# Andika Ahmad Ramadhan -- Blog Notes on running Kubernetes, autoscaling, and internal platforms. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## pproxy: a forward proxy that load-balances a pool of upstream proxies DevFeed: [pproxy: a forward proxy that load-balances a pool of upstream proxies]() Original publisher: [Read original article]() Published: 2026-06-22T00:00:00Z Content type: article Language: en Sources: [Andika Ahmad Ramadhan -- Blog]() Topics: [proxy](), [client](), [health checks](), [HTTP]() Tags: [client](), [health](), [health-checks](), [http](), [prometheus](), [proxy](), [reload](), [round-robin](), [socks5](), [tls]() ### AI overview This article presents pproxy, a forward proxy that distributes client traffic across upstream proxies. It describes active health checks, round-robin selection, failover within requests, hot configuration reloads, per-user authentication, and Prometheus metrics. ### Source excerpt pproxy is a forward proxy that load-balances client traffic across a pool of upstream proxies with active health checks and hot config reload, so switching proxy providers means editing one config file instead of every client. ## Moving Thanos from GCS to Huawei OBS, and fixing a multipart upload bug on the way DevFeed: [Moving Thanos from GCS to Huawei OBS, and fixing a multipart upload bug on the way]() Original publisher: [Read original article]() Published: 2025-10-20T00:00:00Z Content type: article Language: en Sources: [Andika Ahmad Ramadhan -- Blog]() Topics: [huawei](), [migration](), [bug](), [Cloud](), [Google Cloud Platform (GCP)](), [Code]() Tags: [bug](), [cloud](), [cloud-storage](), [code](), [google](), [google-cloud](), [huawei](), [migration]() ### AI overview This article describes migrating Thanos object storage from Google Cloud Storage to Huawei Cloud OBS. The migration exposed two multipart upload bugs in the OBS provider: a zero-value part size and a content-length mismatch. A patch addressed both issues, although the upstream change was still under review when the article was written. ### Source excerpt What broke when Thanos blocks started landing in Huawei Cloud OBS instead of Google Cloud Storage, and the objstore patch that fixed it. ## One Go API over every SCM: go-scm in the internal developer platform DevFeed: [One Go API over every SCM: go-scm in the internal developer platform]() Original publisher: [Read original article]() Published: 2025-08-10T00:00:00Z Content type: article Language: en Sources: [Andika Ahmad Ramadhan -- Blog]() Topics: [internal developer platform](), [bitbucket](), [Go Language](), [GitHub](), [API]() Tags: [api](), [bitbucket](), [github](), [go](), [internal-developer-platform](), [pull-requests](), [scm]() ### AI overview The article explains how an internal developer platform can support Bitbucket Server, Bitbucket Cloud, and GitHub through the jenkins-x/go-scm Go API. It describes production fixes for provider-specific webhook, identity, pull request, pagination, permission, branch, build-status, and validation behavior. ### Source excerpt How the IDP supports Bitbucket Server, Bitbucket Cloud, and GitHub through jenkins-x/go-scm. ## One timezone for everything: k8tz and the Jakarta timestamp problem DevFeed: [One timezone for everything: k8tz and the Jakarta timestamp problem]() Original publisher: [Read original article]() Published: 2024-11-20T00:00:00Z Content type: article Language: en Sources: [Andika Ahmad Ramadhan -- Blog]() Topics: [Kubernetes admission controller](), [timezone](), [certificates](), [TLS (Transport Layer Security)](), [elasticsearch]() Tags: [certificates](), [elasticsearch](), [kubernetes-admission-controller](), [timezone](), [tls]() ### AI overview The article explains how k8tz applies Asia/Jakarta to Kubernetes pods through an admission controller, allowing public images such as Fluentd and Elasticsearch to use the platform timezone without image changes. It also describes three upstream patches for cert-manager support, certificate rotation without restarts, and configurable initContainer names. ### Source excerpt How we used k8tz to force Asia/Jakarta onto public images like Fluentd and Elasticsearch, and the three patches I sent upstream. ## Cutting over-provisioning with KEDA: cron, external triggers, and a Selenium Grid queue DevFeed: [Cutting over-provisioning with KEDA: cron, external triggers, and a Selenium Grid queue]() Original publisher: [Read original article]() Published: 2024-09-04T00:00:00Z Content type: article Language: en Sources: [Andika Ahmad Ramadhan -- Blog]() Topics: [autoscaling](), [Kubernetes](), [Selenium](), [Testing](), [HashiCorp Vault](), [migration](), [Prometheus]() Tags: [autoscaling](), [cost](), [hashicorp-vault](), [kubernetes](), [migration](), [prometheus](), [selenium](), [testing]() ### AI overview An experience report on using KEDA cron and external scalers to reduce idle Kubernetes capacity. It describes scaling workloads by schedules, queue depth, and Prometheus queries, including a Selenium Grid whose browser nodes scale with queued test sessions. The article also discusses migration from VMs to Kubernetes and a Vault-related operator bug discovered in production. ### Source excerpt How I used KEDA cron scalers, external triggers, and Selenium Grid queue scalers to stop paying for idle replicas in production. ## Running a k0s cluster with the GCP cloud controller for internal tooling DevFeed: [Running a k0s cluster with the GCP cloud controller for internal tooling]() Original publisher: [Read original article]() Published: 2024-03-12T00:00:00Z Content type: tutorial Language: en Sources: [Andika Ahmad Ramadhan -- Blog]() Topics: [Kubernetes](), [Cloud](), [Orchestration](), [Tooling]() Tags: [cloud](), [clusters](), [credentials](), [gcp](), [internal-tools](), [kubernetes](), [orchestration]() ### AI overview An account of building a k0s cluster for internal tooling on GCP and integrating the GCP cloud controller manager. It covers provider IDs, node reconciliation, credential scoping, load balancers, and the practical lessons learned while configuring the cluster. ### Source excerpt Why I picked k0s for an internal utility cluster, and what wiring the GCP cloud controller manager into it actually involved. ## Operator-style Prometheus config segregation DevFeed: [Operator-style Prometheus config segregation]() Original publisher: [Read original article]() Published: 2023-01-15T00:00:00Z Content type: tutorial Language: en Sources: [Andika Ahmad Ramadhan -- Blog]() Topics: [Prometheus](), [Monitoring](), [Kubernetes](), [Deployment]() Tags: [combines](), [config](), [files](), [kubernetes](), [prometheus](), [reload](), [server](), [sidecar]() ### AI overview This article introduces prometheus-config-merger, a tool that combines selected configuration fields from an existing Prometheus setup with configuration generated by prometheus-operator. It supports one-shot operation and watch-and-reload mode, including deployment as a Kubernetes sidecar. ### Source excerpt prometheus-config-merger combines config files from your existing Prometheus server and prometheus-operator into one, so you get per-team config segregation without handing your Prometheus over to the operator. ## x-depulso: capturing packets in Go to feed an ML traffic classifier DevFeed: [x-depulso: capturing packets in Go to feed an ML traffic classifier]() Original publisher: [Read original article]() Published: 2021-07-25T00:00:00Z Content type: article Language: en Sources: [Andika Ahmad Ramadhan -- Blog]() Topics: [Go Language](), [Programming](), [Network](), [Machine Learning & Artificial Intelligence](), [Kafka](), [Java]() Tags: [go](), [java](), [kafka](), [machine-learning](), [network](), [programming]() ### AI overview This article describes x-depulso, a small Go sensor built for a university final project. It captures packets from a network interface, rotates them into bounded pcap files, sends each file through the Java-based CICFlowMeter to produce flow statistics, and streams those results to Kafka for machine-learning traffic classification. ### Source excerpt x-depulso is a small Go sensor that rotates packet captures off a network interface and runs each file through CICFlowMeter, turning raw traffic into flow statistics for a machine-learning classifier. Built for my university final project, and my first real Go system programming. ## Managing homelab DNS through an API with coredns-helper DevFeed: [Managing homelab DNS through an API with coredns-helper]() Original publisher: [Read original article]() Published: 2020-08-15T00:00:00Z Content type: tutorial Language: en Sources: [Andika Ahmad Ramadhan -- Blog]() Topics: [Homelab](), [API](), [cURL](), [SQLite](), [Go](), [REST API](), [HTTP]() Tags: [api](), [containers](), [curl](), [go](), [homelab](), [http](), [rest-api](), [server](), [sqlite]() ### AI overview This article describes coredns-helper, a small Go REST API that manages domains and records in the SQLite database used by CoreDNS. It replaces manual zone-file edits, serial updates, and reloads with API calls, allowing new DNS records to become resolvable immediately. ### Source excerpt coredns-helper is a small Go API that manages domains and records in the SQLite database behind CoreDNS, so adding a name to my homelab DNS is a curl call instead of a zone file edit and a reload.