A deep-dive into running Vault's PKI secrets engine in production: two-tier CA hierarchy, auto-rotating certificates, cert-manager integration, SPIFFE SVIDs, the revocation story, and operational hardening.
Cert-Manager
-
Vault PKI Secrets Engine in Production: Intermediate CAs, cert-manager, and Short-Lived Certificates as a Security Primitive -
Kubernetes for the Homelab: K3s from Scratch to Production An end-to-end guide to running Kubernetes at home with K3s — single-node and HA setups, ingress, persistent storage with Longhorn, MetalLB, cert-manager with DNS-01, automated upgrades, and a pragmatic path to migrate Docker Compose workloads without overengineering it.
-
Traefik as a Kubernetes Ingress Controller: The Complete Guide A technically deep guide to running Traefik as a Kubernetes ingress controller — covering Helm installation, IngressRoute CRDs, Middleware resources, TLS with cert-manager, Gateway API, RBAC, high availability, observability, and production-grade patterns including canary deployments, TCP/UDP routing, and ForwardAuth with Authentik.