All posts

4 posts

• 
  May 19, 2026 Adapting a Helm Chart Suite for OpenShift: 7 Patterns from a Real Deployment

  Seven battle-tested patterns for adapting Helm chart suites to OpenShift — from a real enterprise deployment: platform value layers, restricted-v2 helpers, runtime CA injection, Kyverno policies, and migrating Python-built Jobs to Helm.

• 
  May 17, 2026 Least-Privilege Database Access at Scale: What I Actually Built (and What I Considered)

  How I replaced shared admin credentials for both services and humans — scoped roles via Atlas Operator and IRSA, plus JIT time-boxed access for engineers.

• 
  May 11, 2026 Strimzi + Debezium in Production: A CDC End-to-End Story

  What I learned running Strimzi and Debezium CDC against MongoDB Atlas and Postgres RDS in production — and the gap that only an end-to-end test found.

• 
  Jan 8, 2023 Templating the Matrix

  GitOps at scale with Argo CD ApplicationSets, Helm umbrella charts, and library charts—so platform teams can onboard products and environments without every dev becoming a Helm expert.