Thoughts on architecture, platforms, and delivery
Practical technical perspectives on decisions, platforms, and the details that separate a good concept from a reliable system.
-
Workload Identity Is Not Just Secret Rotation
Short-lived credentials improve security only when identity ownership and trust boundaries are designed explicitly.
-
Kubernetes Policy Is Not Just Another GitOps Workload
Foundational admission controls require stronger guarantees than ordinary GitOps-managed resources.
-
GitOps Is Not a Deployment Tool
Why GitOps is an operating model rather than a replacement for CI/CD.
-
Why Many Kubernetes Clusters Become Unnecessarily Complex
Complexity rarely comes from Kubernetes itself—it comes from inconsistent architectural decisions.
-
Why Platform Engineering Is More Than Kubernetes
Successful platforms are built on standards and self-service, not clusters alone.
-
Security Does Not Begin with the First Penetration Test
DevSecOps means considering security requirements during the architecture phase.
-
Which Solar Panel Orientation Delivers the Best Output Throughout the Day?
A comparison of panel orientations for a plug-in solar system with four 500-watt modules and no battery storage.
-
Why Talos Linux Is Ideal for Kubernetes Platforms
A look at a minimalist operating system designed around Kubernetes.