Kubernetes
Istio Service Mesh Architecture – Part1
What a mesh actually solves and when you don’t need one.
October 5, 2026
No Comments
Kubernetes
OPA at the Gateway
one Policy engine behind every API request written once, tested like code, logged with a reason
October 1, 2026
No Comments
Kubernetes
External Connectivity, the Kubernetes-Native Way
Parts 1 and 2 built increasingly good answers to the same question: how do you get an IPsec tunnel out
August 13, 2026
No Comments
Kubernetes
Managing IPsec Tunnels with an Operator
Part 1 ended at a wall. The StrongSwan sidecar is a fine answer for one or two tunnels, but every
August 8, 2026
No Comments
DevOps
IPsec Out of Kubernetes with StrongSwan
Sooner or later a cluster has to talk to something that isn’t in the cluster — a billing system behind
May 25, 2026
No Comments
Compliance
Kubernetes Security Hardening for Multi-Tenant Platforms — Zero-Trust Without the Overhead
This is the security hardening playbook for multi-tenant Kubernetes platforms. Not a checklist from a compliance slide deck. These are
April 21, 2026
No Comments
