Raja Haikal

30 Sep 2025 · 10 min read

Kubernetes 1.34: Fine-Grained Container Restart Policies

Kubernetes 1.34 introduces fine-grained container restart policies with exit code–based rules. Learn how it improves Pod efficiency and resilience.

21 Aug 2025 · 9 min read

AWS EKS Multi-Tenancy with vCluster

Kubernetes is the de facto standard for container orchestration, allowing teams to deploy, scale, and manage containerized applications. However, implementing multi-tenancy in Kubernetes is not always straightforward. Many organizations need

10 Jan 2025 · 10 min read

Deep Dive into CoreDNS: Best Practices, Optimization, and Troubleshooting

In the dynamic world of Kubernetes, DNS is a critical component that facilitates seamless service discovery and communication, both within and beyond the cluster. Since Kubernetes 1.14, CoreDNS has

18 Nov 2024 · 11 min read

Accessing KubeVirt VMs Outside Kubernetes - Part 2

Previously in Part 1, I mentioned that Kube-OVN is more powerful than Multus-CNI, but what makes it so? Accessing KubeVirt VMs Outside Kubernetes - Part 1By default, Kubevirt VM only

16 Nov 2024 · 8 min read

Accessing KubeVirt VMs Outside Kubernetes - Part 1

By default, Kubevirt VM only connected to the container network and inaccesable from outside. We can access our Kubevirt VMs from the outside by creating a Kubernetes Service of type

20 Oct 2024 · 5 min read

Configuring Secondary Networks for KubeVirt VMs with OVN-Kubernetes

Introduction OVN (Open Virtual Network) is a series of daemons for the Open vSwitch that translate virtual network configurations into OpenFlow. It provides virtual networking capabilities for any type of

18 Oct 2024 · 6 min read

Kubevirt + Kube-OVN Live Migration

Live migration is a process during which a running Virtual Machine Instance moves to another compute node while the guest workload continues to run and remain accessible. Limitations of Live

28 Sep 2024 · 7 min read

Seamless Secret Management with Kubernetes Vault Secrets Operator

There are multiple ways of accessing secrets in HashiCorp Vault from your Kubernetes workloads. Which approach should you use? Well, it depends. In this blog, I will focus on accessing

25 Sep 2024 · 17 min read

Hashicorp Vault HA Cluster with Integrated Storage (Raft) and AWS KMS Auto Unseal

No matter the size of your Kubernetes environment, whether you're managing a single cluster or dozens, at some point you'll need to securely store sensitive information

23 Sep 2024 · 2 min read

Loneliness

The world has a funny way of pushing us to the edge, making us question everything we thought we knew. And in those moments, it's easy to feel

18 Sep 2024 · 5 min read

Configuring a Self-hosted Quay Registry in Private OpenShift Cluster

In this article, i’ll walk through the process of configuring a self-hosted Quay registry inside a private OpenShift cluster. Quay, developed by Red Hat, is a robust and versatile

13 Sep 2024 · 4 min read

Setup RedHat Openshift Codeready

Minimum Requirements For OpenShift Container Platform: * 4 physical CPU cores * 10.5 GB of free memory * 35 GB of storage space Here are the environment details I'm using:

10 Sep 2024 · 3 min read

How to Emulate SSD in KVM Virtual Machines

When working with KVM virtual machines to test setups like Ceph or OpenStack Clusters, it can be useful to have SSD storage available. Instead of using actual physical drives, you

11 Aug 2024 · 11 min read

Bootstraping K3s with Cilium

Bootstrap & Configuring K3s K3s comes equipped with everything you need to get started with Kubernetes, but it’s also very opinionated. In this article i'll strip K3s

21 Jul 2024 · 3 min read

Securing Nginx: A How-To Guide

Harden Nginx Configuration List of some best practices to harden Nginx. 1. Update Nginx Keep Nginx up to date with the latest version. sudo apt-cache policy nginx sudo apt-get --only-upgrade

17 Jul 2024 · 5 min read

Deploying Ceph All-in-One Using Cephadm

This post is more like a note to myself and for lab purposes, but this may help if you are looking at How to Deploy Ceph All-in-One using Cephadm. Env

8 Jun 2024 · 6 min read

Deploy Harbor Private Registry

Harbor is deployed as several Docker containers. You can therefore deploy it on any Linux distribution that supports Docker. The target host requires Docker, and Docker Compose to be installed.

22 May 2024 · 3 min read

Kubernetes Common Errors

1. CrashLoopBackOff: * Description: A pod repeatedly crashes and restarts. * Troubleshooting: * Check pod logs: kubectl logs <pod-name> * Describe the pod for more details: kubectl describe pod <pod-name>