Personal blog with emphasis on cloud-native technologies, by a Senior DevOps Engineer experienced in AWS, Kubernetes, Terraform, ArgoCD, and NixOS.https://sbulav.github.io/en-ushttps://sbulav.github.io/neovim/plugins/jira-oil-nvim/https://sbulav.github.io/neovim/plugins/jira-oil-nvim/As a team lead, managing and creating Jira tasks is something I have to do on a daily basis. Jumping between the code in my editor and the Jira web interface often breaks my flow, so I've spent a lot of time looking for a better way to handle my backlog. Over the years, I've tried multiple…Mon, 02 Mar 2026 00:00:00 GMTneovimjiraproductivityhttps://sbulav.github.io/neovim/plugins/neovim-beautiful-plugin-demos/https://sbulav.github.io/neovim/plugins/neovim-beautiful-plugin-demos/When I released jira oil.nvim, I wanted a demo that looked clean and was easy to maintain. At first it sounded simple: open Neovim, do a few actions, record screen, publish GIF. In practice, there were three problems: 1. I could not expose real Jira issues from work. 2. Recording a good GIF from a…Mon, 02 Mar 2026 00:00:00 GMTneovimjiravhsdemoautomationhttps://sbulav.github.io/blog/100th-post-and-blog-redesign/https://sbulav.github.io/blog/100th-post-and-blog-redesign/This is the 100th post on this blog. I wrote the first one on April 15, 2020, mostly to see if I'd stick with it. Turns out I did, almost six years and a hundred posts later. To celebrate post 100, I decided to rebuild the entire site from scratch. Why redesign now The blog has been running on…Mon, 16 Feb 2026 00:00:00 GMTblogastrothoughtshttps://sbulav.github.io/kubernetes/calico-policy-visualiser/https://sbulav.github.io/kubernetes/calico-policy-visualiser/At work, we use Calico network policies extensively. Between NetworkPolicy and GlobalNetworkPolicy resources across multiple clusters, keeping track of what's allowed and what's blocked gets complicated fast. Reading raw YAML works when you have one simple policy, but once you're dealing with…Tue, 10 Feb 2026 00:00:00 GMTkubernetescalicohttps://sbulav.github.io/neovim/plugins/neovim-snacks-tea/https://sbulav.github.io/neovim/plugins/neovim-snacks-tea/Lately, I’ve been spending most of my time working with Forgejo — a great self hosted Git service I use for both personal and work projects. Since almost all my coding happens inside Neovim , I rely heavily on a tight workflow between my editor and Git hosting. I’ve been using folke/snacks.nvim for…Mon, 26 Jan 2026 00:00:00 GMTneovimforgejoteasnackshttps://sbulav.github.io/til/til-webrtc-landing-page/https://sbulav.github.io/til/til-webrtc-landing-page/I discovered a useful WebRTC testing page created by Mozilla: https://mozilla.github.io/webrtc landing/gum test.html. This page is designed to demonstrate and test the getUserMedia (gUM) API — part of the WebRTC suite of browser APIs that let web applications access a user's camera and microphone…Mon, 22 Dec 2025 00:00:00 GMTwebrtcwebcamscreen-sharingwaylandhttps://sbulav.github.io/kubernetes/running-rootless-forgejo-runners-kubernetes-ubuntu/https://sbulav.github.io/kubernetes/running-rootless-forgejo-runners-kubernetes-ubuntu/Forgejo is a self hosted Git service that provides a powerful CI/CD system through Forgejo Actions. However, running Forgejo runners in Kubernetes, especially in rootless mode, presents several challenges that require careful configuration. In this post, I'll walk you through setting up rootless…Wed, 26 Nov 2025 00:00:00 GMTkubernetesforgejodockerhttps://sbulav.github.io/obsidian/nextcloud/obsidian-sync-between-devices-using-nextcloud/https://sbulav.github.io/obsidian/nextcloud/obsidian-sync-between-devices-using-nextcloud/I've been using Obsidian for managing notes across multiple devices for a while now. Initially, I relied on remote sync via Yandex Disk, mostly because it was convenient and free. However, recently I've encountered significant issues with it, primarily due to frequent HTTP 429 "Too Many Requests"…Thu, 10 Jul 2025 00:00:00 GMTobsidiannextcloudhttps://sbulav.github.io/nix/repackaging-linux-mac-kontur-talk-with-nix/https://sbulav.github.io/nix/repackaging-linux-mac-kontur-talk-with-nix/Our company recently decided to transition from Zoom to Kontur Talk (ktalk) for voice and video communications. Kontur provides official application packages as Linux AppImage and macOS DMG files, but to ensure consistency across developer workstations running both Linux and macOS, I set out to…Tue, 13 May 2025 00:00:00 GMTnixhttps://sbulav.github.io/nix/understanding-zfs-zed-failures-nixos/https://sbulav.github.io/nix/understanding-zfs-zed-failures-nixos/Understanding ZFS ZED Service Failures on NixOS I'm running NixOS with ZFS, and couple timed during updates I've faced an issue with the ZFS Event Daemon ( zfs zed ) service. A typical error message looks like this: Why Does This Happen? When the Linux kernel updates on NixOS, the corresponding ZFS…Tue, 06 May 2025 00:00:00 GMTnixzfshttps://sbulav.github.io/nix/renovate-update-nix-flake/https://sbulav.github.io/nix/renovate-update-nix-flake/Renovate is an essential tool for managing dependencies automatically. Integrating Renovate with your Nix Flake based project ensures timely updates, maintains security, and keeps your project streamlined. Here's how to onboard your repository and configure Renovate effectively. Step by Step…Mon, 05 May 2025 00:00:00 GMTnixhttps://sbulav.github.io/vim/neovim-setting-up-nixd/https://sbulav.github.io/vim/neovim-setting-up-nixd/I was using nil language server for a while, and it was working fine. However, after a great video from vimjoyer's new video nixd seems to have more features, as it is in very active development state right now. Among the killer features for me was options auto completion. While vimjoyer did a…Fri, 25 Oct 2024 00:00:00 GMTvimhttps://sbulav.github.io/kubernetes/running-testcontainers-in-kubernetes/https://sbulav.github.io/kubernetes/running-testcontainers-in-kubernetes/Testcontainers