<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>kubernetes on /home/fel1x</title><link>https://phuchoang.sbs/tags/tech/kubernetes/</link><description>Recent content in kubernetes on /home/fel1x</description><generator>Hugo -- gohugo.io</generator><language>en</language><managingEditor>xuanphuc.a1gv@gmail.com (Felix Hoang)</managingEditor><webMaster>xuanphuc.a1gv@gmail.com (Felix Hoang)</webMaster><copyright>© 2026 Felix Hoang</copyright><lastBuildDate>Sun, 29 Mar 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://phuchoang.sbs/tags/tech/kubernetes/index.xml" rel="self" type="application/rss+xml"/><item><title>Refurbished Marketplace – Distributed Go Microservices</title><link>https://phuchoang.sbs/projects/refurbished-marketplace/</link><pubDate>Sun, 29 Mar 2026 00:00:00 +0000</pubDate><author>xuanphuc.a1gv@gmail.com (Felix Hoang)</author><guid>https://phuchoang.sbs/projects/refurbished-marketplace/</guid><description>This project explores distributed Go microservices through a refurbished-goods marketplace, with a server-rendered storefront, catalog search, inventory reservations, and merchant-scoped checkout. It combines gRPC APIs, Kafka and Debezium messaging, a durable checkout saga, and Argo CD deployments on Talos Kubernetes with Istio ambient mTLS and OpenTelemetry observability.</description></item><item><title>Vault (Part 4): Dynamic Secrets for Kubernetes Pods with External Secrets Operator</title><link>https://phuchoang.sbs/posts/gitops-external-secrets-vault/</link><pubDate>Mon, 24 Nov 2025 00:00:00 +0000</pubDate><author>xuanphuc.a1gv@gmail.com (Felix Hoang)</author><guid>https://phuchoang.sbs/posts/gitops-external-secrets-vault/</guid><description>&lt;p&gt;This is Part 4 of the Hashicorp Vault series. In &lt;a href="https://phuchoang.sbs/posts/gitops-github-actions-hashicorp-vault/" target="_blank" rel="noreferrer"&gt;Part 1&lt;/a&gt;, we bootstrapped Vault. In &lt;a href="https://phuchoang.sbs/posts/gitops-github-actions-terraform-ansible/" target="_blank" rel="noreferrer"&gt;Part 2&lt;/a&gt;, we built our CI/CD pipeline. In &lt;a href="https://phuchoang.sbs/posts/gitops-kubernetes-oidc-vault/" target="_blank" rel="noreferrer"&gt;Part 3&lt;/a&gt;, we finally killed the static &lt;code&gt;kubeconfig&lt;/code&gt;.&lt;/p&gt;</description></item><item><title>Vault (Part 3): Secure Kubernetes Authentication with HashiCorp Vault OIDC</title><link>https://phuchoang.sbs/posts/gitops-kubernetes-oidc-vault/</link><pubDate>Sun, 23 Nov 2025 00:00:00 +0000</pubDate><author>xuanphuc.a1gv@gmail.com (Felix Hoang)</author><guid>https://phuchoang.sbs/posts/gitops-kubernetes-oidc-vault/</guid><description>&lt;p&gt;This is Part 3 of the Hashicorp Vault series. In &lt;a href="https://phuchoang.sbs/posts/gitops-github-actions-hashicorp-vault/" target="_blank" rel="noreferrer"&gt;Part 1&lt;/a&gt;, we bootstrapped Vault. In &lt;a href="https://phuchoang.sbs/posts/gitops-github-actions-terraform-ansible/" target="_blank" rel="noreferrer"&gt;Part 2&lt;/a&gt;, we built the full CI/CD pipeline. Now, we&amp;rsquo;re solving the final, massive headache: &lt;strong&gt;getting secure, dynamic &lt;code&gt;kubectl&lt;/code&gt; access.&lt;/strong&gt;&lt;/p&gt;</description></item><item><title>On-Premise 101 (Part 5): From Terraform VMs to a K8s Cluster with Ansible</title><link>https://phuchoang.sbs/posts/on-premise-provison-ansible/</link><pubDate>Tue, 11 Nov 2025 00:00:00 +0000</pubDate><author>xuanphuc.a1gv@gmail.com (Felix Hoang)</author><guid>https://phuchoang.sbs/posts/on-premise-provison-ansible/</guid><description>&lt;p&gt;People are often scared to learn &lt;code&gt;Kubernetes&lt;/code&gt; because it&amp;rsquo;s difficult to set up an environment to play around with. Sure, you can use a project like &lt;code&gt;minikube&lt;/code&gt; to learn on your own, but running it on your laptop seems limited, and you may not get to experience all the awesome features &lt;code&gt;Kubernetes&lt;/code&gt; offers (remember, it was born for high availability). Or, if you have money, you can use a managed &lt;code&gt;Kubernetes&lt;/code&gt; cluster from one of the cloud providers. Often, they&amp;rsquo;ve abstracted away so many things under the hood that you only need to learn &lt;code&gt;kubectl&lt;/code&gt; and you&amp;rsquo;re good to go.&lt;/p&gt;</description></item><item><title>Scalable Real-Time Credit Card Fraud Detection System</title><link>https://phuchoang.sbs/projects/realtime-credit-card-fraud-detection/</link><pubDate>Thu, 06 Nov 2025 00:00:00 +0000</pubDate><author>xuanphuc.a1gv@gmail.com (Felix Hoang)</author><guid>https://phuchoang.sbs/projects/realtime-credit-card-fraud-detection/</guid><description>This repository contains a complete end-to-end system for real-time credit card fraud detection, including data analysis notebooks, a machine learning API, and infrastructure-as-code for cloud deployment. The system is designed with a modern, observable, and scalable architecture.</description></item><item><title>Automate provisioning Kubernetes cluster on Proxmox with Terraform + Ansible</title><link>https://phuchoang.sbs/projects/kubernetes-proxmox/</link><pubDate>Sat, 31 May 2025 00:00:00 +0000</pubDate><author>xuanphuc.a1gv@gmail.com (Felix Hoang)</author><guid>https://phuchoang.sbs/projects/kubernetes-proxmox/</guid><description>This project automates the provisioning and configuration of a RKE2 Kubernetes cluster on Proxmox using Terraform and Ansible.</description></item></channel></rss>