Tailscale. A VPN you forget is even there.


There’s a two-part series on this blog from 2017 about setting up Cisco ASA with FreeRADIUS and two-factor authentication. The respectful suggestion in 2026 is: don’t do any of that anymore.


Read more

GitHub Actions for AWS deployments. A small, sane setup.


This is the GitHub Actions starter I want everyone on my team to use for AWS deploys. No long-lived access keys, no plaintext secrets, no magic. The whole thing is about 60 lines of YAML.


Read more

OpenTofu vs Terraform. Should I switch?


Terraform isn’t MPL anymore. OpenTofu is the community fork. If you’re responsible for a Terraform codebase you probably want a considered answer to “should I switch.” Here is mine.


Read more

IAM roles for service accounts on EKS. A small primer.


One of the small things in EKS that quietly fixes a very old problem: how do my pods get AWS credentials without me stuffing access keys into Kubernetes secrets? Short answer — IAM roles for service accounts.


Read more

Kubernetes in 2026. What changed since the last post here.


The last serious Kubernetes post on this blog was in January 2018 — a CI/CD piece with GitLab and Helm. A lot has changed since. Here is the short list of things that actually changed day-to-day work.


Read more