📰 Dev.to · Guatu

How to write Prometheus alerts that carry context, tolerate transient scrape blips, and page only when something is actually broken.

How SealedSecrets lets you commit encrypted secrets to Git safely, why the real risk is losing the controller's private key, and how to back it up.

Running PostgreSQL on Kubernetes with CloudNativePG: the Kyverno policy traps, SSL gotchas, read/write splitting, and the 16.4 segfault to avoid.

Moving beyond cluster-admin for everything. A practical approach to scoping ServiceAccount permissions for production workloads and AI agents.

Moving beyond the happy path of Kubernetes policy enforcement. Real-world Kyverno pitfalls, mutation loops, and the gap between docs and production.

Fixing the silent failure of sysctl settings when running Docker inside unprivileged Proxmox LXC containers.

Fixing default runtime misconfigurations in NVIDIA Container Toolkit for GPU workloads

Avoid naming chaos in ArgoCD by using Helm fullnameOverride effectively

Managing a homelab Kubernetes cluster by hand eventually breaks you. Not in a dramatic way — in a...

Most homelab content stops at "I installed Proxmox on a NUC." This post goes further — how I built a...