Welcome to Anatoly's Blog on Anatoly's Blog

MetalLB LoadBalancer IPs Unreachable from macOS Host (QEMU/Talos)

Sun, 22 Feb 2026 00:00:00 +0000

I run a local Kubernetes cluster on macOS using Talos Linux with QEMU. The cluster uses MetalLB in L2 mode to assign external IPs to LoadBalancer services — the same way it works in production on bare metal. Everything inside the cluster was fine. But from my Mac, I couldn’t reach the LoadBalancer IP at all.

$ curl -k --connect-timeout 3 https://10.5.0.10
curl: (28) Failed to connect to 10.5.0.10 port 443 after 3005 ms: Timeout was reached

This took me a while to figure out, so here’s the full story.

Smart Home Setup Guide: The Bare Minimum without Regrets

Sun, 01 Feb 2026 10:00:00 +0000

Recently, I’ve been asked about my smart home setup and decided that I’ve gathered enough experience to share it with others, so people can avoid the pitfalls that I fell into.

What Is a Smart Home?

A smart home consists of many scattered devices that interconnect with each other to follow your orders. For example, a thermostat that measures temperature and turns your air conditioner on or off on demand. It doesn’t only make your life easier—it will also reduce your electricity bill.

How a Mini PC and Kubernetes Changed My Life

Wed, 24 Dec 2025 10:00:00 +0000

Almost a year ago I purchased a Beelink Mini S12 Pro (N100-based mini PC) from AliExpress. Initially I wanted to install only Home Assistant and looked for something simple and cheap. I never thought I would need something more powerful. How wrong I was.

Initially I planned to install HA OS, but then thought that installing it using a container and docker-compose would give me more room to test and debug. I knew that if something broke, it would be much easier to restore than using HA OS.

Fixing k9s 'Too Many Open Files' Error on K3s

Fri, 17 Oct 2025 01:00:00 +0000

The Problem

I was using k9s to check logs on my K3s homelab cluster when I hit this frustrating error:

to create fsnotify watcher: too many open files
stream closed: EOF for development/drawdb-ddf8d9569-grfff (drawdb)

The log stream would just close immediately, and I couldn’t see anything. Annoying.

What’s Actually Happening

Here’s the thing - this isn’t a problem with k9s on your laptop. It’s happening on the K3s node itself. When applications watch files (like development tools, file syncing services, or even k9s monitoring your cluster), Linux uses something called inotify watchers. There’s a limit to how many of these you can have.

IntelliJ IDEA: White Markdown Preview with Dark Theme

Fri, 19 Sep 2025 01:00:00 +0000

Note: This post preserves and references the solution from Ivan Aloneguid’s original article. Full credit goes to the original author for this elegant solution.

Quick Solution

If you use IntelliJ IDEA with a dark theme but want a white Markdown preview, here’s the simplest fix:

Go to File → Settings → Languages & Frameworks → Markdown
In the “Custom CSS” field, add:

body {
  filter: invert(1);
  background: #fff;
  font-family: 'Segoe UI';
  font-size: 16px;
}

img {
  filter: invert(1);
}

Click Apply and OK

Why This Works

The CSS uses filter: invert(1) to flip the dark preview to light. Images are also inverted to preserve their original appearance. You can customize the font family and size to your preference.

My little home server :)

Wed, 10 Sep 2025 05:00:00 +0000

A Professional Reminder: Keep Politics Out of LinkedIn

Sat, 06 Sep 2025 10:00:00 +0000

I’ve been noticing more political content and engagement on LinkedIn lately. While I understand we’re living through complex times both in Israel and globally, and people naturally want to share their perspectives, I wanted to offer a gentle reminder about the potential professional risks.

When recruiters and hiring managers review your profile, they inevitably see your activity—including political posts you’ve liked or shared. Even the most professional individuals can be unconsciously influenced by views that differ from their own. This bias might affect their perception of you as a candidate, even if they’d never admit it to themselves.

