DevOps. Self-hosted. Security.
RSS FeedNotes on DevOps, infrastructure, self-hosting and cybersecurity — practical guides from real-world operations.
Read the posts below or head over to the About page.
Recent Posts
Argo Rollouts + Gateway API: canary with auto-rollback, no service mesh required
A 5→25→50→100% canary with Argo Rollouts and the trafficrouter-gatewayapi plugin: an HTTPRoute splits the traffic, an AnalysisTemplate reads p95 from Prometheus, failureLimit: 2 — and a broken release rolls back on its own, no service mesh.
DORA 2026: AI amplifies what you already have — an unstable pipeline gets worse, not better
DORA 2026's main finding: the payoff from AI is moderated by platform quality. Why unstable pipelines degrade with AI, what to fix before subscribing, and how to compute the four keys from GitHub Actions logs in one evening.
Velero: cluster backups to S3 and a restore rehearsal — DR you've actually rehearsed
Velero at its minimum: object and volume backups to S3 on a Schedule with TTL, CSI snapshots, and a monthly restore rehearsal into a clean namespace with a silence-based alert.
Keycloak in Kubernetes: one OIDC provider for kubectl, Argo CD and Grafana — self-hosted SSO
kubectl — client certificates, Argo CD — a local admin, Grafana — its own user database. Setting up Keycloak 26.8 in Kubernetes as the single OIDC provider: Postgres on CloudNativePG, kube-apiserver flags, kubelogin, groups from realm roles, realm-as-code, and an honest bill for the JVM.