3 articles found
A production file upload architecture that keeps authorization, policy, and metadata in the application while sending large file bytes directly to object storage.
A practical guide to using Fail2Ban with Kubernetes or k3s logs, preserving client IPs through Traefik, and blocking pod traffic in the raw table PREROUTING chain before Kubernetes service NAT rewrites the packet path.
A practical guide to how ConfigMap updates behave under FluxCD, including the difference between mounted files and environment variables, why some changes do not restart pods, and the rollout patterns that work best in GitOps.
