DevOps & Cloud Infrastructure
Note
Deep-dives into Kubernetes networking, Layer 7 ingress, TLS certificate automation, and production cluster architecture. Real-world patterns designed for platform reliability.
$ tree ~/devops --sort=dateAzure Application Gateway for Containers
Layer 7 traffic orchestration on AKS with Application Gateway for Containers, Gateway API custom resources, and automated TLS offloading. Includes 5 architecture diagrams.
Kubernetes TLS Certificate Management
How cluster certificates work under the hood: control plane mTLS, cert-manager automation, Let's Encrypt ACME challenges, and zero-downtime secret rotation.
Azure Container Apps Sandboxes
Why agents need an enforced execution boundary, what Azure Container Apps Sandboxes provides, how it compares with NVIDIA OpenShell, and key architectural tradeoffs.
Your Policy Checks Are Green. Your Impact Is Still Unknown.
Why shared Terraform/Bicep modules and Helm charts need downstream consumer impact review, and where governed investigation with GitHub Copilot and MCP can help. Includes interactive architecture workbench.
Kubernetes v1.37 Sneak Peek
What platform engineers should actually care about in Kubernetes v1.37: in-place pod resizing GA, Dynamic Resource Allocation (DRA) enhancements, and security controls.
Multi-Cluster GitOps & Cilium Mesh
Declarative multi-region cluster fleet management with ArgoCD ApplicationSets, Cilium ClusterMesh, and zero-trust service-to-service encryption.