Tharindu Kalhara

Writing

Notes on cloud infrastructure, DevOps practice, and building community.

2025-12-28

Using Sealed Secrets in Kubernetes
Recently I tried out a very secure way to pass secrets in k8s. That is sealed secrets. What is happening here is that it encrypts the data and its hidden in kubernetes cluster itself. Kubernetes Sealed Secrets work by using asymmetric encryption (public/private key pair) to securely store encrypted Kubernetes Secret data in a Git repository. Only the Sealed Secrets controller running within the target Kubernetes cluster can decrypt the secret data and turn it into a usable, standard Kubernetes Secret.
sealed secretskubernetes

2025-12-27

Getting Started with GitOps/FluxCD on Kubernetes
Hi Cloud natives, I recently started with working with kubernetes and one of the problems that I encountered was the manual deployments into K8s cluster(unless in a CI/CD’s CD Pipleine configured). The solution is simple, it is using GitOps. There are several tools that we can used for this. ArgoCD is one of the option. But I found a more easy but powerful way; that is FluxCD.
gitopsfluxcdkubernetes

2025-12-25

Getting Started with Terragrunt
I hope you heard the IaC tool — Terraform. So recently I got an experience to use an awesome tool related to terraform. That is the terragrunt. It is a thin wrapper arround terraform. The reason we use terragrunt is by using this we can manage our terraform code more easily, specially when we are working with multiple environments (dev, test, pre-prod, prod), accounts or regions. So simply what is happening here is that it removes the burdens with duplication, configuration and state management.
terraformterragruntiac