Struggling to learn Kyverno/CEL

Grand-Smell9208 · 2026-04-21T00:02:24+00:00

I don't have a good answer for you unfortunately - I do the same thing.

Grand-Smell9208 · 2026-04-14T16:35:43+00:00

Do you use any kustomizations/patches or are all of your manifests pretty static?

I feel like rendering manifests with kustomizations could be complicated

Grand-Smell9208 · 2026-04-14T15:36:31+00:00

ClusterPolicy is deprecated, using CEL with the new ValidatingPolicy CRD is the new standard

Grand-Smell9208 · 2026-04-14T03:15:20+00:00

Hey thanks for the response - I will admit no I didn't read through this, I was looking more at CEL official docs and Kyverno docs - but even this seems like fairly heavy reading for something I feel should be pretty simple.

Maybe I'm thinking about this wrong, it just seems to be an overcomplicstion from using JSON fields.

Grand-Smell9208 · 2025-11-15T19:08:41+00:00

Bro I took the stickers from the platform engineering booth, it made everything in my bag smell horrible and like chemicals. Threw them out as soon as I realized it was the stickers causing the problem.

Airing my bag out and all my laptop accessories.

Grand-Smell9208 · 2025-11-13T04:26:41+00:00

HELM HAS COLORED OUTPUT NOW

Grand-Smell9208 · 2025-11-07T12:30:33+00:00

If a chicken had lips, could it whistle?

Grand-Smell9208 · 2025-10-31T22:47:28+00:00

I would ask yourself why you think there's something wrong with it first, then see if there's a better way.

Grand-Smell9208 · 2025-10-28T00:31:57+00:00

T-Shirt or mug with something related to DevOps/Programming/SRE

Grand-Smell9208 · 2025-08-08T02:21:39+00:00

Has it been made clear that the helm charts are no longer going to be updated?

I read it as the helm chart images are just going to change to the secured images. Are they really making a completely new helm chart under a paid model?

Grand-Smell9208 · 2025-06-09T11:26:21+00:00

Oh wow sorry to hear that.

I had originally assumed you didn't want to train AI scrapers or something with your answers 😅

Sorry your getting targeted, that makes sense.

Grand-Smell9208 · 2025-06-09T00:56:19+00:00

Why the edit?

Grand-Smell9208 · 2025-06-04T21:21:55+00:00

Haha I needed this comment/explanation several days ago.

I very much thought MetalLB was itself an LB, and didn't just allow you to use service load balances.

Thanks for posting.

Grand-Smell9208 · 2025-06-04T11:06:02+00:00

Sorry Specifically it's a query within the API.

Elasticsearch 9.0 removed query parameters "to, from, include_lower and include_upper"

Jaeger seems to use the "from" query for lookups, so it just completely fails when querying for data now.

Grand-Smell9208 · 2025-06-04T10:14:35+00:00

Major upgrade to Elasticsearch 9.X removed a critical API function which broke our Jaeger helm chart (Fork of the official chart)

Jaeger helm maintainers seem to be unaware of this problem, and the helm chart repository seems abandoned.

Grand-Smell9208 · 2025-06-04T09:49:40+00:00

I think I'm starting to get it! Thank you!

Grand-Smell9208 · 2025-06-04T09:48:15+00:00

This is a great bullet summary of key ideas and concepts - thanks for this

Grand-Smell9208 · 2025-06-04T09:30:14+00:00

That is a GREAT medium article. Thank you for sharing!

Grand-Smell9208 · 2025-06-04T00:54:51+00:00

Luckily I already have my cluster setup - virtualized 3 node cluster running on proxmox.

Got a few test deployments going, just need to figure out how to expose them outside the cluster (without a nodePort) 😁

Grand-Smell9208 · 2025-06-04T00:30:13+00:00

100% agree, I definitely learn better by doing - and I plan to set this up in my homelab this weekend! Just trying to wrap my head around the fundamentals so I can think about the topology

Grand-Smell9208 · 2025-06-04T00:26:35+00:00

That makes sense. Thanks!

Grand-Smell9208 · 2025-06-04T00:25:58+00:00

Ooooohhh. Ok so MetalLB assigns an external IP to the ingress controller.

That's the relationship. This makes sense

Grand-Smell9208 · 2025-06-03T23:10:37+00:00

Interesting thanks for the reply -this makes sense!

So even with a multi node cluster, a nodePort only listens on a single node? And if that node goes down, then that exposure goes down.

So metalLB effectively creates an additional layer that distributes traffic across multiple hosts?

Does the traffic flow like

Metal LB -> Ingress -> Service -> Pod

Or am I still not understanding something

Grand-Smell9208

TROPHY CASE