is great framework for replacing complicated mocks in tests with the real dependencies like databases, message queues, etc.. in containers. Developers love this framework, and it's really easy to get it running on the local machine. However, running testcontainers in Kubernetes, as…Tue, 20 Aug 2024 00:00:00 GMTkubernetescontainershttps://sbulav.github.io/vim/neovim-validating-gitlab-ci/https://sbulav.github.io/vim/neovim-validating-gitlab-ci/I really enjoyed using nvim jenkinsfile linter when I was writing Jenkinsfiles. Simple yet useful, this plugin helped to speed up writing Jenkins pipelines as I didn't have to to Jenkins Web UI to check if my pipeline is correct. Now I'm writing Gitlab CI, and I couldn't find any plugin with such…Mon, 15 Apr 2024 00:00:00 GMTvimhttps://sbulav.github.io/nix/nix-fingerprint-authentication/https://sbulav.github.io/nix/nix-fingerprint-authentication/Introduction If you're running NixOs on your laptop, and your laptop have fingrerprint scanner, it can be very convenient to use it for authentication. I couldn't find any articles on setting up fprintd on NixOS, so I'll share how I've done it. I am using regreet for my login manager, and, while it…Wed, 18 Oct 2023 00:00:00 GMTnixauthenticationhttps://sbulav.github.io/nix/nix-colemak-dh/https://sbulav.github.io/nix/nix-colemak-dh/NixOs is gaining a lot of attentions right now. I've also decided to try to use is as my daily driver. I won't go into the details of installation of nixos, or setting up flake. Check out Introduction to Nix & NixOS free ebook and Nix starter configis As I use Colemak Mod DH layout, this was must…Fri, 29 Sep 2023 00:00:00 GMTnixcolemakhttps://sbulav.github.io/vim/neovim-numbered-lists/https://sbulav.github.io/vim/neovim-numbered-lists/When writing markdown, it's super common that you need numbered lists. (Neo)Vim has built in support which makes creating numbered lists like a breeze. Making a list of numbers article covers many approaches to creating lists, but it's hard to find the true gem automatic numbering. See :help v g…Tue, 07 Feb 2023 00:00:00 GMTvimhttps://sbulav.github.io/webinar/testing-infrastructure-as-a-code/https://sbulav.github.io/webinar/testing-infrastructure-as-a-code/If you're interested in Testing Infrastructure as Code, join me Feb 27 2023, 1:00pm with the By watching this webinar, you will learn: The importance of testing infrastructure code with Terraform How to use TFTest to test your devops infra modules Techniques for running tests in parallel and…Mon, 06 Feb 2023 00:00:00 GMTterraforminfrastructurepresentationhttps://sbulav.github.io/truenas/truenas-ups-reporting/https://sbulav.github.io/truenas/truenas-ups-reporting/I continue my adventures with TrueNas Scale. After configuring UPS I wanted to see the UPS graphs on the reporting page, but they were empty. As it turns out, now reporting for UPS is broken, and you have to dig deep to make it work due to the following reasons: CollectD Debian maintainers disabled…Thu, 17 Nov 2022 00:00:00 GMTtruenasupshttps://sbulav.github.io/truenas/truenas-ups-huawei2000/https://sbulav.github.io/truenas/truenas-ups-huawei2000/To protect my TrueNas Scale installation from power outage, I bought a UPS. I had a good deal on Huawei UPS2000G, and considering that it's an online UPS it was a no brainer for me. However, with all it's advantages, it has some drawbacks: Pretty loud fans, which doesn't make it a good fit for home…Tue, 15 Nov 2022 00:00:00 GMTtruenasupshttps://sbulav.github.io/truenas/truenas-installing-kubectl/https://sbulav.github.io/truenas/truenas-installing-kubectl/TrueNas Scale uses k3s, which is a lightweight Kubernetes distribution. It's intended to be used only as platform for APPS, but I don't see why you can't use it as your playground. Connecting to TrueNas k3s locally This way you connect to k3s locally, which is more secure than exposing your…Thu, 10 Nov 2022 00:00:00 GMTtruenaskubectlk9shttps://sbulav.github.io/truenas/truenas-install-fish/https://sbulav.github.io/truenas/truenas-install-fish/Recently I bought a server that I will be using as NAS/HomeLab. My OS of choice for this server is TrueNas Scale. It's a great OS with a polished web interface, but for HomeLab you want to play around with it and customize a lot of things. So I thought that I'll write a series of blog posts sharing…Wed, 09 Nov 2022 00:00:00 GMTtruenasfishhttps://sbulav.github.io/certifications/gitops-at-scale/https://sbulav.github.io/certifications/gitops-at-scale/I've passed the course GitOps at Scale and follow up exam: This is a second course on ArgoCD. It has short and precise materials, useful pieces of advice on deploying and managing ArgoCD. The team did a great job on this course! During this course you'll learn: How to manage external clusters with…Tue, 04 Oct 2022 00:00:00 GMTkubernetesgitopscertificationshttps://sbulav.github.io/til/terraform/til-terraform-refactor-without-recreation/https://sbulav.github.io/til/terraform/til-terraform-refactor-without-recreation/Today I learned that since v1.1 , you can move Terraform resources into modules without recreation using moved block. Refactoring doc covers such use cases as renaming resources, enabling count or for each and splitting module into multiple modules. But this doc don't cover my use case, move one or…Fri, 30 Sep 2022 00:00:00 GMTterraformhttps://sbulav.github.io/til/kubernetes/til-kubectl-integrated-kustomize/https://sbulav.github.io/til/kubernetes/til-kubectl-integrated-kustomize/Today I learned that since 1.14, 'kubectl' has Kustomize integrated in it: I don't know how I've missed this change, but it's nice to know. More info: Declarative Management of Kubernetes Objects Using KustomizeFri, 09 Sep 2022 00:00:00 