https://devopstech.net/blog/ An engineering workshop: active defence for Kubernetes (ICE) and an autonomous development loop (deusex), plus the archived KubeMeridian plugin for Grafana. en Sun, 18 Oct 2026 00:00:00 GMT https://devopstech.net/blog/live-needs-evidence https://devopstech.net/blog/live-needs-evidence Sun, 18 Oct 2026 00:00:00 GMT A security product that promises to call the unverified unverified has to apply the rule to itself. Five capability statuses, a dated evidence mark that CI enforces, and the five rows that lost their live status the day after the gate landed. https://devopstech.net/blog/merged-is-not-fixed https://devopstech.net/blog/merged-is-not-fixed Sun, 18 Oct 2026 00:00:00 GMT Why ICE closes a security finding only on a measurement taken after the merge — and how Argo CD's sync revision, freshness cadences and Unknown-as-unmet keep the loop honest. https://devopstech.net/blog/the-bottleneck-is-the-human https://devopstech.net/blog/the-bottleneck-is-the-human Sun, 18 Oct 2026 00:00:00 GMT An autonomous development loop where every role behaved as designed — and two green one-line fixes waited six days. Why refusals by category never expire, and what deusex changed. https://devopstech.net/blog/what-i-have-not-handed-over https://devopstech.net/blog/what-i-have-not-handed-over Sun, 18 Oct 2026 00:00:00 GMT deusex runs most of my backlog around the clock; the goal is that I decide only the concept. As of October 2026, here is the honest remainder — what is solvable and just not done, and what no method will ever take off a person. https://devopstech.net/blog/consolidating-kubernetes-clusters https://devopstech.net/blog/consolidating-kubernetes-clusters Sat, 27 Jun 2026 00:00:00 GMT How we consolidated 10+ Kubernetes clusters across four clouds into four, under one hub-and-spoke ArgoCD control plane — topology, GitOps layout and the gotchas. https://devopstech.net/blog/vault-ha-on-kubernetes https://devopstech.net/blog/vault-ha-on-kubernetes Sat, 27 Jun 2026 00:00:00 GMT A production-minded HashiCorp Vault setup on Kubernetes — HA storage, auto-unseal via cloud KMS, Kubernetes auth, dynamic secrets and a disaster-recovery runbook.