About

Tue, 02 Sep 2025 00:00:00 +0000

Hi! I’m Anatoly Tarnavsky, a Senior Full Stack Engineer with 10+ years of experience building scalable distributed systems and cloud-native applications. Previously worked at Intel as a Senior Backend Developer, focusing on AI/ML infrastructure and Kubernetes-based solutions. You can download my resume | write me an email

What I do

Backend & Full Stack Development - Node.js, Go, React, Vue, TypeScript
Cloud & DevOps - Kubernetes, AWS, Docker, GitOps with ArgoCD
AI/ML Infrastructure - Building platforms for LLM models and machine learning workloads
Observability & Monitoring - Prometheus, OpenTelemetry, distributed systems debugging
Homelab Engineering - Production-ready K3S cluster with automated deployments

Professional Background

I’ve worked at companies like Intel, OurCrowd, and IBM, developing everything from payment processing systems to AI model serving platforms. My experience spans microservices architecture, data visualization tools, and enterprise-scale infrastructure.

AI Won't Replace Programmers—At Least Not Anytime Soon

Sat, 30 Aug 2025 10:00:00 +0000

I may not be the smartest person in the room, but after working closely with Claude and ChatGPT over the past few months, I want to share some observations. AI won’t replace programmers—at least not anytime soon.

For AI to truly replace programmers, one of two conditions must be met:

Accept that our codebases will eventually become completely unreadable to humans. Once no human can maintain the code, all bugs must be fixed by AI. Inevitably, the AI will encounter a bug it can’t solve, and we’ll need human programmers to refactor and essentially rewrite everything from scratch.

Claude Code: First Impressions - Disturbingly Good

Sat, 23 Aug 2025 10:00:00 +0000

Just installed and played a little bit with Claude Code, and it’s disturbingly good. I played with it for a few hours—it took me that time to write an MCP server from scratch, create a simple OAuth proxy, debug it, and then perform some refactoring to make it modular and maintainable. Yes, without human touch it writes spaghetti code that works but is barely maintainable. However, the nature of programming is changing; you will need to read more than write. But without writing, you won’t be able to read and understand. I think developers with many years of experience who know how to write code and are able to adopt new AI tools will be invaluable, because one such developer can easily replace a small team. But for newcomers, it will be extremely difficult to gain the required experience to work productively with AI tools.

The Highest Appreciation an Employee Can Receive

Sat, 16 Aug 2025 10:00:00 +0000

You know what the biggest appreciation for an employee is? It’s not a title, not a good review, and not even a salary raise.

The best appreciation comes when your old teammates or managers call you to join them at their new company. When there are no company rules involved, no need to be nice just to keep good work relationships—when your former manager needs to hire someone and remembers you, decides to message or call you to join their new team.

No, AI won’t take jobs from us, not yet.

Sat, 09 Aug 2025 10:00:00 +0000

No, AI won’t take jobs from us, not yet. Claude struggled to write a script to unseal the vault in my k8s cluster until I split the job into small chunks and guided it step by step through what needed to be done.

AnkiMCP

Wed, 15 Jan 2025 10:00:00 +0000

MCP server connecting AI assistants to Anki through natural language

MCP Server Starter

Fri, 10 Jan 2025 01:00:00 +0000

Production-ready Model Context Protocol server with OAuth 2.0, structured logging, and enterprise security features

Homelab Infrastructure

Wed, 01 Jan 2025 10:00:00 +0000

My personal Kubernetes homelab setup with ArgoCD, monitoring, and various self-hosted services

Mastering Asynchrony in the Browser: A Comprehensive Guide

Wed, 03 May 2023 18:00:00 +0000

Acknowledgements

This article was originally written in Russian by Grigory Biziukin and was published on Полное понимание асинхронности в браузере on 28/02/2023. I would like to thank Grigory Biziukin for creating such informative and insightful content. I have made every effort to accurately translate the content while maintaining the author’s original message and intent. However, any errors in translation are solely my own. I hope that my translation will allow a wider audience to access and appreciate this valuable content, and I encourage readers to visit the original publication or website to read more of Grigory Biziukin’s work.

How I Accidentally Reinvented RPC: A Lightweight Alternative to GraphQL

Tue, 02 May 2023 18:00:00 +0000

Author’s Note (2025): When I originally wrote this article, I didn’t realize I was essentially reinventing RPC (Remote Procedure Call) - a pattern that’s been around for decades. What I built here is very similar to JSON-RPC over HTTP, just without knowing it had a name! Today, I’d recommend using battle-tested solutions like tRPC or oRPC which provide the same benefits I was seeking (type safety, simplicity, single endpoint) but with better tooling, community support, and production-readiness. However, I’m keeping this article as-is because building this from scratch taught me valuable lessons about API design, and sometimes reinventing the wheel is the best way to understand why the wheel is shaped the way it is.