and everyone else needs to flee.

Up from zero to running full workloads in under an hour isn’t bad.

This is the future.

Even if we still target clouds these are fantastic for dev environments. This setup costs a few months AWS fees for a single large node.

Neat.

https://docs.kuberocketci.io/

ktx is an easy-to-use command line tool for kubernetes multi-cluster context management.

https://github.com/ketches/ktx

Discussions: https://discu.eu/q/https://github.com/ketches/ktx

#Microsoft finds default #Kubernetes #Helm charts can expose data

https://www.bleepingcomputer.com/news/security/microsoft-finds-default-kubernetes-helm-charts-can-expose-data/

Revolutionizing Kubernetes Management: Meet kubectl-ai, the AI-Powered Terminal Agent

In the ever-evolving landscape of Kubernetes management, kubectl-ai emerges as a groundbreaking AI-powered terminal agent that transforms how developers interact with their clusters. By leveraging adv...

https://news.lavx.hu/article/revolutionizing-kubernetes-management-meet-kubectl-ai-the-ai-powered-terminal-agent

After many years working with VMware, I wrote a guide mapping vSphere concepts to KubeVirt

https://veducate.co.uk/kubevirt-for-vsphere-admins-deep-dive-guide/

Discussions: https://discu.eu/q/https://veducate.co.uk/kubevirt-for-vsphere-admins-deep-dive-guide/

New Open-Source Tool Spotlight

Kubernetes Goat is a deliberately vulnerable Kubernetes cluster for hands-on security learning. From container escapes to RBAC misconfigurations, it’s packed with scenarios to explore real-world vulnerabilities in a safe environment. #Kubernetes #CloudSecurity

Project link on #GitHub https://github.com/madhuakula/kubernetes-goat

#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity

—
P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking

Migrated the server to https://todo2d.com, with the exception of payment provider and authorization (which I will move in a few months) everything is in the #EU. It now also runs on #kubernetes which should make it easier to control and revert deployments.

Restart Operator: Schedule K8s Workload Restarts

https://github.com/archsyscall/restart-operator

Discussions: https://discu.eu/q/https://github.com/archsyscall/restart-operator

heise+ | GitOps mit Crossplane, Teil 2: Basisinstallation

Für eine Infrastrukturprovisionierung mit einer GitOps-Pipeline sollten auch Provisionierer und GitOps-Werkzeug nach den GitOps-Regeln eingerichtet werden.

https://www.heise.de/hintergrund/GitOps-mit-Crossplane-Teil-2-Basisinstallation-10360476.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon

Replacing Kubernetes with systemd (2024)

Link: https://blog.yaakov.online/replacing-kubernetes-with-systemd/
Discussion: https://news.ycombinator.com/item?id=43899236

Microsoft Unveils Security Flaws in Default Kubernetes Helm Charts

In a recent report, Microsoft highlights critical security vulnerabilities in default configurations of Kubernetes Helm charts that could expose sensitive data to attackers. As organizations increasin...

https://news.lavx.hu/article/microsoft-unveils-security-flaws-in-default-kubernetes-helm-charts

Kubernetes v1.33: Image Volumes Graduate to Beta – Here’s What You Can Do Now

https://blog.abhimanyu-saharan.com/posts/kubernetes-v1-33-image-volumes-graduate-to-beta

Discussions: https://discu.eu/q/https://blog.abhimanyu-saharan.com/posts/kubernetes-v1-33-image-volumes-graduate-to-beta

Passive FTP into Kubernetes ? Sounds cursed. Works great.

https://github.com/adrghph/kubeftp-proxy-helm

Discussions: https://discu.eu/q/https://github.com/adrghph/kubeftp-proxy-helm

Cluster Rebuild Project: Mini Edition

worker node added and joined to the cluster ​​

smart plug says it is using 15W-20W, not bad but we'll have to see how high it can get (I disabled turbo in an attempt to cap power usage, maybe I should do that differently)

Next up:
* Add the previous added odroid to the rook cluster
* start figuring out how to configure this router, I might try to configure the 1gb ethernet ports as bridged switch ports so I can use it on the current network as a switch for now maybe?
* once the worker node and ceph node are stable I can shut down the VMs on the r730 and the move the GPU to the new worker node

#HomeLab #MiniLab #Kubernetes #Networking

I’m working on #Kubernetes these days. Recently, I wrote a series on how one could design a full-fledged testing pipeline targeting #GoogleKubernetesEngine. The second part mentions creating a #GKE instance in the context of a GitHub workflow. In this post, I want to assess #Crossplane by creating such an instance.

https://blog.frankel.ch/feet-wet-crossplane/

I enjoy #MongoDb but the support for community is so poor that I’m starting to consider to use another #database that works on #apple silicon, can easily deploy on #kubernetes and supports documents. I’m seriously considering postgresql

Kubernetes 1.33 “Octarine” Released: Native Sidecars and In-Place Pod Resizing

https://www.infoq.com/news/2025/04/kubernetes-octarine-release/

Discussions: https://discu.eu/q/https://www.infoq.com/news/2025/04/kubernetes-octarine-release/

I should get out of bed and finally setup those vlans (should vlan filtering be enabled?)

I think I found some good forum guides on it?

Then I can add the first odroid to the cluster
#Homelab #Kubernetes #Mikrotik