Practical insights on Azure, Kubernetes, DevOps, and modern cloud infrastructure.https://kasunrajapakse.me/en-ushttps://kasunrajapakse.me/blog/bootstrap-flux-on-aks-gitops/https://kasunrajapakse.me/blog/bootstrap-flux-on-aks-gitops/A practical walkthrough to bootstrap Flux on an AKS cluster, connect it to an external Git repository (GitHub, Azure DevOps, GitLab, and more), and declare reconciliation with GitRepository and Kustomization CRDs.Sun, 12 Jul 2026 00:00:00 GMTAzureAKSKubernetesFluxGitOpsGitHubhttps://kasunrajapakse.me/blog/azure-sql-error-9001-log-not-available/https://kasunrajapakse.me/blog/azure-sql-error-9001-log-not-available/A real-world look at SQL error 9001 in Azure SQL diagnostic logs — what it means, why it happens during planned maintenance reconfigurations, and how to make your application resilient against it.Wed, 08 Jul 2026 00:00:00 GMTAzureAzure SQLTroubleshootingHigh AvailabilityRetry Logichttps://kasunrajapakse.me/blog/aks-keda-managed-prometheus-scaler/https://kasunrajapakse.me/blog/aks-keda-managed-prometheus-scaler/A hands-on demo using the AKS KEDA add-on and Azure Managed Prometheus to autoscale a Deployment on HTTP request rate. Covers the Prometheus scaler, ServiceMonitor scraping, Workload Identity authentication, and watching pods scale out and back in.Wed, 17 Jun 2026 00:00:00 GMTAzureAKSKubernetesKEDAPrometheusAutoscalingWorkload IdentityObservabilityhttps://kasunrajapakse.me/blog/aks-istio-gateway-api/https://kasunrajapakse.me/blog/aks-istio-gateway-api/NGINX Ingress is retired. This guide walks through migrating AKS workloads to the App Routing add-on with Istio-based Gateway API, including GatewayClass, HTTPRoute, TLS from Key Vault, canary traffic splits, and header-based routing.Fri, 05 Jun 2026 00:00:00 GMTAzureAKSKubernetesIstioGateway APIApp RoutingNetworkingSecurityhttps://kasunrajapakse.me/blog/aks-argocd-extension-entra-sso/https://kasunrajapakse.me/blog/aks-argocd-extension-entra-sso/A complete walkthrough of the Argo CD cluster extension for AKS — what Argo CD is, the components behind it, and how to wire up App Routing ingress, TLS from Key Vault, and Microsoft Entra ID single sign-on with workload identity and group-based RBAC.Sun, 31 May 2026 00:00:00 GMTAzureAKSKubernetesArgo CDGitOpsEntra IDApp RoutingWorkload IdentityTerraformSecurityhttps://kasunrajapakse.me/blog/aks-azure-policy-blocks-monitor-addon-extension-migration/https://kasunrajapakse.me/blog/aks-azure-policy-blocks-monitor-addon-extension-migration/An AKS incident from our deployment pipeline: Azure Monitor addons moved to a cluster extension-based backend — and a sensible Azure Policy that blocked extensions suddenly broke our AKS provisioning with no warning.Tue, 26 May 2026 00:00:00 GMTAzureAKSKubernetesAzure PolicyAzure MonitorContainer InsightsTroubleshootinghttps://kasunrajapakse.me/blog/aks-resource-locks-managed-disks-incident/https://kasunrajapakse.me/blog/aks-resource-locks-managed-disks-incident/A real incident from our AKS platform: resource locks on AKS-managed Azure disks silently broke the CSI driver during a node drain, leaving pods stuck without volumes. Here's what went wrong and what we should have done instead.Wed, 13 May 2026 00:00:00 GMTAzureAKSKubernetesResource LocksCSIPersistent VolumesTroubleshootinghttps://kasunrajapakse.me/blog/falco-aks-sentinel-runtime-security/https://kasunrajapakse.me/blog/falco-aks-sentinel-runtime-security/A practical walkthrough of wiring open-source Falco to Microsoft Sentinel for real-time Kubernetes runtime security: install, configure, ingest, and investigate threats — all with Infrastructure as Code.Tue, 05 May 2026 00:00:00 GMTAzureAKSKubernetesFalcoMicrosoft SentinelSecurityeBPFBicephttps://kasunrajapakse.me/blog/technical-reviewer-ultimate-docker-container-book/https://kasunrajapakse.me/blog/technical-reviewer-ultimate-docker-container-book/Reflections on reviewing a 600+ page deep dive into Docker, Kubernetes, and managed cloud container platforms — what stood out, what I learned, and who the book is for.Tue, 28 Apr 2026 00:00:00 GMTDockerKubernetesContainersBook ReviewCloudAKSEKSGKEhttps://kasunrajapakse.me/blog/aks-namespace-stuck-terminating/https://kasunrajapakse.me/blog/aks-namespace-stuck-terminating/A real-world story: how a nightly cleanup pipeline got blocked by a namespace stuck in Terminating, and the kubectl proxy + finalizer trick that finally got it unstuck.Mon, 27 Apr 2026 00:00:00 GMTAzureAKSKubernetesNamespacesFinalizersTroubleshootinghttps://kasunrajapakse.me/blog/aks-application-gateway-for-containers/https://kasunrajapakse.me/blog/aks-application-gateway-for-containers/A hands-on walkthrough of deploying Application Gateway for Containers on AKS using the Kubernetes Gateway API, with a practical look at the managed and BYO deployment models.Fri, 24 Apr 2026 00:00:00 GMTAzureAKSApplication Gateway for ContainersGateway APIKubernetesBicephttps://kasunrajapakse.me/blog/building-blog-with-github-copilot-and-pages/https://kasunrajapakse.me/blog/building-blog-with-github-copilot-and-pages/A non-technical look at how I use GitHub Copilot as a writing partner and GitHub Pages as my publishing platform — and why the combination keeps me shipping.Thu, 23 Apr 2026 00:00:00 GMTGitHub CopilotGitHub PagesWritingProductivityAI