#Kubernetes
A Service Mesh Rollout That Was Worth It
- Architecture
- DevOps
- 20 Oct 2026
- 08 Mins read
The request that started this was not "can we have a service mesh". It was an auditor asking how we encrypted traffic between services, and the honest answer being that we mostly did not. Everything i
Hardening a CI/CD Supply Chain to SLSA Level 3
The question that started this was from an auditor, and it was a fair one: can you prove that the container running in production is the one your pipeline built from the commit you think it was? We ha
Building an Internal Developer Platform on Backstage and GitOps
- DevOps
- Platform Engineering
- 03 Aug 2026
- 09 Mins read
Product teams were spending more time waiting on the platform team than building features. Spinning up a new service meant opening a ticket and waiting for someone to provision a repo, wire up CI, wri
Migrating a Monolith to Kubernetes Without a Big-Bang Cutover
- DevOps
- Cloud Native
- 20 Jul 2026
- 07 Mins read
Almost every failed "let's move off the monolith" project shares one detail: the plan was a big-bang cutover. Rewrite in parallel, pick a weekend, flip the switch, and pray. This is the opposite of th
Cutting a SaaS AWS Bill 41% Without Slowing Delivery
- Cloud Computing
- DevOps
- 19 Jul 2026
- 10 Mins read
A growing SaaS ran on EKS with a full GitOps pipeline, and it was over its AWS budget nearly every month. The reflex from leadership was the usual one: freeze features until the bill comes down. That