GitOps
GitOps in Practice: How to Design a Scalable CI/CD Pipeline with GitLab and GKE
A scalable CI/CD pipeline on GitLab and Google Kubernetes Engine starts with one decision: do you treat the pipeline as a delivery system you design, or as a YAML file you copy ...
When Your Cluster Won’t Sit Still: The Hidden Cost of Kubernetes Autonomy During Incidents
I’ve spent the better part of the last few years on the receiving end of Kubernetes pages, both as an operator and as someone building tooling for platform teams. The pattern I’ve ...
Architecting Enterprise GitOps: Scaling Argo CD on OKE
The industry is shifting to pull-based GitOps with Argo CD to solve configuration drift across Kubernetes fleets ...
Pavan Madduri | | App-of-Apps Pattern, ApplicationSets, Argo CD, automation, Cloud Controller Manager (CCM), Configuration Drift, continuous deployment, Enterprise Cloud-Native., External Secrets Operator (ESO), GitOps, IAM Policies, Infrastructure as Code (IaC), Kubernetes Secret Management, multi-cluster orchestration, OCI Flexible Load Balancer, OCI Vault, OCIR, OIDC, OKE, Oracle Kubernetes Engine, Private VCN, Pull-based CI/CD, workload identity, Zero-Trust Architecture
Deploying Docker AI Agents on OCI and OKE
This guide details the architectural transition of AI agents from experimental scripts to "first-class production workloads" using Oracle Cloud Infrastructure (OCI) and Oracle Kubernetes Engine (OKE). It emphasizes a zero-trust, scalable approach ...
Pavan Madduri | | Agentic Architecture, AI, AI agents, containerization, Data Minimization, docker, Event-Driven Autoscaling, GitOps, infrastructure as code, kagent, KEDA, Kubernetes CRD, Kyverno, LLM Inference, MCP server, Model Context Protocol, oci, OCI Generative AI, OCI Vault, OCIR, OKE, OpenTelemetry, Oracle Kubernetes Engine, Production Workloads., Terraform, Virtual Nodes, Zero-Trust Security
Software Supply Chain Security: Why 99% of Your Container is Mystery Code
In a recent talk, the disparity between developers and platform engineers in container security was highlighted, revealing how a single line of code can pull in thousands of vulnerabilities. This article discusses ...
Jeroen van Erp | | Attestation, container security, Continuous Integration/Continuous Deployment (CI/CD), Dependency Management, Developer Relations, GitOps, Kubewarden, platform engineering, Provenance, Secure Base Images, SLSA compliance, Software Bill of Materials (SBOM), software supply chain security, Trust in Software Development., vulnerabilities
Beyond the Green Checkmark: Using Formal Verification to Stop ArgoCD Drift
In the cloud-native landscape, GitOps leads the way for continuous delivery, yet relying solely on synchronization can mask systemic issues. This article outlines the importance of formal verification in deploying Kubernetes manifests ...
Enterprise Kubernetes Isn’t a Cluster. It’s a Platform and a Supply Chain.
Kubernetes is the OS for modern apps — but enterprises need platforms, not just clusters. Focus on standardized paved paths, supply‑chain security (signing, SBOMs, provenance), GitOps + policy automation, multi‑tenant guardrails, and ...
Promotion Across Kubernetes and Hybrid Environments
In 2026, multi- and hybrid environments are increasingly the norm. For platform engineering, DevOps and application developers, this adds complexity to the software delivery lifecycle. For cloud-native teams, Kubernetes may anchor application ...
The Missing Control Plane in Cloud-Native Supply Chains
Explore how an artifact access plane can improve Kubernetes platform performance, scalability, and security by standardizing how artifacts are governed and delivered, aligning with CNCF ecosystem initiatives ...
Adrian Herrera | | artifact access plane, artifact decentralization, artifact firewall, artifact flow optimization, artifact governance, cloud infrastructure, cloud-native platforms, CNCF ecosystem, developer velocity, devops, GitOps, kubernetes, OCI artifacts, platform resilience., software supply chain, Virtual Registry
Hybrid Cloud at Enterprise Scale: Private Kubernetes for Portability and Control
Private Kubernetes is the missing abstraction layer for enterprise hybrid cloud. Learn how a private Kubernetes platform enables portability, security, governance, and freedom from vendor lock-in across on-prem, private cloud, and public ...
Shravani Gunturu | | AKS, cloud abstraction layer, cloud portability, EKS, enterprise cloud strategy, enterprise Kubernetes, GitOps, GKE, hybrid cloud, hybrid cloud architecture, Kubernetes governance, Kubernetes platform, Kubernetes security, multicloud strategy, Openshift, openstack, platform engineering, private cloud Kubernetes, private Kubernetes, vendor lock-in

