Notes on cloud engineering & DevOps
Azure Policy has no built-in deduplication. Assign five compliance frameworks and you get five times the noise. Initiative Merger fixes that by merging multiple initiatives into one deduplicated, deployable initiative.
A clear breakdown of the three pillars of Microsoft Defender for Cloud: Defender Plans, MCSB, and Compliance Initiatives, and how they relate to Secure Score and the Regulatory Compliance blade.
A practical guide to setting up Traefik v3 as a Gateway API ingress controller on K3s, with cert-manager automating Let's Encrypt TLS certificates — including the pitfalls around CRD ordering, internal port conflicts, and Gateway configuration.
A critical look at Azure compliance frameworks, exploring why green scores don't always mean secure environments and how to build meaningful security posture beyond dashboard metrics.
Learn how to migrate from the community ingress-nginx controller to Microsoft's AKS App Routing add-on with minimal downtime using a phased approach that runs both controllers side by side.
How AI is fundamentally changing the landscape of cloud engineering, from manual work to orchestration, from execution to direction. A look at what this means for the future of the profession.
Learn how to create, manage, and deploy Azure Policy exemptions using EPAC for compliant exceptions to your governance policies.
