Platform
Building internal platforms with paved paths and guardrails. 3 posts
- Design
Bounding an Agent’s Authority During Kubernetes Incident Response
Intent classification can choose a specialist, but it cannot grant access. A practical design for routing incident work across clusters while keeping authorization in scoped grants and Kubernetes RBAC.
9 minKubernetesPlatformSecurity - Design
Shell Access That Expires on its Own: Building Just-in-Time kubectl exec
Standing exec permissions in production are a liability. This is the design of a just-in-time replacement (request, approval, namespace lock, broker, scheduled expiry), and the long tail of making expiry recoverable as well as fail-closed: retry semantics, durable notifications, CloudFormation imports and evicted pods.
14 minKubernetesSecurityAWS - Design
Exactly 100, Not 101: Distributed Rate Limiting with Envoy and Redis
Per-tenant quotas for internal APIs, enforced across many instances, on VMs and Kubernetes, on x86 and ARM. Why we picked Envoy over Kong, Caddy and a managed WAF, how descriptors really compose, how we proved a 100-per-hour quota lets exactly 100 through, and the sidecar plumbing that made it a one-line opt-in.
16 minNetworkingKubernetesPlatform