Kubernetes and platform engineering, from a cluster I actually run
Practical write-ups on Kubernetes, networking, observability and GitOps, taken from a Talos homelab cluster and Azure work, with the real configs linked.
I run a Talos Kubernetes cluster on Proxmox at home, and almost every post here starts as something in that cluster breaking. The fix gets written down properly, with the manifests that are running, because the whole thing is public in the Homelab repository.
Most posts cover Kubernetes, observability, GitOps and Azure. How the cluster itself is built lives on docs.nordbye.it, and who writes this is on the about page.
Featured

Fixing My Prompts: What the Claude Architect Exam Taught Me
What studying for the Claude Certified Architect exam taught me about everyday prompting, from few-shot examples and XML tags to fresh-chat review.
Recent posts
All 8 posts
Headroom: The Private Finance Overview School Never Gave You
A self-hosted Norwegian finance tracker. Equity after tax, ten years of salary against CPI, what you cost your employer, the month, and a fifteen year forecast.

Tuning Azure WAF Without Paying Log Analytics Prices
Azure WAF false positives are painful to tune and expensive to analyse in Log Analytics. lawless-waf queries the archived logs on your laptop with DuckDB and hands you the Terraform exclusion.

Seeing Into a Talos Cluster: The Observability Stack I Actually Run
Metrics, logs, traces and runtime security on a Talos Kubernetes cluster: Prometheus, Loki, Tempo, Grafana and Falco, wired into one dashboard.

Locking Down Your Cluster: Rolling Out Cilium Network Policies Without Breaking Everything
Rolling out CiliumNetworkPolicies on Kubernetes without breaking traffic. Start in audit mode with Hubble, move to default-deny, and dodge the gotchas.

Surviving the NGINX Ingress EOL: A Zero-Downtime Migration to Traefik
ingress-nginx is reaching end of life. A zero-downtime migration to Traefik and the Gateway API on Kubernetes, with the cutover plan and pitfalls to avoid.