Join us

ContentUpdates and recent posts about Pelagia..
Link
@kaptain shared a link, 3 days, 22 hours ago
FAUN.dev()

An In-Depth Look at Istio Ambient Mode with Calico

Tigera just wiredIstio Ambient Modeinto Calico. That means you getsidecarless service mesh, think mTLS, L4/L7 policy, and observability, without stuffing every pod with a sidecar. It’s all handled by lean zTunnel and Waypoint proxies. Ports stay visible, soCalico and Istio policiesplay nice. No rewr.. read more  

Link
@kaptain shared a link, 3 days, 22 hours ago
FAUN.dev()

Kubernetes Made Simple: A Guide for JVM Developers

A sharp walkthrough for JVM devs shipping aKotlin Spring Boot app on Kubernetes. It covers the full deployment arc, packaging with Docker, wiring upDeploymentandServicemanifests, and managing config withConfigMapsandSecrets. There's a cleanPostgreSQLintegration baked in. It even gets intoheader-base.. read more  

Kubernetes Made Simple: A Guide for JVM Developers
Link
@kaptain shared a link, 3 days, 22 hours ago
FAUN.dev()

Compose to Kubernetes to Cloud With Kanvas

Docker just droppedKanvas, a new visual toy for building multi-cloud Kubernetes setups, without drowning in YAML. It bolts onto Docker Desktop and runs onMeshery. Drag and drop services into a topology, then bring them to life across AWS, GCP, or Azure. Mix inpolicy-driven validationandreal-time mut.. read more  

Compose to Kubernetes to Cloud With Kanvas
Link
@kaptain shared a link, 3 days, 22 hours ago
FAUN.dev()

How to Add MCP Servers to ChatGPT

ChatGPT leveled up with fullModel Context Protocol (MCP)support. It can now run real developer tasks, scraping, writing to a database, even making GitHub commits, through secure, containerized tools in Docker. TheDocker MCP Toolkitconnects ChatGPT’s language smarts to production-safe tools like Stri.. read more  

How to Add MCP Servers to ChatGPT
Link
@kaptain shared a link, 3 days, 22 hours ago
FAUN.dev()

A Deep Dive into Kubernetes Headless Service

Headless Serviceis a powerfulKubernetesfeature enabling direct pod-to-pod communication forstateful applicationsand preciseservice discoverywithout traditional load balancing.No automatic load balancing, pod IP changes, andspecial use casesmake it ideal for specific scenarios, not general workloads... read more  

Link
@kaptain shared a link, 3 days, 22 hours ago
FAUN.dev()

The “Inception” of Kubernetes: A Deep Dive into vCluster Architecture and Benefits

vCluster, a CNCF sandbox project, spins up real-deal Kubernetes control planes inside pods. Each lives in its own namespace but behaves like a full cluster, admin access, CRDs, Helm, the works. It reuses the host’s worker nodes using a syncer that routes vCluster workloads onto the real thing... read more  

The “Inception” of Kubernetes: A Deep Dive into vCluster Architecture and Benefits
Link
@kaptain shared a link, 3 days, 22 hours ago
FAUN.dev()

Kubernetes 1.35 - New security features

Kubernetes 1.35 is done with legacy baggage. cgroups v1? Deprecated. Image pull credentials? Now re-verified by default—no more freeloading. kubectl SPDY API upgrades? Locked down. You’ll needcreatepermissions just to speak the protocol. Expect breakage if your workflows leaned on old assumptions. U.. read more  

Kubernetes 1.35 - New security features
Link
@kaptain shared a link, 3 days, 22 hours ago
FAUN.dev()

How to Troubleshoot Common Kubernetes Errors

A fresh Kubernetes troubleshooting guide lays out real-world tactics for tracking down 12 common cluster headaches. Think:kubectlsleuthing, poking through system logs, scraping observability metrics, and jumping intodebug containers. The guide breaks down howAIOpsis stepping in, digesting event data.. read more  

How to Troubleshoot Common Kubernetes Errors
Story
@jamesmiller shared a post, 3 days, 22 hours ago

Automating Penetration Testing in CI/CD: A Practical Guide for Developers

All in One SEO Pack SEMrush SquirrelMail Yoast SEO SchemaHero

Automating pentesting in CI/CD helps developers catch vulnerabilities early, reduce MTTR, and keep releases secure without slowing the pipeline. This guide breaks down why automation matters, the tools developers rely on, common mistakes to avoid, and practical steps to build a reliable pentesting workflow inside modern CI/CD pipelines.

Automating Penetration Testing in CI/CD
Story
@elenamia shared a post, 3 days, 22 hours ago
Technical Consultant, Damco Solutions

Google Cloud Services: A Comprehensive Overview for Modern Businesses

Read this blog to learn about Google Cloud Platform services and its key features, pricing, and use cases across industries.

6086042_22246
Pelagia is a Kubernetes controller that provides all-in-one management for Ceph clusters installed by Rook. It delivers two main features:

Aggregates all Rook Custom Resources (CRs) into a single CephDeployment resource, simplifying the management of Ceph clusters.
Provides automated lifecycle management (LCM) of Rook Ceph OSD nodes for bare-metal clusters. Automated LCM is managed by the special CephOsdRemoveTask resource.

It is designed to simplify the management of Ceph clusters in Kubernetes installed by Rook.

Being solid Rook users, we had dozens of Rook CRs to manage. Thus, one day we decided to create a single resource that would aggregate all Rook CRs and deliver a smoother LCM experience. This is how Pelagia was born.

It supports almost all Rook CRs API, including CephCluster, CephBlockPool, CephFilesystem, CephObjectStore, and others, aggregating them into a single specification. We continuously work on improving Pelagia's API, adding new features, and enhancing existing ones.

Pelagia collects Ceph cluster state and all Rook CRs statuses into single CephDeploymentHealth CR. This resource highlights of Ceph cluster and Rook APIs issues, if any.

Another important thing we implemented in Pelagia is the automated lifecycle management of Rook Ceph OSD nodes for bare-metal clusters. This feature is delivered by the CephOsdRemoveTask resource, which automates the process of removing OSD disks and nodes from the cluster. We are using this feature in our everyday day-2 operations routine.