Blog

Building better platforms

Technical writing on Kubernetes, delivery workflows, cloud foundations, observability, and the systems around modern platform engineering.

Delivery Workflows

Deploy to AWS from GitHub Actions with OIDC, no static keys

How to securely deploy to AWS from GitHub Actions using OIDC

Infrastructure as Code

Native test blocks, Terratest and policy checks: what to test in OpenTofu and Terraform, and what to skip.

Infrastructure as Code

A practical guide to managing Kubernetes resources with OpenTofu or Terraform.

Security

Use External Secrets Operator to sync AWS Secrets Manager values into Kubernetes with IRSA, sane refresh policies, and less secret material in git.

Security

How to set up and use IAM Roles for Service Accounts in EKS to securely manage pod-level IAM roles

Networking

Lowdown on the AWS Load Balancer Controller for Kubernetes ingress.

GitOps

Deploy to Kubernetes from Git with Argo CD, and keep clusters in sync with what the repo says.