notes
from the
field.
practical notes on kubernetes and platform engineering from real client work - closer to a runbook than a think piece.
- 11
row level security in postgres
row level security moves tenant filtering out of application code and into the table definition, so a forgotten where clause returns nothing.
- 10
password management with pass
pass encrypts each password into its own gpg file and tracks the whole store with git, avoiding proprietary databases and vendor sync services.
- 09
system and user prompts
system and user prompts in an llm api request look interchangeable but carry different authority, and blurring the distinction causes real failures.
- 08
secrets management with external secrets operator
the external secrets operator syncs secrets from aws parameter store and other backends into native kubernetes secrets, keeping the source outside the cluster.
- 07
terminal user interfaces with bubbletea
bubbletea is a go framework for terminal interfaces built on the elm architecture, for interactive cli tools driven by state and messages.