Deep-dives on infrastructure, platform security, and cloud engineering. (6 posts)
ocswitch is a small shell script that manages multiple OCI profiles and persists the active one across all terminal sessions. No more --profile flags, no more editing config files.
Manual DNS edits in dashboards leave no audit trail and no review process. DNSControl turns your Cloudflare zone into a Git-backed, PR-reviewed, CI-deployed system - here is a working POC you can fork.
When Cloudflare masks origin failures, your health checks lie to you. A CoreDNS sidecar that overrides DNS resolution lets Blackbox Exporter probe origins directly while keeping TLS and Host headers intact.
How a structured branching strategy, conventional commits, and knowing when to use cherry-pick instead of a full merge helped me stand out when contributing to projects on GitHub, GitLab, Azure DevOps, and AWS CodeCommit.
When the upstream OCI service discovery PR sat open for three years, I built the other end of the HTTP SD interface myself. This is running in production across 10+ OCI tenancies.
How I wired together tuf-on-ci, Sigstore, SLSA L3 provenance, and GitHub Pages to build a fully verifiable release pipeline for oci-prometheus-sd-proxy with no long-lived signing keys anywhere.
No posts match your search.