devops on /home/fel1x

Talos on Proxmox – Hybrid Kubernetes with AWS Burst Workers

xuanphuc.a1gv@gmail.com (Felix Hoang) — Sun, 30 Aug 2026 00:00:00 +0000

This project automates independent development and production Talos Kubernetes environments on Proxmox using OpenTofu and GitHub Actions, with optional stateless AWS workers connected through KubeSpan. Each cluster runs its own Argo CD for GitOps application management, while Doppler and External Secrets supply credentials and persistent workloads stay on Proxmox.

Talos on Proxmox – Hybrid Kubernetes with AWS Burst Workers

xuanphuc.a1gv@gmail.com (Felix Hoang) — Sun, 30 Aug 2026 00:00:00 +0000

Talos on Proxmox – Hybrid Kubernetes with AWS Burst Workers

xuanphuc.a1gv@gmail.com (Felix Hoang) — Sun, 30 Aug 2026 00:00:00 +0000

Talos on Proxmox – Hybrid Kubernetes with AWS Burst Workers

xuanphuc.a1gv@gmail.com (Felix Hoang) — Sun, 30 Aug 2026 00:00:00 +0000

Talos on Proxmox – Hybrid Kubernetes with AWS Burst Workers

xuanphuc.a1gv@gmail.com (Felix Hoang) — Sun, 30 Aug 2026 00:00:00 +0000

Talos on Proxmox – Hybrid Kubernetes with AWS Burst Workers

xuanphuc.a1gv@gmail.com (Felix Hoang) — Sun, 30 Aug 2026 00:00:00 +0000

Talos on Proxmox – Hybrid Kubernetes with AWS Burst Workers

xuanphuc.a1gv@gmail.com (Felix Hoang) — Sun, 30 Aug 2026 00:00:00 +0000

Refurbished Marketplace – Distributed Go Microservices

xuanphuc.a1gv@gmail.com (Felix Hoang) — Sun, 29 Mar 2026 00:00:00 +0000

This project explores distributed Go microservices through a refurbished-goods marketplace, with a server-rendered storefront, catalog search, inventory reservations, and merchant-scoped checkout. It combines gRPC APIs, Kafka and Debezium messaging, a durable checkout saga, and Argo CD deployments on Talos Kubernetes with Istio ambient mTLS and OpenTelemetry observability.

Refurbished Marketplace – Distributed Go Microservices

xuanphuc.a1gv@gmail.com (Felix Hoang) — Sun, 29 Mar 2026 00:00:00 +0000

Refurbished Marketplace – Distributed Go Microservices

xuanphuc.a1gv@gmail.com (Felix Hoang) — Sun, 29 Mar 2026 00:00:00 +0000

Refurbished Marketplace – Distributed Go Microservices

xuanphuc.a1gv@gmail.com (Felix Hoang) — Sun, 29 Mar 2026 00:00:00 +0000

Vault (Part 4): Dynamic Secrets for Kubernetes Pods with External Secrets Operator

xuanphuc.a1gv@gmail.com (Felix Hoang) — Mon, 24 Nov 2025 00:00:00 +0000

This is Part 4 of the Hashicorp Vault series. In Part 1, we bootstrapped Vault. In Part 2, we built our CI/CD pipeline. In Part 3, we finally killed the static kubeconfig.

Vault (Part 4): Dynamic Secrets for Kubernetes Pods with External Secrets Operator

xuanphuc.a1gv@gmail.com (Felix Hoang) — Mon, 24 Nov 2025 00:00:00 +0000

This is Part 4 of the Hashicorp Vault series. In Part 1, we bootstrapped Vault. In Part 2, we built our CI/CD pipeline. In Part 3, we finally killed the static kubeconfig.

Vault (Part 4): Dynamic Secrets for Kubernetes Pods with External Secrets Operator

xuanphuc.a1gv@gmail.com (Felix Hoang) — Mon, 24 Nov 2025 00:00:00 +0000

This is Part 4 of the Hashicorp Vault series. In Part 1, we bootstrapped Vault. In Part 2, we built our CI/CD pipeline. In Part 3, we finally killed the static kubeconfig.

