The most classroom time
Three files, read line by line.
Each one is presented as its own source. Lines carrying a reason are marked; clicking one opens its note. Read them in this order — the first establishes the constraint, the second is the best thirty minutes in the material, and the third is the payoff.
platform/traefik/values.yaml
The hostPort model
The file where "no cloud load balancer" stops being a decision and becomes a configuration. Six of its settings are unusual, and every one of them is unusual for the same reason.
25 min· 10 annotationsapps/deployer/rbac.yaml
Write-only RBAC
Secrets are create and patch, never get or list. The deployer can install a credential it cannot read back — and the reason that works at all is a detail about which verb you choose.
documentation/external-clusters.md
The edge/workload split
pl-waw is the edge and holds every public certificate; workload clusters hold none and are reachable only over mTLS. The seam is an ExternalName Service plus a ServersTransport.
25 min· 7 annotations