blog

random words on the internet

web log

Artisanal, hand crafted log of things I did, imbued with delayed regrets. Maybe someone will find these useful?

• 12024-11-17 | personal use gerrit part 1
• 12024-11-16 | jj revset diagram
• 12024-11-13 | go iterators as with
• 12024-11-12 | no rss on this blog
• 12024-11-11 | go contributor summit
• 12024-11-10 | offline buf generate
• 12024-10-17 | switching kubeconfig
• 12024-10-06 | job3 retro
• 12024-10-02 | spinner vs progressbar
• 12024-10-01 | one more flag
• 12024-09-13 | eks out of ips
• 12024-09-12 | istio high interzone traffic
• 12024-09-05 | logs as text vs events
• 12024-09-04 | man vs help
• 12024-08-31 | job3 26 months
• 12024-08-13 | upgrades manifests operators
• 12024-07-30 | overloaded k8s apiserver
• 12024-07-29 | cryptsetup tpm lockout
• 12024-07-20 | gcp uptime service agent auth
• 12024-07-14 | single node envoy gateway
• 12024-07-13 | gcp workload identity federation
• 12024-07-03 | kitty review command output
• 12024-07-02 | mastodon app
• 12024-07-01 | tools of work
• 12024-06-30 | job3 24 months
• 12024-06-29 | direct connections istio
• 12024-06-16 | what is sre
• 12024-06-15 | ci tests
• 12024-06-14 | evil default values
• 12024-06-13 | people and services
• 12024-05-06 | k8s with cue kpt
• 12024-05-05 | github merge queue
• 12024-05-04 | timoni
• 12024-04-29 | job3 22 months
• 12024-04-28 | first mover stickiness
• 12024-04-27 | hetzner arm64 alpine kubeadm k8s cilium
• 12024-04-24 | aws summit london
• 12024-04-23 | neovim gopls add dependency
• 12024-04-22 | circleci test run jest
• 12024-03-17 | tracing spans as logs
• 12024-02-29 | job3 20 months
• 12024-02-22 | maintenance page
• 12024-02-04 | protoc gen custom
• 12024-01-27 | helm generate not template
• 12024-01-20 | config or data or code
• 12024-01-15 | practical tpm2
• 12024-01-12 | lfs sbu
• 12024-01-02 | archlinux reinstall
• 12023-12-31 | job3 18 months
• 12023-12-30 | postgres batch insert
• 12023-12-29 | chaos communication congress 3
• 12023-12-28 | chaos communication congress 2
• 12023-12-27 | chaos communication congress 1
• 12023-12-26 | access control
• 12023-12-25 | spire basics
• 12023-12-24 | local kubernetes gcp workload identity
• 12023-12-23 | service location vs identity
• 12023-12-23 | k8s mounts
• 12023-12-09 | go webauthn passkeys
• 12023-11-27 | go safer html
• 12023-11-22 | kyverno block workspace delete
• 12023-11-21 | fedora broken nvim
• 12023-11-19 | goldmark code block
• 12023-11-13 | softserve webhooks
• 12023-11-10 | helm notes
• 12023-11-04 | messing up tls certs
• 12023-10-30 | bazel go notes
• 12023-10-29 | kpt config sync impressions
• 12023-10-28 | job3 16 months
• 12023-10-08 | kpt config sync arm64
• 12023-10-07 | tekton pipelines for ci
• 12023-09-23 | k8s ordered containers
• 12023-08-27 | job3 14 months
• 12023-08-26 | distroless containers
• 12023-08-25 | tailscale k8s operator
• 12023-08-20 | serviceweaver
• 12023-08-18 | gophercon uk 2
• 12023-08-17 | gophercon uk 1
• 12023-08-04 | serving s3 helm charts with envoy
• 12023-07-29 | linux pam u2f fprintd
• 12023-07-28 | debugging vector datadog proxy
• 12023-07-10 | failed otelcol cue schema validation
