Terraform has been my bread and butter for the past few years as the tool for Infrastructure as Code. I’ve dealt with a variety of patterns while working with Terraform, and noticed one pattern that is rarely discussed, but super useful. Feature flags are a way to write code that can behave differently based on how we configure things, and is as old as writing code for computers. It gives the author of the code flexibility to have different implementations, safely migrate systems from one approach or capability to a new one and choose behaviour based on the target context. Mature codebases find tooling or affordances that give them the ability to evolve and adapt, and feature flags are one pattern to achieve that. However, the public internet has very few examples about how to achieve this for Infrastructure as Code tools, including Terraform.

Shows how to enforce and observe Kubernetes egress traffic with Squid plus NetworkPolicy without adding a service mesh.

Scout24 used an Amazon Linux 2 migration window to adopt Karpenter and cut EKS node count by about 30%.

Explains reactive metric-based scaling versus scheduled scaling and where each approach fits.

CLI proxy that reduces LLM token consumption by 60-90% on common dev commands. Single Rust binary, zero dependencies

Shows a Rust-based integration testing workflow on kind with Terraform and cleanup policies for parallel runs.

Explains how to use Vault as an OIDC provider to replace static kubeconfig credentials with short-lived tokens.

Covers layered Kubernetes security by combining Kyverno admission policies with KubeArmor runtime enforcement.

Open-source kubectl plugin for collecting a structured cluster snapshot for debugging and analysis.

Agent project focused on improving Kubernetes configuration hygiene and reducing misconfiguration risk.

Project targeting high-performance large language model inference workloads.

Enterprise-oriented platform for serving and operating LLM workloads on Kubernetes.

Tooling aimed at simplifying local Kubernetes development environments.

Security-focused extension project for strengthening Kubernetes environments.

a structural diff that understands syntax

This case study explains how JVM tuning, a smaller Hikari pool, and faster HPA scale-up doubled traffic capacity while reducing baseline pods.

This article distills incident-driven lessons on troubleshooting, configuration mistakes, and operational habits that make Kubernetes outages worse.

This article covers rebuilding a Kubernetes platform for GPU workloads to reach 99.9% uptime after operational instability.

At VictoriaMetrics, we built vlagent as a high-performance log collector for VictoriaLogs. To validate its performance and correctness under a real production-like load, we developed a benchmark suite and ran it against 8 popular log collectors. This post covers the methodology, throughput results, resource usage, and delivery correctness.

This tutorial walks through building a Go game server with Agones, matchmaking, Fleet allocation, and autoscaling on Kubernetes.

This tutorial shows how to migrate PostgreSQL to CloudNativePG on Kubernetes with logical replication and no downtime.