Secure a k3s cluster with firewalld and SaltStack on AlmaLinux 10: IP-restricted rich rules, Flannel CNI networking, and automatic orphaned-rule cleanup.
Self-host NetBird, the WireGuard-based mesh VPN, on AlmaLinux 10 behind an existing Caddy reverse proxy, with an embedded IdP, access control and peer DNS.
Coraza WAF with Traefik on k3s Kubernetes: deploy this OWASP firewall as a Traefik WASM plugin to block SQL injection, XSS, and path traversal with no new pods.
Connect Kubernetes pods to Azure PostgreSQL over an IPsec VPN with Libreswan, PgBouncer connection pooling, and EndpointSlice, all automated using SaltStack.
Cloudflare load balancers with geo-steering using Terraform: configure origin pools, health checks, geo-routing, session affinity, and reusable IaC modules.
Export Amazon EKS container logs to CloudWatch using Fluent Bit with IRSA auth, a Helm DaemonSet deployment, and namespace-based log routing, all step by step.
Deploy to Kubernetes with ArgoCD, GitHub Actions, and Helm templating: build Docker images in CI, render manifests with helm template, then sync from Git.
Salt Master on Kubernetes production guide: deploy with GitFS, expose via NodePort or LoadBalancer, set firewall rules, and connect minions for config mgmt.
Robusta on Amazon EKS: deploy AI-powered Kubernetes monitoring with Helm, IRSA, and External Secrets, wire up Slack alerts, and troubleshoot many clusters.