BrainFuel
Fuel your engineering mind.
Engineering ideas, cloud architecture, DevOps, Kubernetes, AI and everything in between — written from production, versioned in Git.
--- title: Zero-Trust Workload Identity at Scale: SPIFFE, SPIRE, and the End of Long-Lived Service Credentials date: Sep 23, 2026 tags: [Kubernetes, Cluster Management, EKS, Istio, AWS, Security] category: Kubernetes ---
Featured
Zero-Trust Workload Identity at Scale: SPIFFE, SPIRE, and the End of Long-Lived Service Credentials
title: "Zero-Trust Workload Identity at Scale: SPIFFE, SPIRE, and the End of Long-Lived Service Credentials" date: 2026-09-23 tags: [SPIFFE, SPIRE, Zero Trust, Workload Identity, mTLS, Kubernetes, DevSecOps, Istio, En…
Latest articles
all posts →Kubernetes⎇ 7280fa3Zero-Trust Workload Identity at Scale: SPIFFE, SPIRE, and the End of Long-Lived Service Credentials
title: "Zero-Trust Workload Identity at Scale: SPIFFE, SPIRE, and the End of Long-Lived Service Credentials" date: 2026-09-23 tags: [SPIFFE, SPIRE, Zero Trust, Workload Identity, mTLS, Kubernetes, DevSecOps, Istio, En…
Kubernetes⎇ 4886a5dBackstage at Scale: Building a Production-Grade Internal Developer Platform with Software Catalog, Golden Paths, and TechDocs
title: "Backstage at Scale: Building a Production-Grade Internal Developer Platform with Software Catalog, Golden Paths, and TechDocs" date: 2026-09-22 tags: [Backstage, Platform Engineering, Internal Developer Platfo…
Kubernetes⎇ 0a62587Crossplane in Production: Building a Self-Service Internal Cloud Platform with Kubernetes-Native Infrastructure APIs
title: "Crossplane in Production: Building a Self-Service Internal Cloud Platform with Kubernetes-Native Infrastructure APIs" date: 2026-09-21 tags: [Crossplane, Platform Engineering, Kubernetes, GitOps, Internal Deve…
Kubernetes⎇ 6c9f693Policy as Code at Scale: Kyverno, OPA/Gatekeeper & CEL-Native Admission Control in Production Kubernetes
title: "Policy as Code at Scale: Kyverno, OPA/Gatekeeper & CEL-Native Admission Control in Production Kubernetes" date: 2026-09-20 tags: [Kubernetes, Policy as Code, Kyverno, OPA, Gatekeeper, ValidatingAdmissionPolicy…
Cloud⎇ 52506cfKubernetes Disaster Recovery at Scale: Velero, etcd Backups & Multi-Region Failover Architecture
title: "Kubernetes Disaster Recovery at Scale: Velero, etcd Backups & Multi-Region Failover Architecture" date: 2026-09-18 tags: [Kubernetes, Disaster Recovery, Velero, etcd, Multi-Region, Platform Engineering, GitOps…
Kubernetes⎇ e851e4bGateway API in Production: Migrating Off Retired Ingress-NGINX at Enterprise Scale
title: "Gateway API in Production: Migrating Off Retired Ingress-NGINX at Enterprise Scale" date: 2026-09-17 tags: [Kubernetes, Gateway API, Ingress, Networking, Envoy, Cilium, Istio, Platform Engineering, GitOps, Mul…