GMTkuberneteshttps://sbulav.github.io/kubernetes/monitoring-calico-kube-stack-prometheus/https://sbulav.github.io/kubernetes/monitoring-calico-kube-stack-prometheus/Monitoring of each Kubernetes component is very important, and Calico is not exception. Today I learned that Calico provides capabilities to export Prometheus metrics out of the box. However, Official documentation is a bit misleading and examples from it doesn't work with Prometheus installed via…Thu, 04 Aug 2022 00:00:00 GMTcalicokubernetesprometheushttps://sbulav.github.io/vim/neovim-opening-github-repos/https://sbulav.github.io/vim/neovim-opening-github-repos/I have a very useful mapping in my Neovim: gx , which opens the URL under the cursor in the browser. I even wrote a blog post on it: Neovim Opening URLs This blog post is a bit outdated,especially with the newly introduced way of setting up mappings through vim.keymap.set , but still works like a…Wed, 27 Jul 2022 00:00:00 GMTvimgithttps://sbulav.github.io/til/til-adding-maps-to-github-markdown/https://sbulav.github.io/til/til-adding-maps-to-github-markdown/Today I learned that you can embed maps in geoJSON and topoJSON format into your markdown files. For example, you can select desired area in the geojson.io, copy the code and embed it like this: This snippet will be rendered automatically in your markdown files. To paste this in GitHub Pages, use…Wed, 29 Jun 2022 00:00:00 GMTgithubhttps://sbulav.github.io/certifications/passed-few-free-kubernetes-certifications/https://sbulav.github.io/certifications/passed-few-free-kubernetes-certifications/I've passed some free courses and corresponding certifications, which I find pretty useful. Certified Calico Operator: Level 1 CCO L1 course will arm you with the knowledge you need to understand how Kubernetes networking works, how to configure and manage a Calico network, and how to secure your…Thu, 09 Jun 2022 00:00:00 GMTkubernetescalicocertificationshttps://sbulav.github.io/aws/aws-calico-implementing-on-existing-cluster/https://sbulav.github.io/aws/aws-calico-implementing-on-existing-cluster/In one of our production clusters, we've faced the issue of depleting the IP addresses, due to how ENI assigns and reserves IP addresses. You can check out ENI Max Pods for the numbers. The most obvious choice is to use a different CNI plugin for the EKS, with Calico being the most popular one.…Tue, 07 Jun 2022 00:00:00 GMTawscalicohttps://sbulav.github.io/vim/neovim-signing-git-commits/https://sbulav.github.io/vim/neovim-signing-git-commits/While all commits to GitHub through the web interface are automatically signed, you have to do some configuration to make it work in the console. Signing Git commits might be a requirement for your job, OpenSource maintainers might only accept signed contributions or you might just want to increase…Mon, 16 May 2022 00:00:00 GMTvimgithttps://sbulav.github.io/til/aws/til-keda-datadog-dont-work-together/https://sbulav.github.io/til/aws/til-keda-datadog-dont-work-together/Today I learned that Keda and DataDog don't work together. I was trying to implement automatic scaling based on the AWS SQS Queue. While according to the Scaler Documentation, everything should work, I kept receiving weird error messages. After some in depth investigation, I’ve figured out that…Wed, 27 Apr 2022 00:00:00 GMTawshttps://sbulav.github.io/blog/two-years-to-blog/https://sbulav.github.io/blog/two-years-to-blog/Today marks two years of this blog. I wrote my first post on this blog on 2020.04.15. For two years, I wrote 73 posts, some of which become popular. In this post, I'll share some statistics about my blog, and I will use Google Analytics for that. Audience My audience slowly grew from zero, recently…Fri, 15 Apr 2022 00:00:00 GMTbloghttps://sbulav.github.io/vim/neovim-improving-work-with-terraform/https://sbulav.github.io/vim/neovim-improving-work-with-terraform/Working with Terraform on a daily basis and using Neovim as my main and only editor, I recently figured out a few improvements, which I'll share in this blog post. Correctly detecting TF filetype Many users of NeoVim use filetype.nvim, which replaces native filetype detection and speeds up Neovim…Wed, 06 Apr 2022 00:00:00 GMTvimhttps://sbulav.github.io/kubernetes/becoming-packt-technical-reviewer/https://sbulav.github.io/kubernetes/becoming-packt-technical-reviewer/I've became a technical reviewer for the book Kubernetes – An Enterprise Guide Second Edition Today I've received my printed copy of the book: I thought that I should share my thoughts if it's worth it. When you agree to became a technical reviewer, you sign a contract with Packt. For me, the…Thu, 20 Jan 2022 00:00:00 GMTkubernetespackthttps://sbulav.github.io/til/til-neovim-highlight-references/https://sbulav.github.io/til/til-neovim-highlight-references/Today I learned a pretty cool LSP feature automatic highlighting of references for the current text position: To make it work, a few requirements have to be met: Your LSP must support such capabilities Your colorscheme must support highlight groups defined Make it work by introducing autocommands…Thu, 20 Jan 2022 00:00:00 GMTvimhttps://sbulav.github.io/kubernetes/participating-in-do-k8s-challenge/https://sbulav.github.io/kubernetes/participating-in-do-k8s-challenge/When I saw that Digital Ocean @digitalocean is organizing a Kubernetes Challenge I decided that I'll participate. The idea behind the challenge is pretty cool you pick one of the proposed scenarios, DO give you some credit to implement this scenario, you create a write up describing your…Wed, 19 Jan 2022 00:00:00 GMTkubernetesdigital-oceanhttps://sbulav.github.io/til/til-neovim-lsp-tagstack/https://sbulav.github.io/til/til-neovim-lsp-tagstack/When you use Neovim LSP functions like vim.lsp.buf.definition() or vim.lsp.buf.implementation() , your cursor jumps to the corresponding position. Your previous position is added to the jumplist. However, if you start jumping around, your