devops/automation/ansible on /home/fel1x

Vault (Part 3): Secure Kubernetes Authentication with HashiCorp Vault OIDC

xuanphuc.a1gv@gmail.com (Felix Hoang) — Sun, 23 Nov 2025 00:00:00 +0000

This is Part 3 of the Hashicorp Vault series. In Part 1, we bootstrapped Vault. In Part 2, we built the full CI/CD pipeline. Now, we’re solving the final, massive headache: getting secure, dynamic kubectl access.

Vault (Part 2): Secure On-Prem Automation with Ephemeral Runners and Tailscale

xuanphuc.a1gv@gmail.com (Felix Hoang) — Mon, 17 Nov 2025 00:00:00 +0000

This is Part 2 of the Hashicorp Vault series. Part 1 covered bootstrapping and configuring HashiCorp Vault (the one-time terraform-admin work) and the design goals for Zero Trust secrets management.

On-Premise 101 (Part 5): From Terraform VMs to a K8s Cluster with Ansible

xuanphuc.a1gv@gmail.com (Felix Hoang) — Tue, 11 Nov 2025 00:00:00 +0000

People are often scared to learn Kubernetes because it’s difficult to set up an environment to play around with. Sure, you can use a project like minikube to learn on your own, but running it on your laptop seems limited, and you may not get to experience all the awesome features Kubernetes offers (remember, it was born for high availability). Or, if you have money, you can use a managed Kubernetes cluster from one of the cloud providers. Often, they’ve abstracted away so many things under the hood that you only need to learn kubectl and you’re good to go.

Automate provisioning Kubernetes cluster on Proxmox with Terraform + Ansible

xuanphuc.a1gv@gmail.com (Felix Hoang) — Sat, 31 May 2025 00:00:00 +0000

This project automates the provisioning and configuration of a RKE2 Kubernetes cluster on Proxmox using Terraform and Ansible.