https://pkbehera.co.in/blog/ Hands-on write-ups from my labs and platform work: Kubernetes networking, bare-metal and edge provisioning, admission policy and AI-assisted engineering. Every post has commands you can run. en https://pkbehera.co.in/blog/default-to-a-policy-engine/ https://pkbehera.co.in/blog/default-to-a-policy-engine/ Sun, 16 Aug 2026 09:00:00 +0530 Kubernetes How the Kubernetes admission pipeline works (mutating before validating), when to use a mutating webhook, a validating webhook or a policy engine like Kyverno or OPA Gatekeeper, and a Kyverno image-signature policy that blocks unsigned images at admission. https://pkbehera.co.in/blog/ai-made-my-weekend-project-exciting/ https://pkbehera.co.in/blog/ai-made-my-weekend-project-exciting/ Sat, 08 Aug 2026 09:00:00 +0530 AI A personal, non-commercial side project that compares product prices across retailers, tracks price history and shows offers on one screen, built in a weekend with AI-assisted development that removed the boring parts. https://pkbehera.co.in/blog/deploying-eks-anywhere-on-simulated-bare-metal/ https://pkbehera.co.in/blog/deploying-eks-anywhere-on-simulated-bare-metal/ Sat, 13 Sep 2025 09:00:00 +0530 Bare metal & Edge Build three UEFI KVM virtual machines, give each one a fake IPMI endpoint with VirtualBMC on port 623, describe them in hardware.csv, and let eksctl anywhere with the Tinkerbell provider turn them into a working EKS Anywhere cluster. https://pkbehera.co.in/blog/emulating-bare-metal-vbmc-capi/ https://pkbehera.co.in/blog/emulating-bare-metal-vbmc-capi/ Sat, 06 Sep 2025 09:00:00 +0530 Bare metal & Edge Simulate a bare-metal server on a KVM virtual machine with Virtual BMC (IPMI), control it with ipmitool, and register it as a Metal3 BareMetalHost under Cluster API, so you can test provisioning workflows without hardware. https://pkbehera.co.in/blog/replace-kube-proxy-with-cilium/ https://pkbehera.co.in/blog/replace-kube-proxy-with-cilium/ Sun, 24 Aug 2025 09:00:00 +0530 Networking How to remove kube-proxy and Flannel from a running cluster and install Cilium with kube-proxy replacement, plus the testing gotchas (lingering iptables rules) and the production best practice of skipping kube-proxy at kubeadm init.