Space
AWS / Cloud
AWS identity, EKS, cloud integrations, and hybrid infrastructure design.
Projects
All projectsPosts
All posts- A Certificate Delivery Bridge Between Argo CD and Non-AWS ClustersHow a hub-issued Argo CD Agent certificate crosses an AWS Secrets Manager boundary through ESO PushSecret and ExternalSecret, without giving the non-AWS spoke ACM Private CA access.
- One Trust Anchor Per Cluster: Hardening Non-AWS Spoke Identity with IAM Roles AnywhereHow we gave RKE2/bare-metal spokes their own AWS identity without a shared trust anchor — one self-signed CA and anchor per cluster, one profile per role — so a stolen key is confined to its own cluster and a compromised consumer to its own role.
- Self-Hosted GitHub Actions Runners on EKS with Actions Runner Controller (ARC)Setting up GitHub Actions Runner Controller v2 on an existing AWS EKS cluster — from Helm installation and GitHub App authentication to troubleshooting missing tools on minimal runner images.
- Canonical JAAS Edge POC — Managing Multi-Site Infrastructure with Juju at ScaleA deep-dive into our Proof of Concept evaluating Canonical's JAAS (Juju-as-a-Service) for managing edge Kubernetes clusters from a central AWS EKS control plane, covering architecture, setup, findings, and production considerations.