Blog

A collection of topics that have interested me over time and where I found something that might be worth sharing.

Programming

Rust async using channels

This compares channels in Rust and Go and concludes with a minimal full Rust program. One common theme will be that Rust uses its standard syntax while go uses a lot of specialized one- or few-purpose syntax for channels.

The linux kernel Landlock security feature (and its usage with go)

The Landlock linux kernel feature allows an userspace process to further restrict its capabilities. THis is a brief introduction about it and how to use it in go.

Intermediate golang tricks and conventions Golang websrv

Some go pattern and best practices intermediate users might find helpful.

Golang websrv for SPA

A small webserver with the purpose of serving static websites and single page applications (SPA).

Kubernetes

Merging helm input values using kustomize

When combining helm and kustomize it is a likely scenario that one has the need to reproduce Helms merge logic regarding multiple input files. This is useful to o e.g. separate basic settings from stage-dependent settings.

Using kustomize to patch helm charts

An exemplary use case for this is that a Helm chart used produces some Secrets from input values, but it is preferred to have these secrets in a Secret Manager and just reference them using External Secrets.

Ingress controller tutorial

Building something from scratch is always a nice approach to really understand a subject. Hence, I build a simple Ingress controller. Here I want to give a recap of the relevant tasks of an ingress controller and why it is needed in Kubernetes.

Kubernetes Admission-Controller Toolkit

A Kubernetes Admission Controller Toolkit which I recently put together when experimenting with them. The technical documentation can be found in the GitHub Readme, so I will not double it here, but instead just briefly describe what this is about.

Budget Kubernetes setup for Google Cloud

A brief summary how to setup a Kubernetes cluster at Google without having to use the quite pricey Google Cloud Load Balancer.

Web

100% ssllabs score with nginx

How to achieve 100% score with sslabs and why it's perhaps not the most important thing to care about.

Safe CSP with Angular

How to combine CSP security headers with Angular.

Chrome gzip RFC compatibility issue

Summary of an issue limiting the usage of split gzips in Chrome.