Deploy Live

tl;dr; I had an itch to run GitHub Actions on top of Google Cloud infrastructure with minimal overhead.

Update, 29 April 2026 This post was picked up on Hacker News and crossed 100 comments.

This post extends on the Project honeypots.work kick-off and describes the first utility site instrumented to feed the honeypot data pipeline.

I needed a CRC16 checksum implementation in Helm.

As part of my day job, I look after a top 5000 website in the world.

With 2025 wrapped up I’d like to look back and reflect on the year and more specifically, a set of personal goals I’ve set. 2025 was fast-paced, really challenging at times, but overall, a really great year to reflect back on.

tl;dr; Claude for Chrome saved me close to an hour.

@font-face { font-family: "Virgil"; src: url("https://excalidraw.com/FG_Virgil.woff2"); } @font-face { font-family: "Cascadia"; src: url("https://excalidraw.com/Cascadia.woff2"); } $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$…

@font-face { font-family: "Virgil"; src: url("https://excalidraw.com/FG_Virgil.woff2"); } @font-face { font-family: "Cascadia"; src: url("https://excalidraw.com/Cascadia.woff2"); } $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$…

@font-face { font-family: "Virgil"; src: url("https://excalidraw.com/FG_Virgil.woff2"); } @font-face { font-family: "Cascadia"; src: url("https://excalidraw.com/Cascadia.woff2"); } GCP FinOps #001Google Cloud Storage Location, Location, Location$$$$$$$$$…

By default, Kubernetes schedules workloads (pods) onto nodes mainly driven by resource constraints (memory, CPU, ephemeral storage).

Certified Kubernetes Security Specialist (CKS) Preparation based on CNCF CKS curriculum.

TL;DR Compress data and use cold storage tiers to achieve absolute minimum cost for long-term logs archiving at as little as $1.20 per TB per year.

Last updated on 11th of October, 2020.

Problem Recently, I’ve faced an interesting challenge around labels and Prometheus Recording Rules.

Hey Dmitri, I have explored options of looking into memory monitoring of dataflow.

*Photo by Lianhao Qu on Unsplash* TL;DR Kubernetes nodes set conntrack_max value proportionally to the size of the RAM on the node.

*Photo by [Ricardo Gomez Angel](https://unsplash.com/@ripato) on Unsplash* As of now, Google Container Registry does not allow for granular access control to the images stored in the registry.

*Photo by JOSHUA COLEMAN on Unsplash* ## Theory [RFC 1918](https://tools.ietf.org/html/rfc1918) defines 3 core ranges of IPs for private networking usage: 10.0.0.0/8, 172.16.0.0/12 and 192.168.0.0/16 yielding 16'777'216, 1'048'576 and 65'536 IPs each.

Similarly to Reddit's [todayilearned](https://www.reddit.com/r/todayilearned/), I will be sharing my recent learnings about all things DevOps, cloud and distributed systems.

Do you know what is running in your production?

By Kleuske - Own work, CC BY-SA 4.0, Link Last year was a year of GCP for me.

Starting 29th of March Google Cloud Professionals attempting Data Engineer certification will be subject to the latest version of the certification exam.

GKE Rocks!

Problem Recently when creating a Node Pool for GKE cluster running on Service project of the Shared VPC I’ve encountered the following problem: gcloud container node-pools create new-node-pool \ --cluster=shared-vpc-cluster \ --disk-size=50GB \ --enable-a…

Problem Recently I’ve been setting up Redis Cluster to run in Kubernetes on GKE.

On Thursday 24th of January, I woke up to great news.

Edit: I’ve successfully passed this certification, landing #20 certification globally.

No keepalive sent from client for 120 seconds Those using Sensu for monitoring and alerting have seen this dreadful message many times.

I have been running a Gradle & Groovy related blog for an about a year using Wordpress.