jumplist quickly becomes populated with irrelevant jumps and…Thu, 13 Jan 2022 00:00:00 GMTvimhttps://sbulav.github.io/kubernetes/kubernetes-troubleshooting-autoscaler/https://sbulav.github.io/kubernetes/kubernetes-troubleshooting-autoscaler/To understand what's going on on the market, it's useful to apply to open positions from time to time. This provides an opportunity to: figure out your weak spots understand fair pay for your skills and knowledge solve interesting technical challenges One of such interesting technical challenges…Wed, 22 Dec 2021 00:00:00 GMTkuberneteshttps://sbulav.github.io/til/til-adding-video-to-github-markdown/https://sbulav.github.io/til/til-adding-video-to-github-markdown/In the beginning of 2021, Nat Friedman announced that Video files that you drop onto markdown files are now automatically embedded! While that sounded pretty cool, there were 2 things which didn't let me try this feature: 1. All demos showed that .mp4 files were added to the README.md, so I thought…Tue, 21 Dec 2021 00:00:00 GMTgithubhttps://sbulav.github.io/certifications/gitops-certified-for-argo/https://sbulav.github.io/certifications/gitops-certified-for-argo/I've passed the course GitOps Fundamentals and follow up exam: The course is free, and all you need to pass the Exam is some time and patience. The course gives some insights how ArgoCD and Argo Rollouts works. In a simple way. Even if you never worked with ArgoCD you'll be taught how to install…Mon, 20 Dec 2021 00:00:00 GMTkubernetesgitopscertificationshttps://sbulav.github.io/vim/neovim-enhancing-completion-with-tabnine/https://sbulav.github.io/vim/neovim-enhancing-completion-with-tabnine/While everyone is hyped about GitHub's Copilot, I've discovered TabNine, an AI completion that I enjoy a lot. When Copilot is aiming to write the whole function for you, TabNine just tries to intelligently complete the current line. Furthermore, the current implementation of Copilot for vim looks…Thu, 09 Dec 2021 00:00:00 GMTvimhttps://sbulav.github.io/til/til-conventional-commits/https://sbulav.github.io/til/til-conventional-commits/In my daily work, I try to use sane commits messages. Here's a typical example of my commit messages: While they're make sense, there's a better approach to writing commit messages. Today I learned that there's a whole specification for writing Conventional Commits. They provide a nice and…Tue, 30 Nov 2021 00:00:00 GMTgithttps://sbulav.github.io/vim/neovim-setting-up-luasnip/https://sbulav.github.io/vim/neovim-setting-up-luasnip/I've wanted to start using snippets for a while, but never actually invest time into figuring out how snippets work. The idea to expand blocks of text/code just but pressing a few key strokes seems very interesting. At the time of writing, there's a good amount of snippet plugins available for…Mon, 22 Nov 2021 00:00:00 GMTvimhttps://sbulav.github.io/til/til-kubernetes-slow-pv-mount/https://sbulav.github.io/til/til-kubernetes-slow-pv-mount/During my investigation of Pods taking a long time to start (20+ minutes) I saw following message in Pod's logs: I figured out that PVs are unavailable for reattaching as, due to enforced fsGroup , every time before mounting PV, SetVolumeOwnership() is run against the volume. For small volumes,…Wed, 15 Sep 2021 00:00:00 GMTkuberneteshttps://sbulav.github.io/azure/using-argocd-with-azure-acr/https://sbulav.github.io/azure/using-argocd-with-azure-acr/If you want to feel the taste of the GitOps approach one of the best tools on the market at the moment is ArgoCD. It has all the features you'd like to see from such tool and is stable enough to use it in production. As I'm a huge fan of Helm, the ability to deploy Helm charts is a killer feature…Wed, 15 Sep 2021 00:00:00 GMTkubernetesargocdhttps://sbulav.github.io/til/til-helm-chart-testing-custom-values/https://sbulav.github.io/til/til-helm-chart-testing-custom-values/Testing your changes to the Helm chart is a must if you want to minimize the risk of failure. There are a set of techniques, which you may use to validate your chart: Running helm lint Running helm template Running helm upgrade dry run against real installation Installing helm chart to Kubernetes…Mon, 02 Aug 2021 00:00:00 GMThelmkuberneteshttps://sbulav.github.io/til/til-helm-respect-current-replicas/https://sbulav.github.io/til/til-helm-respect-current-replicas/When you upgrade deployed Helm chart, you probably have replicas defined in values or pass it through set . But sometimes it's useful to respect the current amount of replicas, for example: If you're using Horizontal Pod Autoscaler If you're managing replicas through external automatization/script.…Fri, 18 Jun 2021 00:00:00 GMThelmkuberneteshttps://sbulav.github.io/vim/neovim-writing-lua-plugins/https://sbulav.github.io/vim/neovim-writing-lua-plugins/As an active user and developer of Github Actions, I spend a lot of time watching how the run goes on and reviewing logs of unsuccessful runs. So far I had to constantly hop between Neovim and Browser with opened runs. I was looking into how my workflow can be improved and usage of CLI tool gh was…Mon, 07 Jun 2021 00:00:00 GMTvimgithub actionshttps://sbulav.github.io/til/til-learning-github-script/https://sbulav.github.io/til/til-learning-github-script/If you're managing a lot of GitHub repositories you're probably using GitHub Actions. One extremely powerful action is github script. Using this script you can access any of GitHub APIs to do such things as modify repository permissions, manage GitHub App Installations, spread secrets, and many…Wed, 26 May 2021 00:00:00 GMTgithubtypescripthttps://sbulav.github.io/monitoring/monitoring-github-rate-limits/https://sbulav.github.io/monitoring/monitoring-github-rate-limits/If you're an active user of GitHub API, pretty soon you'll reach your account's rate limit 5000 requests per hour for authenticated user. To