Jonathan Lupica

Perpetual learner. Tech enthusiast. Endlessly curious.

Latest Posts

A locked Terraform state file in an S3 bucket, reachable from several machines while a dead laptop is crossed out

Terraform on Proxmox: Declaring My Homelab VMs

How Terraform provisions my Proxmox VMs for Talos: what IaC brings, provider gotchas, k8s-friendly VM settings, and my tfstate’s move to self-hosted S3.

A YAML file with readable keys and padlocked values being committed to a git repository

SOPS + Age: Committing Secrets to Git, Safely

How SOPS and age let me commit Talos and Kubernetes secrets to git: envelope encryption explained, .sops.yaml rules, alternatives, and gotchas.

A large just key on a keyboard fanning out to recipe chips for secrets, talos, flux and terraform

Just: The Command Runner My Homelab Was Missing

Why I replaced ad-hoc shell scripts with just: discoverable recipes, modules, and safer secrets workflows for a homelab Kubernetes repo.

A PostgreSQL elephant pod hopping from the last pending node to an already-upgraded node during a rolling upgrade

Talos Rolling Upgrades: When a PDB Blocks the Drain

A single-instance PostgreSQL and its PodDisruptionBudget deadlocked my Talos rolling upgrade. How drains fail, and how to sequence around it.

View All Posts →