EKS with Terraform: separating cluster infrastructure from add-ons
A source-linked walkthrough of an EKS platform: separate Terraform roots, remote state, node groups, IAM and the checks needed before production.
Read the note ↗Engineering notes
Decisions behind the infrastructure.
Code, trade-offs and the checks I would make before handing a system over. Each walkthrough links to the source it discusses.
Kubernetes secrets with AWS Secrets Manager: sync is only half the workflow
How External Secrets Operator and IRSA fit together, where namespace boundaries matter and why secret rotation also needs application reload handling.
Read the note ↗Argo CD bootstrap: what installing the chart does, and what it does not
A practical review of Argo CD bootstrap on EKS: Helm ownership, application reconciliation, access controls, rollout checks and recovery responsibilities.
Read the note ↗