overcome this limitation, you can split your workload among different workloads, use conditional requests which does not count against your Rate Limit or use…Tue, 18 May 2021 00:00:00 GMTgithubprometheushttps://sbulav.github.io/fish/git-fzf-wrappers-for-fish/https://sbulav.github.io/fish/git-fzf-wrappers-for-fish/I was reading through the list of changes of new fzf version and, as it sometimes happened, found myself in a different place. This time, it was Key bindings for git with fzf Gist. Unfortunately, since I'm using fish, those functions didn't work for me and I've to adapt them to fish. Also, I added…Mon, 12 Apr 2021 00:00:00 GMTtilfzffishhttps://sbulav.github.io/til/restarting-github-action-from-cli/https://sbulav.github.io/til/restarting-github-action-from-cli/GitHub Actions is still pretty new and missing a lot of functionality. One of such missing features was the ability to interact with Actions from the command line. gh is the CLI for GitHub and for GitHub Actions. With the latest gh release (1.8.1 at the time of writing), developers added gh rerun…Thu, 08 Apr 2021 00:00:00 GMTgithubgithub actionshttps://sbulav.github.io/vim/neovim-my-favourite-keymapping/https://sbulav.github.io/vim/neovim-my-favourite-keymapping/I don't think that there is a single person who likes Vim's Ex mode. And keymapping used to trigger this shortcut, Q regularly gets occasionally triggered. A lot of people unmap it to prevent accidentally entering Ex mode, but for myself I found a better solution: This keymap: Lets me close any…Fri, 02 Apr 2021 00:00:00 GMTvimhttps://sbulav.github.io/typing/switch-to-colemak/https://sbulav.github.io/typing/switch-to-colemak/It's been a week since I entirely switched my keyboard layout to Colemak DH. If you have never heard of it, it's an alternative to QWERTY 12 finger keys moved. This move is carefully designed to make typing more comfortable by placing most used keys on a home row so that your fingers remain on the…Fri, 26 Mar 2021 00:00:00 GMTcolemaklayouthttps://sbulav.github.io/certifications/passed-certified-kubernetes-security-exam/https://sbulav.github.io/certifications/passed-certified-kubernetes-security-exam/I've passed Certified Kubernetes Security Specialist Exam with score 84%: This also means that now I obtain all three Kubernetes Certifications from LinuxFoundation(CKAD, CKA and CKS). Compared to my previous attempt on beta exam I was well prepared, but still could feel time pressure. Exam itself…Fri, 19 Mar 2021 00:00:00 GMTkubernetescertificationsckshttps://sbulav.github.io/til/til-commenting-current-line-in-shell/https://sbulav.github.io/til/til-commenting-current-line-in-shell/Today I discovered that command, which you are typing in shell(fish or bash) can be quickly commented via ALT SHIFT 3 key mapping. If command already starts with " ", the same mapping will remove comment.Fri, 26 Feb 2021 00:00:00 GMTfishhttps://sbulav.github.io/vim/neovim-telescope-github/https://sbulav.github.io/vim/neovim-telescope-github/Recently the Neovim community has been experiencing a boom in new plugins. Those plugins are written in LUA, which is much, much more pleasant to write than VimL. In this post, I'll share my experience with writing my plugins and share some suggestions how developer can improve writing experience.…Mon, 22 Feb 2021 00:00:00 GMTvimhttps://sbulav.github.io/vim/neovim-opening-urls/https://sbulav.github.io/vim/neovim-opening-urls/Vim has built in functionality to open URLs directly by executing gx in normal mode. This functionality is provided by netrw plugin :h netrw gx However, in MacOS this functionality is buggy or don't work at all, see Related BUG. Furthermore, if you're using different from netrw file browser(for…Mon, 08 Feb 2021 00:00:00 GMTvimhttps://sbulav.github.io/certifications/cks-abusing-serviceaccount-to-grant-privileges/https://sbulav.github.io/certifications/cks-abusing-serviceaccount-to-grant-privileges/In this article I will show how Kubernetes ServiceAccount can used to gain privileges. Of course, all this information should be only used for preparation to CKS exam. Let's say that we have a developer John, who has limited privileged in namespace frontend : But for debugging purposes, he was…Wed, 03 Feb 2021 10:00:00 GMTkubernetescertificationsckshttps://sbulav.github.io/certifications/cks-rbac-apigroups/https://sbulav.github.io/certifications/cks-rbac-apigroups/During my CKS preparations, I've faced with one not obvious thing selection apiGroups in RBAC rules. Resources in Kubernetes are associated with API Groups (for example, Pods belong to the core API group whereas Deployments belong to the apps API group). As an illustration: this example will not…Thu, 28 Jan 2021 10:00:00 GMTkubernetescertificationsckshttps://sbulav.github.io/vim/neovim-train-motions/https://sbulav.github.io/vim/neovim-train-motions/I've found very interesting but little known neovim plugin, train.nvim. It's readme is pretty confusing, so I'll describe it here. Introduction Vim movements can be grouped as: Left/Right 'h', 'l', '0', 'gm', 'gM', '^', '$', they move your cursor across the line :h left right motions Up/Down 'k',…Thu, 21 Jan 2021 00:00:00 GMTvimhttps://sbulav.github.io/certifications/cks-gvisor/https://sbulav.github.io/certifications/cks-gvisor/One of the topics for the Certifies Kubernetes Security Exam(CKS) is usage of gVisor as container runtime. While in theory configuring gVisor shouldn't be hard, I've found it difficult to get up and running. gVisor documentation alone is definitely not enough to configure gVisor as runtime. In this…Thu, 17 Dec 2020 10:00:00 GMTkubernetescertificationsckshttps://sbulav.github.io/certifications/certified-kubernetes-security-beta/https://sbulav.github.io/certifications/certified-kubernetes-security-beta/As a Senior Engineer at EPAM who works with Kubernetes on a daily basis I was invited to take CKS beta