DevOps. Self-hosted. Security.
RSS FeedNotes on DevOps, infrastructure, self-hosting and cybersecurity — practical guides from real-world operations.
Read the posts below or head over to the About page.
Recent Posts
Linkerd in the ambient era: why the lightest mesh still matters when everyone goes sidecar-less
Linkerd 2.17-stable: federated services, egress metrics and HTTPRoute rate limiting; a 10–20 MB Rust proxy against Envoy sidecars and ztunnel. When the lightest mesh is still the right answer, and how to get it running in one evening.
Tailscale Kubernetes Operator: a private cluster without public IPs — ClusterIP straight into your tailnet
A cluster with zero public endpoints: the Tailscale operator publishes services straight into the tailnet, a Connector CRD subnet-routes the whole cluster CIDR, and an ACL grant hands the team kubectl and Grafana — no VPN server, no open ports.
Argo Rollouts + Gateway API: canary with auto-rollback, no service mesh required
A 5→25→50→100% canary with Argo Rollouts and the trafficrouter-gatewayapi plugin: an HTTPRoute splits the traffic, an AnalysisTemplate reads p95 from Prometheus, failureLimit: 2 — and a broken release rolls back on its own, no service mesh.
DORA 2026: AI amplifies what you already have — an unstable pipeline gets worse, not better
DORA 2026's main finding: the payoff from AI is moderated by platform quality. Why unstable pipelines degrade with AI, what to fix before subscribing, and how to compute the four keys from GitHub Actions logs in one evening.