Blog
Technical writing on Kubernetes, delivery workflows, cloud foundations, observability, and the systems around modern platform engineering.
Kupe Cloud is in alpha. We built it after wiring the same GitOps, secrets, ingress, and observability layer around Kubernetes clusters one time too many.
A Tetragon Kubernetes tutorial: installation, TracingPolicy design, monitor mode, and the difference between detecting a runtime event and blocking it in-kernel.
Good Kubernetes developer experience comes from shorter feedback loops, lower cognitive load, and workflow defaults that keep developers out of raw YAML.
A practical PodSecurityPolicy replacement guide: roll out Pod Security Admission in stages, pin policy versions, and avoid the traps that break workloads.
A practical Renovate Kubernetes guide: keep Helm charts, Argo CD manifests, image tags, OpenTofu providers, and GitHub Actions current without the PR flood.
Helm chart debt comes from the templating model, not the packaging. What it costs, what the alternatives change, and how we keep authoring charts anyway.
Kubernetes cost allocation with OpenCost: install it with Helm, query per-namespace showback from the Allocation API, and account for idle spend honestly.
Platform engineering day two starts when the launch is over and the real work begins: upgrades, adoption, maintenance, and funding a platform as a product.
LLM observability starts with traces: use OpenTelemetry GenAI conventions to see model calls, token usage, latency, and agent tool paths.