exam. I didn't have time to prepare for the exam and, considering that there were almost no information at the time except for curriculum, I think I did pretty well. I didn't pass the exam, but…Fri, 20 Nov 2020 00:00:00 GMTkubernetescertificationsckshttps://sbulav.github.io/terraform/terraform-azurerm-compute-custom-data/https://sbulav.github.io/terraform/terraform-azurerm-compute-custom-data/If you use Azure RM Compute Module from Terraform Registry you were probably thinking of ways to configure VM during provisioning. And there's a bunch of, one of which is to use Azure Compute module's custom data to pass configuration script: As you can see, documentation is really sparse, and if…Fri, 13 Nov 2020 00:00:00 GMTterraformazurehttps://sbulav.github.io/til/til-building-docker-images-in-acr/https://sbulav.github.io/til/til-building-docker-images-in-acr/Today I've learned that Azure Container Registry can build Docker images for you. Using az cli you're sending Dockerfile and contents of folder you're trying to build image from. Azure will do the actual build and store resulting image in ACR. This is pretty useful for me, since often I work from…Fri, 23 Oct 2020 00:00:00 GMTdockerazurehttps://sbulav.github.io/terraform/github-actions-cancelled-terraform-jobs/https://sbulav.github.io/terraform/github-actions-cancelled-terraform-jobs/Today I've faced small but nasty bug in my Terraform solution. You can read about solution in Terraform vs Github Actions and Github actions matrix secrets articles. After one unsuccessful run, Terraform state became locked. Pipeline had following message: As it turned out, Github actions uses fail…Wed, 21 Oct 2020 00:00:00 GMTterraformgithub actionshttps://sbulav.github.io/terraform/github-actions-matrix-secrets/https://sbulav.github.io/terraform/github-actions-matrix-secrets/My team is continuing migration to GitHub Actions, and one of the pipelines we are working on is Terraform validation pipeline. I've described this pipeline in Terraform vs Github Actions article. This pipeline worked great for one environment, but how do you run it to validate multiple…Thu, 08 Oct 2020 00:00:00 GMTterraformgithub actionshttps://sbulav.github.io/terraform/terraform-azure-cosmosdb/https://sbulav.github.io/terraform/terraform-azure-cosmosdb/Recently I was creating Terraform IaaC solution for Azure CosmosDB. First step was to find if there is en exising terraform module, which I could use for our needs. Unfortunately, there is no official module in Terraform Registry, like one for Azure PostgreSQL. After some searching, I've found…Mon, 28 Sep 2020 00:00:00 GMTterraformcosmosdbhttps://sbulav.github.io/til/til-retrieving-jenkins-secrets/https://sbulav.github.io/til/til-retrieving-jenkins-secrets/I'm a long time Jenkins user. And I always thought that it's only possible to get secrets via some kind of expose from runner. However, there's an easy way(even scary how easy it is). If you have access to Script Console /scripts , you can run following snippet to retrieve ALL secrets: Taken from…Wed, 23 Sep 2020 00:00:00 GMTjenkinshttps://sbulav.github.io/certifications/passed-redhat-pe180-exam/https://sbulav.github.io/certifications/passed-redhat-pe180-exam/I have successfully passed Red Hat PE180 and earn Red Hat Certified Specialist in Containers for Kubernetes. In this post I will share my experience about motivation, purchasing and preparation for this exam. Motivation Though PE180 is a preliminary exam, according to Red Hat site: Furthermore, in…Wed, 16 Sep 2020 00:00:00 GMTredhatpe180https://sbulav.github.io/wsl/wsl2-vm-tls-handshake-failed/https://sbulav.github.io/wsl/wsl2-vm-tls-handshake-failed/Recently I was very annoyed by random TLS errors, for example: I was receiving those errors during executing kubectl commands, pulling docker images, execuing curl or even while copying data via ssh. And what's worse, those errors were random, without any regularity. I've even spin up totally new…Mon, 31 Aug 2020 00:00:00 GMTfishtlswslhttps://sbulav.github.io/terraform/terraform-vs-github-actions/https://sbulav.github.io/terraform/terraform-vs-github-actions/My project is migrating to github, and one of team intentions was to use github actions instead of Jenkins. However, while building pipeline for Terraform in GitHub actions, things did not went well. In this article I will try to describe issues I've faced and how I mitigated them Issue 1: setup…Wed, 26 Aug 2020 00:00:00 GMTterraformgithub actionshttps://sbulav.github.io/fish/switch-to-fish-shell/https://sbulav.github.io/fish/switch-to-fish-shell/I had some free time and decide that I should try different shell, specifically fish. I wanted to try it for a long time, but just wasn't convinced that time investment worth it. But the setup went pretty well, quickly I was able to make it work good enough to make it default shell for my user.…Fri, 14 Aug 2020 00:00:00 GMTfishshellhttps://sbulav.github.io/kubernetes/comparing-mongodb-operators/https://sbulav.github.io/kubernetes/comparing-mongodb-operators/Recently I was evaluating MongoDB Kubernetes operators, as one possible way to migrate On Prem MongoDB servers. I weren't able to find any comparison, so I had to did it on my own. Enterprise vs Community MongoDB K8s Operators Criteria mongodb kubernetes operator mongodb enterprise kubernetes URL…Mon, 03 Aug 2020 00:00:00 GMTkubernetesmongodboperatorshttps://sbulav.github.io/til/til-neovim-autoformatting-markdown/https://sbulav.github.io/til/til-neovim-autoformatting-markdown/While editing markdown files, I try to make them nicely formatted. For me, 80 characters is a good line length. Wrapping text can be boring, especially on already written long non formatted texts. Recently I've figured out a few tricks on how to work with such texts. Highlighting 80 characters with…Mon, 20 Jul 2020 00:00:00 