• 12023-07-09 | failed k8s crd jsonschema
• 12023-07-08 | failed https dns
• 12023-07-05 | k8s tokenrequest tokenreview
• 12023-06-30 | log slog custom handler
• 12023-06-25 | ci system buildkite
• 12023-06-24 | job3 12 months
• 12023-06-23 | kyverno verifyimages bug
• 12023-06-12 | local container registry
• 12023-06-11 | image manifests
• 12023-06-04 | fedora workstation install
• 12023-06-01 | k8s using internal ingress
• 12023-05-30 | oci image tag to digest
• 12023-05-29 | shell loop structured data
• 12023-05-28 | curl aws sigv4
• 12023-05-27 | curl aws sts assumerolewithwebidentity
• 12023-05-23 | alerts in yaml
• 12023-05-22 | opentelemetry go metrics ga
• 12023-05-21 | work what
• 12023-05-05 | wtf is sre 2
• 12023-05-04 | wtf is sre 1
• 12023-04-29 | job3 10 months
• 12023-04-10 | library or framework
• 12023-04-09 | tailscale funnel secure grpc
• 12023-04-08 | push pull metrics
• 12023-04-07 | servicemonitor to datadog
• 12023-03-30 | alert to chat
• 12023-03-19 | private go pkgsite
• 12023-03-18 | grpc go k8s load balancing
• 12023-02-25 | job3 8 months
• 12023-02-05 | fosdem 2
• 12023-02-04 | fosdem 1
• 12023-02-03 | rfc viewers
• 12023-01-29 | kubelet stats
• 12023-01-15 | snyk kickoff 2023
• 12023-01-15 | go fork daemon to background
• 12023-01-08 | mvp in internal software
• 12023-01-07 | k8s leaderelection
• 12023-01-07 | against robustness principle
• 12023-01-04 | special metric names
• 12023-01-03 | mismatched etc shadow
• 12022-12-31 | year in review
• 12022-12-30 | spotify earbug datastudio
• 12022-12-29 | vector.dev experience report
• 12022-12-28 | tekton notes
• 12022-12-27 | job3 6 months
• 12022-12-01 | pixel7 hotspot disconnects
• 12022-11-25 | openfeature feature flags
• 12022-11-24 | opentelemetry collector oidc auth
• 12022-11-22 | strcutured data scripting cue
• 12022-11-21 | gotosocial on flyio
• 12022-11-20 | skaffold argocd helm
• 12022-11-17 | aws to gcp workload identity federation
• 12022-11-16 | gcp to aws workload identity federation
• 12022-11-15 | circleci to gcp workload identity federation
• 12022-10-30 | kustomize targeting array items
• 12022-10-29 | job3 4 months
• 12022-10-25 | opentelemetry collector attributes filter resource processor
• 12022-10-24 | opentelemetry opamp
• 12022-10-23 | opentelemetry servicemonitor
• 12022-10-22 | opentelemetry schema
• 12022-09-18 | parser alignment
• 12022-09-17 | vector agent
• 12022-09-16 | publish direct to firebase
• 12022-09-11 | melange and apko
• 12022-09-10 | flyio wireguard vpn server
• 12022-08-28 | tagging artifacts for cicd
• 12022-08-27 | job3 2 months
• 12022-08-22 | css hover select all same class
• 12022-08-18 | gophercon uk 2
• 12022-08-17 | gophercon uk 1
• 12022-08-16 | incident response management
• 12022-08-13 | mermaid js
• 12022-08-12 | go profiling
• 12022-07-31 | otelcol cueprocessor
• 12022-07-24 | sbom
• 12022-07-23 | metric histograms
• 12022-07-22 | go gc tldr
• 12022-07-21 | krm functions
• 12022-07-20 | kubernetes resource model
• 12022-07-10 | job3 2 weeks
• 12022-07-09 | metrics delta cumulative
• 12022-07-08 | metrics push pull
• 12022-07-04 | promql histogram quantile rate
