Tagged “kubernetes”

2 September 2026

Building a browser-based CKA practice lab: a real Ubuntu terminal with genuine vim/grep/awk muscle memory, simulated kubeadm/kubectl for safe repetition, and the Azure/Cloudflare integration quirks that came with it.

22 August 2026

A CKA lab automation tune-up: fixing a resource-group permission bug, splitting node provisioning, adding missing kubeadm prerequisites, and two new scripts that make starting and connecting to the practice cluster much smoother.

20 August 2026

Building a fully automated two-node Kubernetes cluster in an Azure sandbox for CKA practice — Calico CNI, VXLAN networking, and the IP-forwarding gotcha that broke cross-node pod connectivity until it was fixed.

18 August 2026

Kicking off CKA prep after five years running AKS in production — why hands-on install/config is the real gap to close, and the plan to build a two-node Kubernetes lab on Azure VMs inside a Whizlabs sandbox.

17 August 2026

A weekend recap: finally setting up Claude Code inside a Docker container, working through a Claude course, adding a human-playable mode to the hangman demo, and digging into CKA prep with a two-node Kubernetes cluster on Azure VMs.

10 August 2026

A milestone for the V2 Capacity Advisor: real Azure Monitor alerts now flow through a webhook into AKS, get historical context from Table Storage, and come out the other side as LLM-generated, operator-friendly capacity recommendations.

28 July 2026

Five handy kubectl one-liners for AKS: pulling build numbers from pod annotations, listing container images in a namespace, and checking CPU/memory requests and limits — plus how to turn any of them into a reusable script.

27 July 2026

The origin story for the Capacity Advisor: born from real throttling alerts, first shipped as a live ACA demo, now extended to evaluate node fit and cluster headroom on AKS too.

22 July 2026

Building a live Capacity Advisor demo over the holidays: an agent that collects Azure Container Apps metrics and asks a Cloudflare Llama model whether the configured resources are actually sufficient, with a real-time SignalR log stream.

20 July 2026

A quick Kubernetes tip: updating a file-based TLS Secret cleanly with kubectl's --dry-run=client -o yaml piped into apply, instead of deleting and recreating it by hand.

14 July 2026

Pinning Kubernetes workloads to a specific node pool or VM size using a labeled node and nodeSelector — a small detail that helps with placement, isolation, and cost control.

5 July 2026

After a seventh Microsoft certification in a row, taking a short break to turn a backlog of practical Kubernetes, debugging, and Linux tips into posts over the coming weeks — with a unit-testing series planned after that.

19 June 2026

Six ways to troubleshoot pod-to-pod connectivity in Kubernetes when the usual tools are missing: curl, nc, wget, a bash /dev/tcp port check, a raw HTTP request via bash redirection, and a PowerShell/.NET fallback for Windows containers.

16 June 2026

AKS's default max-pods-per-node (30 for user node pools) is set at node-pool creation time and can't be changed later — why bumping it to 150 up front makes sense on a subnet with plenty of IP headroom.

26 April 2026

The first working blue-green deployment on AKS for AZ-400 practice: three pipelines split across infrastructure provisioning, deployment, and Traefik IngressRoute-based promotion between two Git-branch environments.

19 April 2026

The sentiment API goes live via a real two-pipeline, cross-subscription Azure DevOps setup: Terraform cluster creation feeding a second deploy pipeline through cross-pipeline artifact passing, arm64/amd64 cost-split nodepools, end-to-end deploy in 2 minutes.

5 April 2026

Kicking off a self-hosted LLM sentiment-analysis platform on AKS: a Flask API, an LLM adapter layer, Ollama (phi3:mini) in-cluster, Terraform for IaC, and Traefik ingress via Helm — the plan before any of it exists yet.

24 February 2026

Update #2 of an AKS ingress migration saga: rolling back from F5's OSS NGINX Ingress after its strict host-collision rules broke same-hostname HTTP+HTTPS routing, with Traefik lined up as the next (hopefully final) attempt.

19 February 2026

Why AGIC (and even the newer AGC) is a bad fit for anything beyond basic HTTP/HTTPS in AKS: it silently wipes any manually-added custom redirect rules, TCP listeners, or non-standard configs during reconciliation, even with an AzureIngressProhibitedTargets CRD in place.