AHdark's Channel

极力推荐 The Bridge Lounge 的红酒炖牛肉，真好吃啊

准时打卡国泰航空北京首都T3休息室

Building and Pushing Docker Images to Google Artifact Registry with GitHub Actions This article walks through building and pushing Docker images to Google Artifact Registry using GitHub Actions and Workload Identity Federation — without storing service account keys. It explains each step, from GCP setup to secure, keyless CI/CD. https://www.ahdark.blog/building-and-pushing-docker-images-to-google-artifact-registry-with-github-actions/

Deploying Next.js with Runtime Environment Variables Learn how to replace compile-time env vars with runtime ones in a GitOps pipeline. Moving from Vite + React Router to Next.js, we use next-runtime-env to inject config at container start, enabling one immutable build for all environments. https://www.ahdark.blog/deploying-next-js-with-runtime-environment-variables/

Why Prometheus Failed to Scrape Monitors' Metrics Prometheus failed to scrape metrics due to missing RBAC permissions. This guide explains the symptoms, diagnosis, and fix using Role and RoleBinding, with YAML examples and logs for reference. https://www.ahdark.blog/why-prometheus-failed-to-scrape-monitors-metrics/

1Password Enterprise，Kubernetes 和 GitHub CI 似乎可以形成一个非常高效可靠的 DevOps 联动，期待新文章吧

Cathay Pacific Aria Suite HKG - LHR 全线配备

Deployment and Challenges in Calico's eBPF Mode https://www.ahdark.blog/deployment-and-challenges-in-calico-ebpf-mode/

Analyzing Load Balancer VIP Routing with Calico BGP and MetalLB https://www.ahdark.blog/analyzing-load-balancer-vip-routing/ MetalLB (controller-only) with Calico BGP does not bind VIPs to any node interface, causing ARP failures. Services stay unreachable externally. Solution: locally bind VIPs, enable strictARP, and disable rp_filter to restore correct traffic flow.

Infrastructure Design for Self-Hosted Kubernetes Clusters This article examines how to build a self-hosted Kubernetes cluster on bare-metal infrastructure, focusing on networks, high availability, DNS, and storage. It targets academic infrastructure engineers managing clusters under 50 nodes, contrasting with managed cloud solutions. https://www.ahdark.blog/infra-design-for-self-hosted-k8s-clusters/

MetalLB with Calico BGP: Deployment, Architecture, and Validation Deploy MetalLB as controller-only and let Calico’s BGP advertise a LoadBalancer pool. The guide covers Helm setup, IP pool config with avoidBuggyIPs, route flow analysis, source-IP-preserving…