§00/Writing · Page 15

Field notes from
the sovereign stack
Page 15

Long-form, deeply technical writing for engineers who run what they own — Kubernetes security, Talos Linux, cloud repatriation, self-hosted AI, supply-chain integrity, and audit-grade rigor.

§15/Page 15

Showing 127–134 of 134

Cloud Exit

Cloud Repatriation: The Kubernetes Engineering Playbook

A no-hype cloud repatriation playbook for Kubernetes: dependency audit, stateful workload triage, a real TCO model, and why most attempts fail inside 18 months.

9 Jun 202619 min read

Sovereign AI

Self-Hosted AI on Kubernetes: Production vLLM

How to run self-hosted LLM inference on Kubernetes with vLLM at production grade: GPU sizing, cost crossover analysis, audit logging for EU AI Act compliance.

2 Jun 202620 min read

Supply Chain

Supply Chain Security: SBOM, Sigstore and Admission Control

Kubernetes supply chain security end to end: SBOMs with Syft, SLSA L3 provenance, Sigstore keyless signing, and Kyverno admission control that actually blocks.

28 May 202618 min read

Governance

Kyverno vs OPA Gatekeeper: Policy as Code at Cluster Scale

Kyverno against OPA Gatekeeper on Kubernetes, then the lifecycle nobody budgets for: versioning, testing, exceptions and reporting are 80% of the work.

19 May 202619 min read

GitOps

Multi-Cluster GitOps at 100+ Clusters: Argo CD's Limits vs Flux

Multi-cluster GitOps past 20 clusters: where Argo CD's hub saturates, where Flux shifts that cost onto your Git origin, and the load model to find your ceiling.

12 May 202624 min read

Security

Kubernetes Secrets Are Still Broken: ESO Over Vault

Vault is the right backend, not the right interface. ESO + dynamic credentials + etcd encryption eliminate long-lived secrets from Kubernetes clusters.

5 May 202617 min read

Networking

Cilium vs Calico: eBPF Zero Trust Without the Sidecar Tax

Cilium against Calico for zero-trust Kubernetes networking: identity-based policy, WireGuard node encryption and Hubble visibility, without the sidecar tax.

28 Apr 202622 min read

Platform Engineering

Platform Engineering: Golden Paths Need Enforcement

Platform engineering on Kubernetes: golden paths without admission enforcement are only suggestions. How to make the golden path the only path that works.

21 Apr 202618 min read

§00 / WRITING

Executive Briefing

Thirty minutes to clarify your infrastructure risk

Walk us through your vendor footprint and regulatory constraints. We will tell you honestly where sovereignty creates leverage — and where it does not. No pitch deck. No obligation.

Book an executive briefing How we engage