Writing
Everything written,in order
Mechanism first. Foundations before mechanisms, so each piece assumes the one before it.
Why Cilium
A hash map beats a linked list when the list has three thousand entries.
How you upgrade a fleet
An upgrade is a desired state change, and the rollout is built to halt.
Backups in a GitOps cluster fleet
In a GitOps fleet, back up only what Git can't rebuild. The management cluster is the exception.
The registry is a security boundary
The string lies. Only the digest tells the truth.
Policy as code
Cilium stops packets in the datapath. Kyverno stops applies at admission.
Secrets in a GitOps workflow
SOPS at rest, external stores at runtime, and the trade off nobody mentions.
Push vs pull
Who holds the keys, who notices drift, and who gets woken up at 3am.
The GitOps fleet gap
Everything that has to exist before your first declarative Cluster API cluster.