Portfolio and technical writing by Vamsi Krishna Sethu — CNCF Kubestronaut and Site Reliability Engineer working across the stack, from bare metal to Kubernetes, GitOps, and cloud infrastructure.https://www.vamsisethu.com/https://www.vamsisethu.com/blog/k3s-cis-benchmark-contribution/https://www.vamsisethu.com/blog/k3s-cis-benchmark-contribution/A practical look at investigating a K3s security documentation issue, comparing CIS Kubernetes Benchmark 2.1, and learning the project's required assessment workflow.Tue, 06 Oct 2026 00:00:00 GMThttps://www.vamsisethu.com/blog/secret-delivery-for-cross-cluster-agent-identity/https://www.vamsisethu.com/blog/secret-delivery-for-cross-cluster-agent-identity/How a hub-issued Argo CD Agent certificate crosses an AWS Secrets Manager boundary through ESO PushSecret and ExternalSecret, without giving the non-AWS spoke ACM Private CA access.Tue, 22 Sep 2026 00:00:00 GMThttps://www.vamsisethu.com/blog/portfolio-seo-og-jsonld/https://www.vamsisethu.com/blog/portfolio-seo-og-jsonld/A practical writeup of the SEO and metadata work I did on this site — what Open Graph and JSON-LD actually are, how per-post OG images are generated at build time, and the www-vs-apex sitemap bug that quietly breaks indexing.Mon, 21 Sep 2026 00:00:00 GMThttps://www.vamsisethu.com/blog/argocd-agent-redis-proxy-networkpolicy/https://www.vamsisethu.com/blog/argocd-agent-redis-proxy-networkpolicy/Debugging an Argo CD login loop on a hub-and-spoke argocd-agent setup — from an OIDC callback loop and i/o timeouts down to a cross-chart NetworkPolicy gap that only bit us where enforcement was actually on.Sun, 20 Sep 2026 00:00:00 GMThttps://www.vamsisethu.com/blog/per-cluster-roles-anywhere-identity/https://www.vamsisethu.com/blog/per-cluster-roles-anywhere-identity/How we gave RKE2/bare-metal spokes their own AWS identity without a shared trust anchor — one self-signed CA and anchor per cluster, one profile per role — so a stolen key is confined to its own cluster and a compromised consumer to its own role.Sun, 20 Sep 2026 00:00:00 GMThttps://www.vamsisethu.com/blog/icloud-custom-email-domain/https://www.vamsisethu.com/blog/icloud-custom-email-domain/I thought a professional you@yourdomain.com meant buying email hosting at my registrar. Turns out my existing iCloud+ 50GB plan already included it. Here is the full setup on Hostinger DNS.Sun, 20 Sep 2026 00:00:00 GMThttps://www.vamsisethu.com/blog/kubeconform-schema-validation/https://www.vamsisethu.com/blog/kubeconform-schema-validation/How we added schema validation to our Helm chart CI pipeline using kubeconform — solving the CRD schema problem, extracting schemas from live clusters, and surfacing results directly in PR comments.Thu, 20 Aug 2026 00:00:00 GMThttps://www.vamsisethu.com/blog/self-hosted-arc-runners-eks/https://www.vamsisethu.com/blog/self-hosted-arc-runners-eks/Setting up GitHub Actions Runner Controller v2 on an existing AWS EKS cluster — from Helm installation and GitHub App authentication to troubleshooting missing tools on minimal runner images.Thu, 20 Aug 2026 00:00:00 GMThttps://www.vamsisethu.com/blog/sunshine-moonlight-game-streaming-linux/https://www.vamsisethu.com/blog/sunshine-moonlight-game-streaming-linux/How I set up game streaming from my GTX 1650 laptop running Pop!_OS to any device using Sunshine, Moonlight, and Tailscale — including fixing NVIDIA Optimus encoding issues and optimizing for quality.Tue, 18 Aug 2026 00:00:00 GMThttps://www.vamsisethu.com/blog/restoring-google-takeout-data/https://www.vamsisethu.com/blog/restoring-google-takeout-data/How I uploaded ~25GB of Google Takeout data (Drive + Photos) back to Google services with correct dates, GPS metadata, and album structure preserved using CLI tools.Sat, 08 Aug 2026 00:00:00 GMThttps://www.vamsisethu.com/blog/starting-vamsisethu-com/https://www.vamsisethu.com/blog/starting-vamsisethu-com/Why I am building a small portfolio and technical blog around DevOps, SRE, and platform engineering.Thu, 06 Aug 2026 00:00:00 GMThttps://www.vamsisethu.com/projects/bare-metal-kubernetes/https://www.vamsisethu.com/projects/bare-metal-kubernetes/Repeatable cluster provisioning with iLO, Netplan, Ansible, Tekton, and Kubespray.Thu, 06 Aug 2026 00:00:00 GMThttps://www.vamsisethu.com/projects/kubernetes-openstack-platform/https://www.vamsisethu.com/projects/kubernetes-openstack-platform/A highly available Kubernetes platform supporting containers and VM-as-a-Service patterns.Wed, 05 Aug 2026 00:00:00 GMThttps://www.vamsisethu.com/projects/cloud-native-storage-and-observability/https://www.vamsisethu.com/projects/cloud-native-storage-and-observability/Rook Ceph, NooBaa, Prometheus, Grafana, and telemetry APIs for infrastructure visibility.Tue, 04 Aug 2026 00:00:00 GMThttps://www.vamsisethu.com/blog/canonical-jaas-edge-poc/https://www.vamsisethu.com/blog/canonical-jaas-edge-poc/A deep-dive into our Proof of Concept evaluating Canonical's JAAS (Juju-as-a-Service) for managing edge Kubernetes clusters from a central AWS EKS control plane, covering architecture, setup, findings, and production considerations.Tue, 21 Jul 2026 00:00:00 GMT