August 27, 2023
Backend for Frontend, A Shade on Generic API
There is a big desire to abstract servers in a general way, facilitating APIs to diverse client applications. This post is not arguing against generic API design, but it’s about se...
May 18, 2023
A Glitch in The Percentile
One of many benefits of working with data is its prospect for reliable information and robust judgements. However, an opportunity of being subtlety misguided by its potential is no...
December 31, 2022
GCP Standalone NEG Load Balancer
Maximizing Google Cloud Load Balancer usages in Google Kubernetes Engine Clusters from mitigating impacts of load balancer replacements to building a global endpoint discovering a ...
August 29, 2022
Elasticsearch Disaster Recovery Mode
I bring you an experience of wiping out years of elasticsearch cluster data and how a restore was possible in play with elasticsearch builtin tools. You would admire how delicate a...
May 04, 2022
May The Pod Affinity Be With You
If there’s any resistance to adopt kubernetes, that'd be a reluctance to have storage dependent workloads. I’m myself concerned with this as well. When it comes to deal with persis...
March 07, 2022
Sanctifying Secrets (Part 3) - Isolating Policies
How EKS pod identity (IRSA — IAM Roles for Service Accounts) scopes AWS credentials to individual workloads instead of sharing a node instance profile.
December 31, 2021
An AWS⚡️VPC Hands-On Experience
I want to share my learning about AWS VPC. In this writing, I’m covering a common use case of wiring up VPC vital components to build a working cloud infrastructure network.
December 24, 2021
Associating Multiple AWS Accounts For EC2 S3 Logging Integration With Fluentd
I’m going to talk about my impression of one of mesmerizing terrains in AWS identity management plateau. I was lucky to work on a job bootstraping an integration for forwarding an ...
October 23, 2021
Sanctifying Secrets (Part 2) - Federating Credential Life Cycle
This is the last piece of work I did for my previous employment and I'm glad of my involvement in this project which was sweetening my last working days there.
October 01, 2021
Sanctifying Secrets (Part 1) - Preserving Legitimacy
In this post, I'm talking about bringing secrets to kubernetes workloads.
August 22, 2021
Grokking Ansible and Terraform
Observations on how Ansible and Terraform differ in practice—not a formal comparison, but notes from day-to-day infrastructure work.
June 19, 2021
NAT Gateway, Fabricating a Networking Entanglement
How a production outage led us to give GitLab Runner pods on GKE a dedicated egress IP via a NAT gateway, without breaking strict GitLab network access rules.
April 24, 2021
Deceptive Approaches Which Led to 20% Infrastructure Cost Reduction
Lessons learned from optimizing Kubernetes GitLab runner workloads and reducing infrastructure cost.
March 11, 2021
Fearlessly Running Tests on Production
Validating a GitLab Runner change on a production GKE cluster using taints, tolerations, and an isolated node pool—when no separate test environment existed.
February 07, 2021
Placing Bets On Maintaining Application Longevity
This time I want to share my tears and joy of maintaining a golang bot application. We're going to talk about a gigantic refactoring, it's almost like a complete rewrite.
January 03, 2021
Python Cheat Sheet
Python snippets I reach for often when working with data.