GMTvimhttps://sbulav.github.io/certifications/rancher-certified-operator/https://sbulav.github.io/certifications/rancher-certified-operator/I've passed the course Certified Rancher Operator: Level 1 and follow up exam: The course is free, and all you need to pass the Exam is some time and patience. I figured out couple of new concepts about Rancher and clarify confusion about Rancher, RKE and rke. If you work with Rancher on a daily…Fri, 03 Jul 2020 00:00:00 GMTkubernetesranchercertificationshttps://sbulav.github.io/til/til-xip-io/https://sbulav.github.io/til/til-xip-io/Sometimes you need to test your application quickly, and setting up new DNS domain, especially in Enterprise, can take ages. Today I learned about xip.io, a magic domain name that provides wildcard DNS for any IP address. Example from their web site: if you IP address is 10.0.0.1. What's even…Fri, 03 Jul 2020 00:00:00 GMTdnshttps://sbulav.github.io/kubernetes/using-fzf-with-kubectl/https://sbulav.github.io/kubernetes/using-fzf-with-kubectl/I was pretty impressed by the article fzf live repl and decide to adapt these techniques in my daily work with Kubernetes. Using fzf as JQ repl Command in the article above didn't work for me: After some investigation, it turned out that FZF DEFAULT OPTS , which I've described in FZF on Fedora were…Mon, 08 Jun 2020 00:00:00 GMTkubernetestilfzfhttps://sbulav.github.io/blog/fedora32-and-github-pages/https://sbulav.github.io/blog/fedora32-and-github-pages/Last week I've updated my working machine to Fedora 32. Upgrade went smoothly and, after a week, I thought that I wouldn't face any issues. However, when today I tried to write a new post to my blog, following error appeared: The file was clearly there and all the permissions were in place. After…Wed, 03 Jun 2020 00:00:00 GMTbloghttps://sbulav.github.io/kubernetes/kubernetes-rewrites/https://sbulav.github.io/kubernetes/kubernetes-rewrites/As I work with nginx Ingress and rewrite rules on a daily basis, I spend a good amount of time working with them. So I've decided to summarize my knowledge in this article. Rewrite Rewrite via annotation nginx.ingress.kubernetes.io/rewrite target is useful when you have some kind of generic…Wed, 03 Jun 2020 00:00:00 GMTkubernetesingresshttps://sbulav.github.io/til/til-firefox-clear-recent-history/https://sbulav.github.io/til/til-firefox-clear-recent-history/Today I learned super useful shortcut in Firefox to quickly access Clear Recent History menu. Press CTRL SHIFT DELETE and you should see following menu: For me, this shortcut is really useful to quickly clean up stale redirects or cache when developing Nginx Ingress.Mon, 25 May 2020 00:00:00 GMTfirefoxhttps://sbulav.github.io/til/til-neovim-highlight-yanked-text/https://sbulav.github.io/til/til-neovim-highlight-yanked-text/I have a bad habit of visually selecting text in (neo)vim before yanking it. I know that it's not efficient and always wanted to get rid of this habit. Neovim has merged cool PR that I hope could help me hightlight on yank. If you're on Neovim v0.5.0 519+, you can set up something like: To achieve:Mon, 25 May 2020 00:00:00 GMTvimhttps://sbulav.github.io/tools/kubectl-plugin-manager/https://sbulav.github.io/tools/kubectl-plugin-manager/I've been aware that there is such thing as kubectl plugin manager krew. But plugins available didn't make much sense for me, at least until now. Lastly I'm digging into nginx ingress and do a lot of troubleshooting of generated nginx configuration files,so I found really useful plugin for that…Mon, 18 May 2020 00:00:00 GMTkubectlkrewhttps://sbulav.github.io/certifications/ckad-state-persistence/https://sbulav.github.io/certifications/ckad-state-persistence/This is part 7, last one of my personal notes I've written during preparation to CKAD. State persistence Volumes PersistentVolume and PersistentVolumeClaims Volumes The internal storage of a container is ephemeral , meaning that it is designed to be temporary. Ephemeral storage will disappear with…Fri, 08 May 2020 00:00:00 GMTkubernetescertificationsckadhttps://sbulav.github.io/books/book-the-complete-software-developers-career-guide/https://sbulav.github.io/books/book-the-complete-software-developers-career-guide/Finished reading "The Complete Software Developers Career Guide" by John Sonmez. Not the newest one, but it's still pretty actual. Author is pretty biased and narcissus, but he has many good ideas in his book. For example, I liked the life work balance sections, how to deal with coworkers, how to…Thu, 07 May 2020 00:00:00 GMTbookshttps://sbulav.github.io/tools/fzf-on-fedora/https://sbulav.github.io/tools/fzf-on-fedora/I'm using fzf for fuzzy finding in vim, and I am very happy with it. But for bash in Fedora it was a frustrating experience. Shortcuts weren't working, bash completion, etc.. Ofcourse it was due to me not reading carefully through the documentation, but it's sparse and it's easy to get lost. That's…Wed, 06 May 2020 00:00:00 GMTfzfripgrephttps://sbulav.github.io/blog/linkedin-location/https://sbulav.github.io/blog/linkedin-location/Couple weeks ago I had a discussion on HR's activity in LinkedIn and location in your profile there. For the sake of curiosity I've changed my Location to Minsk, Belarus. Ofcourse, times now are pretty rough and HR activity is at it's minimum but I haven't noticed any differences whether it's…Wed, 06 May 2020 00:00:00 GMTthoughtsupdatehttps://sbulav.github.io/til/til-makefiles-advanced/https://sbulav.github.io/til/til-makefiles-advanced/I'm a long time user of Makefiles. They're can be really useful to remember, parametrize, and document long command or chains of commands. I think that Makefiles are underestimated in DevOps world and thought of something like compilers for C. This is not true and Makefiles can be useful for…Thu, 30 Apr 2020 00:00:00 GMTmakemakefileshttps://sbulav.github.io/til/til-pasting-into-teams/https://sbulav.github.io/til/til-pasting-into-teams/We