Improving my security posture with ease by following best practices from a blog post (https://www.simplecto.com/get-more-secure-websites-from-your-traefik-configuration) thanks to thanks to Traefik and Kubernetes. This post is also unintentionally an exploration of the amount of work it takes to switch from Traefik v1 to v2.
Jetstack's cert-manager is one of the most important parts of my k8s cluster and I've waited entirely too long to update it. The path from v0.4.0 to v0.16.0 is grueling but pretty easy thanks to well-built software.
How I got off Yahoo! Mail with Thunderbird and a generous helping of POP
Good resources I've stumbled upon discussing securing your Kubernetes cluster(s)
Switching from kube-lego to cert-manager (without Helm)
Switching from ployst/docker-letsencrypt to jetstack/kube-lego for auto-generated SSL certs with Kubernetes.
Some useful SystemD unit files