https://kontrolplane.dev/blog/ practical takes on kubernetes, infrastructure, and platform engineering - from real client work. en info@kontrolplane.dev (kontrolplane) Sun, 04 Oct 2026 00:00:00 GMT https://kontrolplane.dev/blog/prometheus-cardinality/ https://kontrolplane.dev/blog/prometheus-cardinality/ every unique label combination is its own series in prometheus, and one label holding an id or a raw path can outweigh every other metric combined. Sun, 04 Oct 2026 00:00:00 GMT https://kontrolplane.dev/blog/terraform-state-without-surgery/ https://kontrolplane.dev/blog/terraform-state-without-surgery/ terraform's moved, import, and removed blocks turn state surgery into configuration changes that get a plan, a review, and a history like any other. Sat, 19 Sep 2026 00:00:00 GMT https://kontrolplane.dev/blog/promotions-with-kargo/ https://kontrolplane.dev/blog/promotions-with-kargo/ kargo models the sequence and requirements for promoting a version between environments, layering on top of argocd without replacing its sync. Sun, 13 Sep 2026 00:00:00 GMT https://kontrolplane.dev/blog/graceful-shutdown-in-kubernetes/ https://kontrolplane.dev/blog/graceful-shutdown-in-kubernetes/ rolling updates drop connections when kubelet sends sigterm before the endpoint is removed from routing. the fix spans the pod spec and the application. Sat, 12 Sep 2026 00:00:00 GMT https://kontrolplane.dev/blog/messaging-with-nats/ https://kontrolplane.dev/blog/messaging-with-nats/ nats routes messages by subject with a single small binary, and its jetstream layer adds persistence, replay, and at-least-once delivery on top. Thu, 13 Aug 2026 00:00:00 GMT https://kontrolplane.dev/blog/row-level-security-in-postgres/ https://kontrolplane.dev/blog/row-level-security-in-postgres/ row level security moves tenant filtering out of application code and into the table definition, so a forgotten where clause returns nothing. Fri, 07 Aug 2026 00:00:00 GMT https://kontrolplane.dev/blog/password-management-with-pass/ https://kontrolplane.dev/blog/password-management-with-pass/ pass encrypts each password into its own gpg file and tracks the whole store with git, avoiding proprietary databases and vendor sync services. Mon, 15 Jun 2026 00:00:00 GMT https://kontrolplane.dev/blog/system-and-user-prompts/ https://kontrolplane.dev/blog/system-and-user-prompts/ system and user prompts in an llm api request look interchangeable but carry different authority, and blurring the distinction causes real failures. Sun, 14 Jun 2026 00:00:00 GMT https://kontrolplane.dev/blog/secrets-management-with-external-secrets-operator/ https://kontrolplane.dev/blog/secrets-management-with-external-secrets-operator/ the external secrets operator syncs secrets from aws parameter store and other backends into native kubernetes secrets, keeping the source outside the cluster. Thu, 11 Jun 2026 00:00:00 GMT https://kontrolplane.dev/blog/terminal-user-interfaces-with-bubbletea/ https://kontrolplane.dev/blog/terminal-user-interfaces-with-bubbletea/ bubbletea is a go framework for terminal interfaces built on the elm architecture, for interactive cli tools driven by state and messages. Thu, 14 May 2026 00:00:00 GMT https://kontrolplane.dev/blog/managing-dotfiles-with-stow/ https://kontrolplane.dev/blog/managing-dotfiles-with-stow/ gnu stow turns a directory of dotfiles into symlinks placed in the right spots, replacing brittle install scripts with plain directory structure. Wed, 13 May 2026 00:00:00 GMT https://kontrolplane.dev/blog/preview-environments-with-argocd/ https://kontrolplane.dev/blog/preview-environments-with-argocd/ argocd applicationsets can generate a full preview environment for every open pull request and remove it automatically once the pull request closes. Tue, 12 May 2026 00:00:00 GMT https://kontrolplane.dev/blog/terminal-multiplexing-with-tmux/ https://kontrolplane.dev/blog/terminal-multiplexing-with-tmux/ tmux keeps terminal sessions alive across disconnects and splits them into panes and windows, replacing a pile of manually tiled terminal tabs. Mon, 11 May 2026 00:00:00 GMT https://kontrolplane.dev/blog/postgres-on-kubernetes-with-cloudnativepg/ https://kontrolplane.dev/blog/postgres-on-kubernetes-with-cloudnativepg/ cloudnativepg is a kubernetes operator built for postgresql that handles replication, failover, backups, and monitoring through custom resources. Sat, 10 May 2025 00:00:00 GMT https://kontrolplane.dev/blog/policy-as-code-with-kyverno/ https://kontrolplane.dev/blog/policy-as-code-with-kyverno/ kyverno enforces security standards, injects defaults, and generates resources in kubernetes using plain yaml policies instead of a new language. Fri, 02 May 2025 00:00:00 GMT https://kontrolplane.dev/blog/cgroup-based-security-in-kubernetes/ https://kontrolplane.dev/blog/cgroup-based-security-in-kubernetes/ kubernetes translates pod resource requests and limits into linux cgroups, and missing or misconfigured ones let a memory leak or a fork bomb take down the whole node. Fri, 25 Apr 2025 00:00:00 GMT