Sealed Secrets Web is a web interface for Sealed Secrets by Bitnami. The web interface let you encode, decode the keys in the data field of a secret, load existing Sealed Secrets and create Sealed Secrets. Under the hood it uses Sealed Secrets service API to encrypt your secrets. The web interface should be installed to your Kubernetes cluster, so your developers do not need access to your cluster via kubectl.

Manages Envoy Proxy as a Standalone or Kubernetes-based Application Gateway

KCL is an open-source, constraint-based record and functional language that enhances the writing of complex configurations, including those for cloud-native scenarios. With its advanced programming language technology and practices, KCL is dedicated to promoting better modularity, scalability, and stability for configurations. It enables simpler logic writing and offers ease of automation APIs and integration with homegrown systems.

OpenID Connect (OIDC) & OAuth 2 API Server used to secure Kubernetes Ingress

So in response, we kicked off a Railway Metal project last year. Nine months later we were live with the first site in California, having designed, spec-ed, and installed everything from the fiber optic cables in the cage to the various contracts with ISPs. We’re lighting up three more data center regions as we speak.

The Hard Lesson on Backups, Disaster Recovery, and Human Error

Subtrace is Wireshark for your Docker containers. It lets developers see all incoming and outgoing requests in their backend server so that they can resolve production issues faster.

When You Need LoadBalancer Services On The Go, MetalLB and KinD Are There For You

A curated list for awesome cloud native tools, software and tutorials.

A Kubernetes Query Language

Kubernetes CLI plugin to decode Kubernetes secrets

Managing Infrastructure as Code (IaC) at scale is fundamentally different from handling a handful of resources. While getting started with Terraform/OpenTofu is relatively straightforward, maintaining large-scale infrastructure deployments introduces challenges that can’t be solved by simply writing more code. Code organization becomes a critical factor in whether your infrastructure remains manageable or devolves into a maintenance nightmare.

AWS PrivateLink provides a secure method for sharing and accessing services across VPCs and accounts. It ensures that all traffic remains within the AWS network, avoiding exposure to the public internet. Before December 2024, both service providers and consumers were required to be in the same AWS Region. With the launch of native cross-region connectivity for AWS PrivateLink, you can now share and access VPC endpoint services across different Regions.

As time passes, OpenTofu and Terraform become more distant from each other. CanI.TF helps us to understand their differences quickly.