Blog

Deploying kube-prometheus-stack through Flux and Helm, then tracing a pruning cascade through Git and recovering the cluster from desired state.

Using SOPS, age and Flux to make Kubernetes Secrets encrypted in Git, recoverable by the cluster and useful only where they are needed.

Publishing Linkding through a locally managed Cloudflare Tunnel while keeping the Kubernetes Service private and the tunnel credential out of Git.

Using Flux, K3s local-path storage and Kubernetes security contexts to make Linkding survive pod replacement without leaving its container running as root.

Deploying Linkding to my K3s homelab through Flux, Kustomize and Git—without reaching for kubectl apply.

Bootstrapping Flux into my K3s homelab and turning a GitHub repository into the declared source of cluster state.

Installing K3s on the ZBook, investigating two deceptively similar Helm flags and securely managing the cluster from my MacBook.

Giving an unused HP ZBook a second life as the physical Ubuntu Server at the centre of my Kubernetes homelab.

Building a serverless AWS portfolio and a GitHub Actions pipeline that deploys it without long-lived cloud credentials.

Passing AWS Cloud Practitioner validated the theory. The Cloud Resume Challenge would test whether I could turn it into a working system.