The Cloud Native Craftsman#
Welcome to my website. I鈥檓 Mischa, a Cloud Native Engineer from Amsterdam.
Here I share thoughts and learnings about technical topics such as Microsoft
Azure, Kubernetes, Cloud Native technologies, DevOps and Linux. I’m also very
interested in anything that increases my productivity, so you will also find
writings on Zettelkasten, (Neo)vim, study techniques and anything that has to do
with taking notes.
In 2024 I was awared the Microsoft MVP title for my efforts of sharing knowledge
with the community.
Years of sharing knowledge on YouTube and this blog have uncovered a talent for
tackling difficult technical topics and explaining them in simple terms to
others.
In other words, I’ve found out that I have a knack for teaching. Following this
curiousity I started a Skool Community
where I create video courses on Kubernetes, Productivity, DevOps and much more.
My courses are also available on
Udemy
My courses have been received very well and I receive plenty of positive
feedback.
This blog is also available for your preferred RSS reader. Use
this link.
Sign Up For My Free Newsletter#
Socials#
馃摎 My Skool Community
馃惁 Twitter - X
馃捇 LinkedIn
馃捑 GitHub
馃帴 YouTube
Most Recent Posts#
This is hands down the best CLI for downloading YouTube videos.
I needed this to transfer some of my private videos to Vimeo. Don鈥檛 use this to break YouTube鈥檚 terms please.
https://github.com/kkdai/youtube
Links: 202405121505
Introduction I鈥檓 working on a project where I鈥檓 migrating an Azure Pipeline to GitHub Actions. So far I鈥檝e found the GitHub Actions very intuitive to work with and it was a very easy transition from Azure Pipelines.
One requirement was to increase the version with every build. In the previous setup they were using the build ID, but I鈥檓 an advocate of always using semantic versioning if possible, so I wondered if this could be done using the GitHub Actions.
...
When solving a killercoda challenge I ran into some confusion. Even though my solution worked, there was a difference which I wanted to get clear on.
I wrote this:
apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: name: np namespace: space1 spec: podSelector: {} policyTypes: - Egress egress: - to: - namespaceSelector: matchLabels: kubernetes.io/metadata.name: space2 - to: ports: - protocol: TCP port: 53 - protocol: UDP port: 53 But the provided course solution was this:
...
There are two things which I鈥檓 dreading most for the CKS exam: writing Network Policies and configuring RBAC under heavy time pressure.
I鈥檝e heard from colleagues that the exam has many questions of this nature, so it will be a good way of scoring points. However, regardless of the exam, the fact that I鈥檓 dreading these topics also shows that I鈥檓 not familiar enough with them and therefore this is a point where I should improve. It鈥檚 not only about the exam, but also my growth of expertise as a Kubernetes Engineer.
...
It seems like I will have a couple of hours a day which I can allot to study in the coming month. This will be the perfect moment to start working on a goal I鈥檝e had for a long time: getting my Certified Kubernetes Security Specialist certification.
t鈥檚 not going to be easy. I鈥檓 quite intimidated by all of the new things I鈥檒l have to learn. But that鈥檚 a good sign. It鈥檚 the way it works. Everybody would be doing this if it was easy, and I can only grow by doing hard things that seem intimidating at first.
...
Removing backgrounds from images is always an annoying task which I always need to google. And every time I end up on a different website where you can upload an image and then download a low-resolution version without the background, and you鈥檒l have to pay for the high-resolution.
Turns out MacOS preview can do this just fine. I keep finding these little gems in MacOS that completely remove the need for any external app or saas. Such as Apple Reminders.
...
In a recent analysis, I explored two notable solutions for synchronizing secrets from Azure Key Vaults to AKS (Azure Kubernetes Service) clusters: akv2k8s and the Azure Key Vault Provider for the Secret Store CSI Driver. Here, I present my findings and recommendations based on the functionality, maintenance requirements, and integration capabilities of these tools.
Akv2k8s, maintained by Sparebanken, is an open-source tool designed for the synchronization of secrets. Being dependent on an external tool for Kubernetes secrets synchronization is an undesirable situation and poses several challenges. Notably, the latest version of akv2k8s has been problematic, especially concerning the deployment of Postgres databases on our AKS clusters using the EDB operator. Akv2k8s alters the SecurityContext of pods in a way that causes them to fail.
...
This document is the result of my research into the Gateway API. It aims to briefly describe the Gateway API for Kubernetes, a typical implementation of ingress traffic using NGINX in AKS and how this setup could benefit from implementing the Gateway API.
Introduction Gateway API is an official Kubernetes project focused on L4 and L7 routing in Kubernetes. This project represents the next generation of Kubernetes Ingress, Load Balancing, and Service Mesh APIs. From the outset, it has been designed to be generic, expressive, and role-oriented.
...
Super useful
https://dannorth.net/hugo-redirects/
Links: 202403071003
I鈥檓 an avid reader, and this list is far from complete. But I wanted to start writing down the ones I鈥檓 reading now, and the ones I鈥檝e read in the past. I鈥檓 mostly writing down titles but I鈥檒l include the author when I remember the name.
2024 How To Take Smart Notes
Getting Things Done
2023 The Lords of the North
The Pale Horseman
The Last Kingdom
Born to Run 2
...