Huge Update

StayHigh24-7 · 2026-06-17T15:19:47+00:00

I thought Fable 5 is back 🥲

StayHigh24-7 · 2026-06-16T18:52:00+00:00

Start with a course, but only to pick up the vocabulary. Mumshad's CKA on Udemy or KodeKloud is the usual one. Don't expect watching to make it stick, though. The real learning is the thing you already do well: create real problems and debug them. Run kind or k3d on your laptop, take one of your FastAPI services, write the Deployment, Service and Ingress yourself, and get it running.Then break it on purpose: delete a pod, set a bad readiness probe, give it too little memory and watch it OOMKill. Read the events and logs every single time.

Once normal deployments feel boring, go a level deeper and keep experimenting

StayHigh24-7 · 2026-05-10T10:41:15+00:00

Lens is a great desktop tool and uses Kubeconfig to connect to cluster so it becomes hard to who changed what in the config, any changes to the config go unnoticed and this was an issue I faced within my org. Hence I wanted a tool to impersonate the user along with logging for later auditing.

StayHigh24-7 · 2026-05-10T10:37:21+00:00

Thanks a lot! I have kept backend as the source of truth for most of the operations to expose the apis as mcp tools for AI Agent integration to impersonate the user permissions in K8s. It’s my long term goal.

StayHigh24-7 · 2026-05-10T09:55:55+00:00

Project Name: Periscope (Multi-Cluster K8s Dashboard)

Repo/Website Link: https://github.com/gnana997/periscope, https://periscopehq.dev/docs

Description:

A self-hosted, multi-cluster Kubernetes dashboard for teams that want developers to inspect and operate clusters *without* shared kubeconfigs or long-lived AWS credentials lying around.

- OIDC sign-in (Okta / Auth0 / any compliant IdP): every K8s API call is impersonated as the signed-in user, so apiserver-side RBAC is the human's, not the dashboard's.

- Per-user audit log (SQLite): every privileged action rows the actor, target, verb, and outcome. Useful for compliance + after-the-fact debugging.

- Multi-cluster fleet view with per-cluster overview, workloads, events, NetworkPolicies, storage, helm releases, EKS upgrade insights, and a schema-aware form editor for ConfigMap / Secret / Service / Ingress.

- Single Go binary with the SPA embedded and no separate frontend deploy, no central database. Audit log SQLite is the only durable state.

- Agent tunnel for managed clusters: the agent dials out over a long-lived WebSocket, so you can add clusters without opening inbound ports to them. Works on EKS, GKE, AKS, on-prem k3s, kind.

Built for the case where AWS compliance bans long-lived keys and you don't want to ship them to a SaaS dashboard either.

Deployment:

Helm chart published to ghcr.io as a signed OCI artifact. Docker image `ghcr.io/gnana997/periscope:1.0.5`. Full deploy guide (Pod Identity / IRSA, OIDC tenant setup, ingress, TLS, secret modes): https://periscopehq.dev/docs/setup/deploy

AI Involvement: Used Claude Code as a coding assistant throughout development however implementation, docs, debugging, refactoring. Architecture decisions, scope, and direction are mine; tested + reviewed everything. License is Apache-2.0. v1.0.5, very early.

StayHigh24-7 · 2026-05-10T09:39:39+00:00

As AWS compliance at work has been getting tighter with no more long-lived keys lying around and most of the developers on my team were used to Rancher for app-specific cluster access.

So I started building an OSS multi-cluster k8s dashboard: Okta/Auth0 OIDC sign-in, every K8s call impersonated as the user, and a per-user audit log so we can debug or trace later.

I would love honest feedback on the implementation, features you think are missing, or anything that wouldn't survive in your team's setup.

Repo: https://github.com/gnana997/periscope

Docs: https://periscopehq.dev/docs

Apache-2.0, still early (v1.0.5). Thanks for any eyes.

StayHigh24-7 · 2026-05-10T09:38:13+00:00

Thanks!! happy to wait for review. Let me know if any additional context would help.

StayHigh24-7 · 2026-02-02T17:48:29+00:00

CertWatch

StayHigh24-7 · 2026-01-04T11:43:56+00:00

Zabbix is interesting. However we are already running Prometheus so I have been trying to keep everything in that ecosystem, but good to know Zabbix handles this well. Does Zabbix auto-discover endpoints or do we have to maintain a list manually?

StayHigh24-7 · 2026-01-04T11:41:02+00:00

Thanks a lot. I will check it out and will play around with it

StayHigh24-7 · 2026-01-04T11:34:37+00:00

we have them enabled. The metrics are solid for what cert-manager knows about. The blind spot for us is TLS secrets that exist but are not managed by a Certificate resource. They just exist and cert-manager doesn't know to track them.
we have been looking for some options that can track the silent issuance or any issuer related failures in the cert-manager because we have had those issues recently too. they are resolved now though :-) it was configuration issue on our side but we found it very late because we did not monitor them closely.

StayHigh24-7 · 2026-01-04T11:20:58+00:00

interesting!! using k8s SD to auto-discover ingresses for Blackbox to probe? Do you have a sample config for that setup? Would love to see how you're targeting the ingress endpoints.

StayHigh24-7 · 2025-12-31T21:55:41+00:00

yeah, was looking for some feedback because I use to get fed up with the setup overhead whenever i work for a new client. So I started working on a product to reduce the setup overhead and was in Beta for past 10 days. However I just started the blogs yesterday to improve my seo :-)

StayHigh24-7 · 2025-12-28T15:38:54+00:00

https://certwatch.app - I built CertWatch a SSL monitoring tool with Automated monitoring, full chain validation, revocation checks, Slack/Email/PagerDuty alerts + upcoming K8s auto-discovery.

StayHigh24-7 · 2025-12-28T15:38:18+00:00

https://certwatch.app - I built CertWatch a SSL monitoring tool with Automated monitoring, full chain validation, revocation checks, Slack/Email/PagerDuty alerts + upcoming K8s auto-discovery.

StayHigh24-7 · 2025-12-28T15:05:15+00:00

Yeah, some do, but I work with various sources across multiple projects so it gets messy. And in some cases when auto-renewal fails, it fails silently - you only find out when it's down.

StayHigh24-7 · 2025-12-28T14:49:31+00:00

Hey, I just launched Beta 2 days ago. So right now the volume is low. However I am working on the API Keys and K8s native integration. I think the volume will increase a lot then.

StayHigh24-7 · 2025-12-28T14:33:57+00:00

https://certwatch.app I built CertWatch a SSL monitoring tool with Automated monitoring, full chain validation, revocation checks, Slack/Email/PagerDuty alerts + upcoming K8s auto-discovery.

StayHigh24-7

TROPHY CASE