Chris HaessiginSystem WeaknessWaiting for hooks in ArgoCDArgoCD is a fantastic tool to deploy applications via GitOps. You can defined all your kubernetes manifests in git and have ArgoCD watch…6 min read·Feb 14, 2024----
Chris HaessigHunting for and validating SSL certs with our first Argo Workflow.For years I have been managing kubernetes clusters. Running k8s for a long period of time, certificates are always an interesting…7 min read·Jan 2, 2024--1--1
Chris HaessiginDevOps.devDumb little things you can do to secure k8s, container signing with kyverno and cosign.As the years go by, more and more things are added to the kubernetes ecosystem. A lot of things have changed from the good old days of…7 min read·Nov 14, 2023----
Chris HaessigCreate a reasonably scalable k8s cluster with prometheus, istio, hpa, keda and karpenter.Since I was laid off at Gemini, I am bored and thought a post should be in order to explain how to create a kubernetes cluster that can…8 min read·Sep 9, 2022--2--2
Chris HaessigRunning a web app with kubernetes / istio / cert manager and vault.One of my favorite hashicorp products is vault. Vault is a great way to store secrets, certificates, manage policies, encrypt data and lots…9 min read·Jul 29, 2022--1--1
Chris HaessigFighting against the log4j vulnerability with istio.First things first, I would like to start off by saying you should not run the code below in production, there are a million ways to get…5 min read·Jan 3, 2022----
Chris HaessigMulti cluster setup with istioAs everyone knows istio is a great service mesh. The power that it adds to kubernetes makes it where I would never even consider running…5 min read·Oct 18, 2021----
Chris HaessigConnecting kubernetes clusters together with istio.Update ( 11/1/21 ): Istio’s multicluster mode is a better way to set this up. I created a blog about it here.5 min read·Jul 1, 2021----
Chris HaessigStop whitelisting IPs, use mTLS instead with the istio ingress controller.In my last blog, I talked about a really exciting feature of istio added a couple versions back where you can write your own code as the…4 min read·Mar 11, 2021----
Chris HaessigCustom go webassembly ( wasm ) running on istio / envoy.Have you ever wondered how you can run your custom go code in envoy / istio. A year ago it would require writing c++ and compiling it into…4 min read·Mar 3, 2021----