Kubernetes
Istio Service Mesh Architecture – Part1
What a mesh actually solves and when you don’t need one.
October 5, 2026
No Comments
Kubernetes
OPA at the Gateway
one Policy engine behind every API request written once, tested like code, logged with a reason
October 1, 2026
No Comments
Kubernetes
External Connectivity, the Kubernetes-Native Way
Parts 1 and 2 built increasingly good answers to the same question: how do you get an IPsec tunnel out
August 13, 2026
No Comments
Kubernetes
Managing IPsec Tunnels with an Operator
Part 1 ended at a wall. The StrongSwan sidecar is a fine answer for one or two tunnels, but every
August 8, 2026
No Comments
DevOps
IPsec Out of Kubernetes with StrongSwan
Sooner or later a cluster has to talk to something that isn’t in the cluster — a billing system behind
May 25, 2026
No Comments
Gitops
GitOps with ArgoCD on RKE2
Stop SSH-ing into servers to run kubectl apply. GitOps means your Git repo is the single source of truth —
February 18, 2026
No Comments
