Posts
All the articles I've posted.
-
The Build Did Not Fail. It Hung, Which Is Worse.
A failing build tells you something. A hanging build tells you nothing, burns a runner, and slowly teaches the team to hit retry instead of reading. Here is one that hung for a stupid reason, and how a thread dump found it.
-
Least Privilege Is a UX Problem
Everyone agrees with least privilege and almost nobody ships it, because the broad grant is always the easier path. Fix that, make scoping the path of least resistance, and the security follows for free.
-
Data Does Not Page You. It Just Goes Quietly Wrong.
A replication pipeline reported healthy for weeks while it quietly wrote NULLs into a column that mattered. No error, no alert, no page. That gap between a service failing and data failing is exactly why data needs SRE too.
-
The CNI Already Moves Your Packets. Calico Is for the Rules.
Running Calico in policy-only mode on top of the AWS VPC CNI, why two network layers in one cluster is the right call, and the one flag that stops Calico from breaking your cluster.