Raja Haikal

26 Mar 2025 · 4 min read

IngressNightmare: Critical Kubernetes Ingress NGINX Vulnerabilities

Kubernetes, the leading platform for container orchestration, often faces security challenges. On March 24, 2025, Wiz Research disclosed several critical vulnerabilities in the Ingress-NGINX Controller for Kubernetes, now referred to

10 Jan 2025 · 10 min read

Deep Dive into CoreDNS: Best Practices, Optimization, and Troubleshooting

In the dynamic world of Kubernetes, DNS is a critical component that facilitates seamless service discovery and communication, both within and beyond the cluster. Since Kubernetes 1.14, CoreDNS has

18 Nov 2024 · 11 min read

Accessing KubeVirt VMs Outside Kubernetes - Part 2

Previously in Part 1, I mentioned that Kube-OVN is more powerful than Multus-CNI, but what makes it so? Accessing KubeVirt VMs Outside Kubernetes - Part 1By default, Kubevirt VM only

16 Nov 2024 · 9 min read

Accessing KubeVirt VMs Outside Kubernetes - Part 1

By default, Kubevirt VM only connected to the container network and inaccesable from outside. We can access our Kubevirt VMs from the outside by creating a Kubernetes Service of type

20 Oct 2024 · 5 min read

Configuring Secondary Networks for KubeVirt VMs with OVN-Kubernetes

Introduction OVN (Open Virtual Network) is a series of daemons for the Open vSwitch that translate virtual network configurations into OpenFlow. It provides virtual networking capabilities for any type of

18 Oct 2024 · 6 min read

Kubevirt + Kube-OVN Live Migration

Live migration is a process during which a running Virtual Machine Instance moves to another compute node while the guest workload continues to run and remain accessible. Limitations of Live

28 Sep 2024 · 7 min read

Seamless Secret Management with Kubernetes Vault Secrets Operator

There are multiple ways of accessing secrets in HashiCorp Vault from your Kubernetes workloads. Which approach should you use? Well, it depends. In this blog, I will focus on accessing

25 Sep 2024 · 17 min read

Hashicorp Vault HA Cluster with Integrated Storage (Raft) and AWS KMS Auto Unseal

No matter the size of your Kubernetes environment, whether you're managing a single cluster or dozens, at some point you'll need to securely store sensitive information

23 Sep 2024 · 2 min read

Loneliness

The world has a funny way of pushing us to the edge, making us question everything we thought we knew. And in those moments, it's easy to feel

18 Sep 2024 · 5 min read

Configuring a Self-hosted Quay Registry in Private OpenShift Cluster

In this article, i’ll walk through the process of configuring a self-hosted Quay registry inside a private OpenShift cluster. Quay, developed by Red Hat, is a robust and versatile

13 Sep 2024 · 5 min read

Setup RedHat Openshift Codeready

Minimum Requirements For OpenShift Container Platform: * 4 physical CPU cores * 10.5 GB of free memory * 35 GB of storage space Here are the environment details I'm using:

10 Sep 2024 · 3 min read

How to Emulate SSD in KVM Virtual Machines

When working with KVM virtual machines to test setups like Ceph or OpenStack Clusters, it can be useful to have SSD storage available. Instead of using actual physical drives, you

25 Aug 2024 · 12 min read

Setup Open-appsec on Nginx for Linux

With ModSecurity reaching its end of life in July 2024, many organizations are looking for a modern alternative to secure their web applications and APIs. Open-appsec is stepping up as

11 Aug 2024 · 12 min read

Bootstraping K3s with Cilium

Bootstrap & Configuring K3s K3s comes equipped with everything you need to get started with Kubernetes, but it’s also very opinionated. In this article i'll strip K3s

21 Jul 2024 · 3 min read

Securing Nginx: A How-To Guide

Harden Nginx Configuration List of some best practices to harden Nginx. 1. Update Nginx Keep Nginx up to date with the latest version. sudo apt-cache policy nginx sudo apt-get --only-upgrade

17 Jul 2024 · 5 min read

Deploying Ceph All-in-One Using Cephadm

This post is more like a note to myself and for lab purposes, but this may help if you are looking at How to Deploy Ceph All-in-One using Cephadm. Env

14 Jun 2024 · 5 min read

Install Wordpress with Nginx

Install Nginx Install dependencies sudo apt install -y curl gnupg2 ca-certificates lsb-release ubuntu-keyring Then run an update and install nginx : sudo apt update sudo apt install -y nginx Allow UFW

9 Jun 2024 · 3 min read

Setup Sonarqube MultiBranch Scan

Currently, Sonarqube has removed the multi-branch analysis support from the CE, so after Sonarqube >7.7 this functionality is only available in the developer edition. However, by using the