DevOps. Self-hosted. Security.
RSS FeedNotes on DevOps, infrastructure, self-hosting and cybersecurity — practical guides from real-world operations.
Read the posts below or head over to the About page.
Recent Posts
Tailscale Kubernetes Operator: a private cluster without public IPs — ClusterIP straight into your tailnet
A cluster with zero public endpoints: the Tailscale operator publishes services straight into the tailnet, a Connector CRD subnet-routes the whole cluster CIDR, and an ACL grant hands the team kubectl and Grafana — no VPN server, no open ports.
Argo Rollouts + Gateway API: canary with auto-rollback, no service mesh required
A 5→25→50→100% canary with Argo Rollouts and the trafficrouter-gatewayapi plugin: an HTTPRoute splits the traffic, an AnalysisTemplate reads p95 from Prometheus, failureLimit: 2 — and a broken release rolls back on its own, no service mesh.
DORA 2026: AI amplifies what you already have — an unstable pipeline gets worse, not better
DORA 2026's main finding: the payoff from AI is moderated by platform quality. Why unstable pipelines degrade with AI, what to fix before subscribing, and how to compute the four keys from GitHub Actions logs in one evening.
Velero: cluster backups to S3 and a restore rehearsal — DR you've actually rehearsed
Velero at its minimum: object and volume backups to S3 on a Schedule with TTL, CSI snapshots, and a monthly restore rehearsal into a clean namespace with a silence-based alert.