Cilium mTLS ztunnel: Sidecar-Free Encryption Explained

per-node proxy traffic flow diagram showing namespace enrollment

Cilium mTLS ztunnel doesn’t need a SPIRE server — and that’s actually the second-biggest news here. The bigger story: Cilium’s older, SPIRE-based “Mutual Authentication” feature is now officially deprecated, with removal targeted for v1.21. If you adopted it, you’re migrating… Read moreCilium mTLS ztunnel: Sidecar-Free Encryption Explained

PostgreSQL on Kubernetes — Complete Setup Guide with CloudNativePG

Running PostgreSQL in Kubernetes used to be a bad idea. StatefulSets were tricky, persistent volumes were unreliable, and failover meant data loss. Most teams defaulted to managed cloud databases and called it done. That calculus has changed. CloudNativePG — the… Read morePostgreSQL on Kubernetes — Complete Setup Guide with CloudNativePG