Blog

Thoughts on DevOps, platform engineering, Kubernetes, and lessons learned from operating production systems.

March 2026 6 min read

From Commit to Cluster: A GitLab CI + Helm Pipeline, End to End

Standing up a full CI/CD loop — a local Docker registry, Vault-backed secrets, a self-hosted GitLab Runner with SonarQube scanning, and a two-pipeline Helm deployment flow from build to cluster.

GitLab CI Helm Kubernetes Vault SonarQube DevOps Docker
February 2026 6 min read

Terraform 101: Plan Before You Break Production

A practical primer on Terraform — installation, the init/plan/apply workflow, variable types, tainting resources, targeted destroys, and setting up AWS credentials for your first provider.

Terraform IaC AWS DevOps Infrastructure
January 2026 5 min read

Wiring Up Observability: Prometheus, Grafana, and Every Exporter In Between

A field-tested rundown of building a monitoring stack from scratch — Prometheus and Grafana via Docker, plus exporters for MySQL, PHP-FPM, VMware, Blackbox probing, cAdvisor, Pinpoint APM, and node-level metrics.

Prometheus Grafana Monitoring Observability DevOps Docker
December 2025 5 min read

Kong Gateway: Routes, Rate Limits, and Locking the Front Door

A hands-on guide to Kong API Gateway — OSS quickstart with Docker, declarative routing via the Admin API, deploying on K3s with Helm, hiding version headers, IP blocking, and request rate limiting.

Kong API Gateway Kubernetes K3s Helm DevOps Security
November 2025 6 min read

K3s in the Real World: Install, Break, Fix, Repeat

A practical field guide to K3s — installation on Linux and Windows, kubeconfig setup, Lens connectivity, force-deleting stuck namespaces, and certificate rotation when your cluster's TLS finally expires.

K3s Kubernetes Rancher DevOps Linux Windows Certificates
October 2025 6 min read

Keycloak Demystified: One Login to Rule Every App

An introduction to HashiCorp-grade identity management with Keycloak — core concepts, architecture, and a practical guide to deploying it with Docker and Kubernetes, including persistent themes/providers and MySQL-backed production setups.

Keycloak IAM SSO Kubernetes Docker DevOps Security
September 2025 12 min read

HashiCorp Vault + External Secrets Operator on Kubernetes

A complete production guide to deploying HashiCorp Vault with HA Raft storage, integrating External Secrets Operator, managing Redis secrets, enabling TLS, and configuring Vault Agent with GitLab CI.

Vault Kubernetes Security External Secrets Helm DevOps
July 2025 5 min read

A Practical Guide to Knative: Serverless on Kubernetes

Learn how to deploy and manage serverless workloads on Kubernetes using Knative — covering installation, auto-scaling, eventing, and a full NGINX deployment walkthrough.

Kubernetes Knative Serverless Istio DevOps
March 2024 3 min read

Zero-Downtime Kubernetes Deployments: A Practical Guide

How to configure rolling updates, PodDisruptionBudgets, and readiness probes to achieve true zero-downtime deploys in Kubernetes.

Kubernetes DevOps Best Practices