are using Microsoft Teams as our main collaboration tool. It was really killing me, when I select and copy text from Terminal, paste it into Teams chat and receive some weird looking message: I was thinking that the issue was related with Microsoft Terminal, but it turns out it's Teams who paste…Thu, 30 Apr 2020 00:00:00 GMTteamshttps://sbulav.github.io/certifications/service-networking/https://sbulav.github.io/certifications/service-networking/This is part 6 of my personal notes I've written during preparation to CKAD. Configuration Understand Services Demonstrate basic understanding of NetworkPolicies Services Services provides an abstraction layer which provides network access to a dynamic set of pods. Most services use selector to…Mon, 27 Apr 2020 00:00:00 GMTkubernetescertificationsckadhttps://sbulav.github.io/blog/adding-blog-to-search/https://sbulav.github.io/blog/adding-blog-to-search/I've added blog to Google and Yandex search engines. This was by no mean an easy task. I've went throught following steps: Add Google Analytics to blog Validate site and add sitemap to Google Search Console Validate site and add sitemap to Yandex Webmaster Suddenly I realized that many many…Fri, 24 Apr 2020 00:00:00 GMTthoughtshttps://sbulav.github.io/certifications/ckad-pod-design/https://sbulav.github.io/certifications/ckad-pod-design/This is part 5 of my personal notes I've written during preparation to CKAD. Configuration Understand how to use Labels, Selectors, and Annotations Understand Deployments and how to perform rolling updates Understand Jobs and CronJobs Labels Selectors and Annotations ConfigMaps allow you to inject…Fri, 24 Apr 2020 00:00:00 GMTkubernetescertificationsckadhttps://sbulav.github.io/certifications/ckad-observability/https://sbulav.github.io/certifications/ckad-observability/This is part 4 of my personal notes I've written during preparation to CKAD. Multi Container Pods Understand LivenessProbes and ReadinessProbes Understand container logging Monitoring applications Debugging Liveness and Readiness Probes Probes allow you to change how k8s treats state of your…Thu, 23 Apr 2020 10:00:00 GMTkubernetescertificationsckadhttps://sbulav.github.io/til/til-validating-jenkins-pipelines/https://sbulav.github.io/til/til-validating-jenkins-pipelines/During last couple of days I've been developing Jenkins CI and CD pipelines. Since I'm get used to Python's linting tools like flake8 workflow where you have to modify your pipeline in Jenkins "replay", validate there and only then copy to Jenkinsfile was just killing me. Today I learned that you…Thu, 23 Apr 2020 00:00:00 GMTjenkinshttps://sbulav.github.io/certifications/ckad-multi-container-pods/https://sbulav.github.io/certifications/ckad-multi-container-pods/This is part 3 of my personal notes I've written during preparation to CKAD. Multi Container Pods Understand Multi Container Pods Patterns Multi Container Pods Multi container pods provide an opportunity to enhance containers with helper containers. Multi container Pods runs in the same namespaces,…Wed, 22 Apr 2020 10:00:00 GMTkubernetescertificationsckadhttps://sbulav.github.io/kubernetes/kubernetes-mounting-config-map-as-single-file/https://sbulav.github.io/kubernetes/kubernetes-mounting-config-map-as-single-file/Many guys who work with Kubernetes don't know that you can mount ConfigMap into existing folder inside a Pod as a single file. In order to do so, you have to specify subPath. For example, to replace nginx's config with one from ConfigMap:Tue, 21 Apr 2020 10:00:00 GMTkuberneteshttps://sbulav.github.io/books/book-harry-potter-and-the-methods-of-rationality/https://sbulav.github.io/books/book-harry-potter-and-the-methods-of-rationality/Just finished reading "Harry Potter and the Methods of Rationality". This is by far the best funfic I've ever read. If you love Harry Potter's universe and ever wondered, what if: Harry would try to analyze magic using science Harry would be smart badass Harry would had his own dark side then this…Mon, 20 Apr 2020 09:00:00 GMTbookshttps://sbulav.github.io/certifications/ckad-configuration/https://sbulav.github.io/certifications/ckad-configuration/This is part 2 of my personal notes I've written during preparation to CKAD. Configuration Understand ConfigMaps Understand SecurityContexts Define an application’s resource requirements Create & consume Secrets Understand ServiceAccounts ConfigMaps ConfigMaps allow you to inject text key:value…Fri, 17 Apr 2020 10:00:00 GMTkubernetescertificationsckadhttps://sbulav.github.io/certifications/ckad-core_concepts/https://sbulav.github.io/certifications/ckad-core_concepts/I thought that I could publish my CKA/CKAD preparation notes, maybe it will be useful for someone. Mostly it's a compilation of already existing articles, but somewhere I've added my own notes. So enjoy pt 1 core components!. Core Components Master Components kube apiserver exposes Kubernetes API…Thu, 16 Apr 2020 10:00:00 GMTkubernetescertificationsckadhttps://sbulav.github.io/certifications/cka-preparation/https://sbulav.github.io/certifications/cka-preparation/I'm constantly being asked, which resources I've used to prepare to CKA/CKAD exams. That's why I've prepared such list. Theory: Courses on Linux Academy: CKA and CKAD. CKA course is pretty poor, practice is sparse. CKAD course here is much better. Kubernetes in Action by Marko Luksa the best book…Wed, 15 Apr 2020 10:00:00 GMTkubernetescertificationsckackadhttps://sbulav.github.io/blog/initial-post/https://sbulav.github.io/blog/initial-post/I've always wanted to start a blog, and finally I had some time to investigate github pages and create this awesome blog . We'll see if I'll have enought time and courage to constantly write posts, but I have serious intention to do so. I'll start by reponting my linkedin certification's posts and…Wed, 15 Apr 2020 09:00:00 GMTthoughtsupdate