Vault (Part 3): Secure Kubernetes Authentication with HashiCorp Vault OIDC

xuanphuc.a1gv@gmail.com (Felix Hoang) — Sun, 23 Nov 2025 00:00:00 +0000

This is Part 3 of the Hashicorp Vault series. In Part 1, we bootstrapped Vault. In Part 2, we built the full CI/CD pipeline. Now, we’re solving the final, massive headache: getting secure, dynamic kubectl access.

Vault (Part 3): Secure Kubernetes Authentication with HashiCorp Vault OIDC

xuanphuc.a1gv@gmail.com (Felix Hoang) — Sun, 23 Nov 2025 00:00:00 +0000

Vault (Part 3): Secure Kubernetes Authentication with HashiCorp Vault OIDC

xuanphuc.a1gv@gmail.com (Felix Hoang) — Sun, 23 Nov 2025 00:00:00 +0000

Vault (Part 3): Secure Kubernetes Authentication with HashiCorp Vault OIDC

xuanphuc.a1gv@gmail.com (Felix Hoang) — Sun, 23 Nov 2025 00:00:00 +0000

Vault (Part 2): Secure On-Prem Automation with Ephemeral Runners and Tailscale

xuanphuc.a1gv@gmail.com (Felix Hoang) — Mon, 17 Nov 2025 00:00:00 +0000

This is Part 2 of the Hashicorp Vault series. Part 1 covered bootstrapping and configuring HashiCorp Vault (the one-time terraform-admin work) and the design goals for Zero Trust secrets management.

Vault (Part 2): Secure On-Prem Automation with Ephemeral Runners and Tailscale

xuanphuc.a1gv@gmail.com (Felix Hoang) — Mon, 17 Nov 2025 00:00:00 +0000

Vault (Part 2): Secure On-Prem Automation with Ephemeral Runners and Tailscale

xuanphuc.a1gv@gmail.com (Felix Hoang) — Mon, 17 Nov 2025 00:00:00 +0000

Vault (Part 2): Secure On-Prem Automation with Ephemeral Runners and Tailscale

xuanphuc.a1gv@gmail.com (Felix Hoang) — Mon, 17 Nov 2025 00:00:00 +0000

Vault (Part 1): HashiCorp Vault for Zero Trust Secrets Management

xuanphuc.a1gv@gmail.com (Felix Hoang) — Sun, 16 Nov 2025 00:00:00 +0000

In the last two parts of the On-Premise 101 series, I showed you how to provision and bootstrap a full Kubernetes cluster. Now, I’m tearing part of it down and rebuilding the entire workflow. Why? The project’s goal was always automation, but I hit a wall. The manual steps to set up that automation - like managing secrets and SSH keys - became a huge liability.

Vault (Part 1): HashiCorp Vault for Zero Trust Secrets Management

xuanphuc.a1gv@gmail.com (Felix Hoang) — Sun, 16 Nov 2025 00:00:00 +0000

Vault (Part 1): HashiCorp Vault for Zero Trust Secrets Management

xuanphuc.a1gv@gmail.com (Felix Hoang) — Sun, 16 Nov 2025 00:00:00 +0000

On-Premise 101 (Part 5): From Terraform VMs to a K8s Cluster with Ansible

xuanphuc.a1gv@gmail.com (Felix Hoang) — Tue, 11 Nov 2025 00:00:00 +0000

People are often scared to learn Kubernetes because it’s difficult to set up an environment to play around with. Sure, you can use a project like minikube to learn on your own, but running it on your laptop seems limited, and you may not get to experience all the awesome features Kubernetes offers (remember, it was born for high availability). Or, if you have money, you can use a managed Kubernetes cluster from one of the cloud providers. Often, they’ve abstracted away so many things under the hood that you only need to learn kubectl and you’re good to go.

On-Premise 101 (Part 5): From Terraform VMs to a K8s Cluster with Ansible

xuanphuc.a1gv@gmail.com (Felix Hoang) — Tue, 11 Nov 2025 00:00:00 +0000

On-Premise 101 (Part 5): From Terraform VMs to a K8s Cluster with Ansible

xuanphuc.a1gv@gmail.com (Felix Hoang) — Tue, 11 Nov 2025 00:00:00 +0000

On-Premise 101 (Part 4): Automating 12 VMs creation on Proxmox with Terraform