Talos Linux and Dynamic Resource Allocation (Beta)

 Posted on 29 March 2025  (Last modified on 31 March 2025)

I upgraded my Kubernetes cluster to 1.32 recently and the changelog mentioned that Dynamic Resource Allocation (DRA) had been graduated to Beta. I had been using the Intel GPU Device Plugin to schedule pods with Hardware Device requirements until now. This seemed like a good opportunity to try out and switch to DRA. Surprisingly, this was fairly simple! I initially ran into some speedbumps but now that I figured it out it’s fairly straightforward. [Read More]
kubernetes  talos  dra  cdi 

Til: Helm Boolean Functions and Falsy-Ness

 Posted on 1 March 2023

Did you know Yaml is a superset of Json? Probably. Did you realize this means Yaml inherits some of the issues of Json? You’ve probably encountered this before yourself. But did you realize that helm template functions also inherit some of the Json issues? I sure didn’t until it bit me! [Read More]
helm  yaml 

Approve Private Endpoint Connections

With Bicep

Approve Private Endpoint Connections

 Posted on 23 February 2023  (Last modified on 24 February 2023)

Managing private endpoint connections - especially across Azure AD tenants - can be a chore. In many cases you will have to do this manually and often you will need elevated permissions. Though usually your deployment pipeline already has sufficient permissions on the resource to approve the endpoint connection, so it would be much more convenient if we could make the approval a part of our desired state config. [Read More]
Azure  AKS  Kubernetes  Private Link  Private Endpoint 

Azure Aks Private Clusters

Azure Aks Private Clusters

 Posted on 20 February 2023  (Last modified on 24 February 2023)

When using Kubernetes it is considered good practice to limit API server access as much as possible. However the default configuration on cloud providers exposes the API server on the public internet. This is fine when you’re giving it a try but once you start using Kubernetes more seriously you will probably want to start locking down access. [Read More]
Azure  AKS  Kubernetes  Private Link  Private Endpoint 

Wsl and Vpns

Why you get TLS handshake errors in WSL

Wsl and Vpns

 Posted on 21 August 2021  (Last modified on 24 February 2023)

WSL does not play nice with VPNs and you likely will not realize this is the problem at first. Luckily the problem is usually easy to fix. Changing the MTU value of your WSL network adapter is a good start if you are having issues! [Read More]
wsl 

How to Use Dedicated Disks in Wsl

How to Use Dedicated Disks in Wsl

 Posted on 8 June 2021  (Last modified on 24 February 2023)

When you access Windows files from WSL there is a large price to pay. But if you have important or a lot of data you use in WSL it can be a problem to only use the WSL root filesystem you get by default. It lives only in WSL (with an awkward way to access it from Windows) and to me feels like temporary storage you could lose at any time. Wouldn’t it be great if you could use an external or extra hard disk in WSL while not having to pay the price? Well, now you can! [Read More]
wsl 

Hugo Modules for Themes

Instead of git submodules

 Posted on 21 May 2021  (Last modified on 24 February 2023)

The hugo tutorial tells you to use git submodules for themes. However hugo has a better system for dependencies called modules. I’ ll show you how to switch from git submodules to hugo modules! [Read More]
hugo 

Why I chose Hugo

Or why I ditched Jekyll

 Posted on 8 May 2021

This blog is currently powered by Hugo, a static site generator built in Go. However this was not my first choice. Initially I was going to use Jekyll for the simple reason that I had heard of it before and it is what Github uses to power Github Pages. Almost immediately I decided that while Jekyll seems fine to use I did not want to be limited to what Github natively offers, and I didn’t have to. [Read More]
hugo  jekyll