A cup of coffee
Under the hood of an ATProto PDS: a cryptographic data repository, sorted in a Merkle Search Tree and signed on every write. We open my own repository by hand: list its records, download its CAR export, and verify its signature ourselves, without ever trusting the server.
My journey to autoscale an OVH cluster deployed via the Cluster API, using Karpenter and its cluster-api provider, with MKS as the management cluster.
How Kloak intercepts TLS traffic from your pods at the kernel level with eBPF uprobes to inject your secrets transparently, without modifying your applications or deploying a sidecar.
Talos Linux doesn't natively support OIDC authentication. Here's how I built talosctl-oidc, an ephemeral certificate exchange server that bridges SSO and mTLS.
Kairos is an interesting alternative to Talos for deploying Kubernetes clusters on immutable systems based on classic Linux distributions. Discover how to use it to automate your Kubernetes deployments.
Discover how Bootc and OSTree are revolutionizing Linux system deployment, offering modern, efficient, and immutable management.
Configure the Kubernetes API-Server to accept multiple OIDC identity providers (IdPs), including GitHub Actions.
In this article, we will discover SPIFFE, a reference framework for workload identity management in distributed environments, and how to implement it in our Kubernetes applications with cert-manager.
Minimalist doesn't mean Talos isn't extensible. Let's dive into the topic of extensions to customize and adapt it to our needs.
Omni is an incredible tool that will allow you to manage Talos machines anywhere. Let me introduce you to Omni and how to interface it with Kubevirt to create Kubernetes clusters in no time.
