Posts

Managing secrets in Kubernetes is one of those challenges that every platform team eventually faces. Base64-encoded Kubernetes Secrets stored in etcd are not encryption — they’re encoding. If you’re running anything beyond a hobby cluster, you need a proper secrets management solution. This guide is your one-stop reference for HashiCorp Vault + Kubernetes. It covers the architecture, compares every integration method, and links to detailed implementation guides for each approach....

If you work anywhere near open-source infrastructure, CI/CD pipelines, or cloud-native tooling, you need to know about the Mini Shai-Hulud worm. Named after the colossal sandworms of Frank Herbert’s Dune, this self-propagating malware—deployed by the threat actor group TeamPCP—burrowed through the npm and PyPI ecosystems in May 2026, compromising hundreds of packages and turning trusted developer tooling into a weapon. This is not a theoretical supply chain risk. This is one of the most sophisticated attacks the open-source ecosystem has ever faced....

As an SRE and DevOps engineer, I obsess over automating toil out of the system. We spend so much time building robust CI/CD pipelines to ship code, but the customer delivery pipeline—the onboarding experience right after someone purchases your software—is often treated as an afterthought. When a user buys a license, they expect an immediate delivery of their credentials and next steps. Simultaneously, as product owners, we need real-time observability into our sales without constantly refreshing a Stripe or Razorpay dashboard....

In environments with limited or no internet access—like secure datacenters or air-gapped systems—managing software packages can be a hassle. That’s where setting up a local YUM repository on your RHEL machine becomes incredibly handy. In this guide, I’ll walk you through the step-by-step process to set up your own local repository server for RHEL 8 and RHEL 9 using httpd (Apache) and createrepo. Let’s dive in! 🏊‍♂️ 1: Download Necessary Packages on a Machine with Internet Before we begin, you’ll need access to a machine that can connect to the internet, just once....

Background If you’re someone who loves taking notes, organizing your ideas, or documenting your work, you’ve probably come across Obsidian. It’s an amazing note-taking app that’s packed with features. I recently started using it and was impressed by how well it works across platforms like macOS, Windows, Android, and iOS. In Obsidian, your notes are stored in a Vault, which is essentially a folder where you can create files and organize them with subfolders....

Background If you are like me who wants to try out new tools or test something on Kubernetes, then I have something for you. Yes, you can create a Kubernetes cluster locally using Minikube and Docker, but we’ll be limited to a single-node cluster, which might not suffice for many use cases like testing multi-node scenarios, HA configurations, or distributed applications. In this article, I’ll guide you on how you can create a multi-node local Kubernetes cluster using Kind (Kubernetes in Docker)....