Blog
From the
engine room.
Notes from our engineering team on software development, DevOps, and the systems we actually build and run in production.
-
Declarative network policies: let the operator CR tell Cilium who may talk
Operators must reach the namespaces that hold the workloads they manage, and no others. Kyverno derives that from their CRs, so one Cilium rule per operator admits it into exactly those namespaces.
- Kubernetes
- Kyverno
- Cilium
- Network Policy
- Operators
- GitOps
-
vibevm: running Claude Code in YOLO mode without burning down your host
Claude Code in YOLO mode is fast and a little terrifying. We built vibevm — a throwaway KVM VM that contains the blast radius — and open-sourced it.
- AI
- Claude Code
- Security
- Sandbox
- Open Source
-
Taming Piraeus DRBD node taints with Kyverno
A Piraeus node taint meant to speed up storage failover once took down our whole cluster. Here is how we re-enabled it safely with a Kyverno mutation policy and a one-line descheduler change.
- Kubernetes
- Kyverno
- Piraeus
- DRBD
- GitOps