By pillar
Articles in the “Platform engineering” pillar.
6 articles
First login mixes network, identity, root privileges, Nix, and error recovery. At some point, continuing in shell was more complicated than writing a small SwiftUI app with a real state machine.
Read →I didn’t want to map email addresses to profiles in a script, or ask the user which workstation they wanted. I used Entra and App Roles to make identity an input to provisioning.
Read →I wanted a new Mac to go from box to a truly ready workstation without turning MDM into a configuration engine. I ended up separating enrollment, identity, orchestration, and machine state.
Read →Nix, devenv, prek, and local PostgreSQL to bring checks closer to the code, without maintaining two conflicting toolchains.
Read →I’m publishing a Kind workshop (Cilium, Envoy Gateway, Flagger) where attendees patch YAML to see who actually decides traffic.
Read →AI-assisted development acceleration led us to move validations onto workstations, without abandoning GitHub governance.
Read →