Posts
All the articles I've posted.
-
From API Tokens to AWS Bedrock: My Real-World Journey Configuring an AI Agent
I set up a personal AI agent and spent weeks fighting cost overruns, local model disappointments, and AWS throttling. Here's the real story — every wrong turn, every fix, and the multi-model architecture that finally worked.
-
How I Use AI Agents to Analyse Costs Across Large AWS Environments
Managing AWS costs across dozens of accounts is painful. Here's how I use AI agent skills to trace billing spikes to root cause, find waste, and recover thousands per month — without clicking through the console.
-
Building Multi-Architecture Container Images Using Kaniko and GitLab CI
How to build multi-architecture container images using Kaniko and GitLab CI, targeting both amd64 and arm64 for AWS Graviton on ECS Fargate — with native runners per architecture and manifest-tool to combine them.
-
Building a DevSecOps Pipeline Using Open Source Tools
A complete DevSecOps pipeline using open source tools — Dependency-Track, CodeQL, Gitleaks, Checkov, Trivy, and DefectDojo — integrated into GitLab CI/CD for a Terraform + Node.js + GCP Cloud Run stack.
-
Automating Certificate Management using GKE's Managed Certificates
How to use GKE Managed Certificates to automate TLS certificate lifecycle for applications running on Google Kubernetes Engine.
-
Automating Certificate Management for Kubernetes using Cert-Manager and Let's Encrypt
How to automate TLS certificate lifecycle management for Kubernetes applications using cert-manager and Let's Encrypt free certificates.
-
SSO for Managed Kubernetes Services (Part 1)
Setting up unified OIDC-based authentication across EKS and GKE using Okta as a single source of truth, eliminating duplicate identity management across cloud providers.