Build your first Terraform module: a secure, reusable S3 bucket
Writing your first Terraform module is a great way to turn repeating infrastructure patterns into a single, well-scoped unit you can reuse, test, and version. For many teams, a secure...
Choosing between App-of-Apps and ApplicationSet for Argo CD GitOps
GitOps with Argo CD scales along two common patterns: the App-of-Apps (a root Application that manages child Application objects) and the ApplicationSet controller (a declarative template plus generators that produce...
Designing golden paths for developers with Backstage’s revamped Scaffolder
Golden paths are the company-approved routes that let developers create, operate, and ship software without repeatedly wrestling with platform decisions. When executed well they feel like a well-marked trail through...
Getting Started with OpenTofu: what Terraform users need to know
OpenTofu is the community-driven, open-source fork of Terraform that landed as a predictable option for teams worried about licensing and long‑term stewardship. If you’ve used Terraform before, the language (HCL),...
Serverless 101: Deploying your first AWS Lambda with a Function URL
Deploying your first AWS Lambda can feel like learning a new song on an unfamiliar instrument: a few awkward notes at first, then a satisfying groove. If you want a...
eBPF and Cilium: the easy route to modern Kubernetes networking
Kubernetes networking can feel like a tangle of iptables rules, overlay tunnels, and magic services that “just work” until they don’t. Lately, one idea has been quietly moving that magic...
Balancing immediacy and stability in GitOps reconciliation loops
Why reconciliation loops matter In GitOps, controllers continually compare the “desired state” in Git with the “actual state” in the cluster and take actions to make them match. That continuous...
Packaging Helm charts to OCI registries and keeping values secure
Helm remains the go-to packaging tool for Kubernetes apps. Two recent shifts are shaping how teams package and distribute charts in production: first, the move to OCI-based registries for chart...