Jonathan Lupica

Perpetual learner. Tech enthusiast. Endlessly curious.

Latest Posts

Five Kubernetes node cards with load gauges; a pod is lifted from the overflowing first node to the nearly empty fifth one at night

Kubernetes Descheduler: Rebalancing Pods After a Drain

The Kubernetes scheduler never moves a running pod. How a rolling drain left my homelab cluster lopsided, and how descheduler fixes it every night.

A locked Terraform state file in an S3 bucket, reachable from several machines while a dead laptop is crossed out

Terraform on Proxmox: Declaring My Homelab VMs

How Terraform provisions my Proxmox VMs for Talos: what IaC brings, provider gotchas, k8s-friendly VM settings, and my tfstate’s move to self-hosted S3.

A YAML file with readable keys and padlocked values being committed to a git repository

SOPS + Age: Committing Secrets to Git, Safely

How SOPS and age let me commit Talos and Kubernetes secrets to git: envelope encryption explained, .sops.yaml rules, alternatives, and gotchas.

A large just key on a keyboard fanning out to recipe chips for secrets, talos, flux and terraform

Just: The Command Runner My Homelab Was Missing

Why I replaced ad-hoc shell scripts with just: discoverable recipes, modules, and safer secrets workflows for a homelab Kubernetes repo.

View All Posts →