A private Kubernetes cluster for a personal website
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
A personal website runs on a private Azure Kubernetes Service cluster with no public API endpoint and no inbound ports: Cloudflare Tunnel carries traffic out, Cilium policies restrict pod-to-pod access, and workload identity replaces stored Azure credentials.