kontrolplane practical takes on kubernetes, infrastructure, and platform engineering - from real client work.
pass stores each password in its own gpg-encrypted file and tracks the whole tree with git. no proprietary database, no vendor sync service, just files you can encrypt, version, and push to a remote you control.
the external secrets operator pulls secrets from aws systems manager parameter store and other cloud stores into native kubernetes secrets, keeping the source of truth outside the cluster. this post covers how it syncs, how rotation works, and the failure modes that occur when a sync silently breaks.
bubbletea is a go framework for building terminal user interfaces based on the elm architecture. it turns cli tools from flag parsers into interactive applications with state, messages, and rendered views.
gnu stow turns a directory of config files into symlinks pointing at the right places. no install scripts, no templating engines, no dependency on a tool that might not exist on the next machine.
argocd applicationsets can spin up full preview environments for every pull request and tear them down on merge. this post covers the setup, the moving parts, and what breaks when it's not configured carefully.