• 12022-06-29 | proofpoint meta network agent
• 12022-06-28 | wayland chrome desktop screen share
• 12022-06-27 | archlinux setup
• 12022-06-12 | cloud run opentelemetry go
• 12022-06-05 | things in zsh config
• 12022-06-04 | ssh certificates with yubikeys
• 12022-06-03 | icann 60 days
• 12022-06-02 | workspaces with git worktree
• 12022-06-01 | terraform with cue
• 12022-05-31 | cosign in cloudbuild
• 12022-05-30 | splitting my monorepo
• 12022-05-08 | software supply chain tooling
• 12022-05-07 | job hunting experience
• 12022-05-01 | container x interface
• 12022-04-29 | job2 retro
• 12022-04-25 | job2 2 months
• 12022-04-23 | unified config syntax
• 12022-04-21 | git notes for ci results
• 12022-04-20 | ci in buildkit
• 12022-04-16 | go net http server timeouts
• 12022-04-15 | outsiders view of wasm
• 12022-04-09 | hn personal sites
• 12022-03-30 | aws certified solutions architect associate
• 12022-03-26 | systemd protection settings
• 12022-03-25 | systemd creds
• 12022-03-24 | uncached actions in dockerfiles
• 12022-03-20 | systemd as build system
• 12022-03-19 | systemd nspawnd
• 12022-03-15 | containing services
• 12022-03-13 | aws certified cloud practitioner
• 12022-03-12 | job2 1 week
• 12022-03-01 | neverssl
• 12022-02-28 | job1 retro
• 12022-02-21 | google analytics variants
• 12022-01-30 | mono vs micro
• 12022-01-19 | unpublishing go modules
• 12022-01-16 | protobuf to openapi via cue
• 12022-01-15 | kubernetes the sane way
• 12022-01-14 | knative http protocol
• 12022-01-13 | backend frontend and backend backend
• 12022-01-12 | ensuring e2e with cosign
• 12021-12-18 | cloudflare firewall punching holes
• 12021-12-17 | passing loggers in ctx
• 12021-12-10 | building containers with code
• 12021-12-09 | knative networking
• 12021-11-22 | systemd nspawn first impressions
• 12021-11-21 | qemu notes
• 12021-11-18 | ssh certificates
• 12021-11-17 | systemd networkd notes
• 12021-11-16 | manual hetzner arch linux
• 12021-10-17 | go mod retract
• 12021-10-07 | kubernetes metrics
• 12021-10-06 | opentelemtry data model
• 12021-09-25 | envoy grpc extauth go
• 12021-09-06 | kubelet containerd standalone
• 12021-09-05 | buildkite first impressions
• 12021-09-04 | whats in a container image
• 12021-09-03 | packer docker build
• 12021-08-28 | cli regex notes
• 12021-08-27 | gcs access control
• 12021-08-26 | k8s sidecar
• 12021-08-25 | gcp signed url no key
• 12021-08-24 | renovatebot regex custom versioning
• 12021-08-23 | jenkins github push
• 12021-08-22 | job1 10 months
• 12021-08-15 | prometheus alertmanager end2end delay
• 12021-08-08 | k8s lifecycle probes
• 12021-08-07 | json schema openapi kubernetes crd
• 12021-08-02 | bazel notes
• 12021-08-01 | certificate transparency at work
• 12021-07-31 | promql notes
• 12021-07-30 | k8s secret stringdata
• 12021-07-29 | makefile notes
• 12021-07-28 | dns txt
• 12021-07-27 | maddy email
• 12021-07-21 | background auth
• 12021-07-04 | tools on github actions
• 12021-06-27 | skaffold kaniko docker caching
• 12021-06-23 | xds reading
• 12021-06-22 | load testing tools
• 12021-06-18 | klog output
• 12021-06-17 | opentelemetry collector logs
• 12021-06-11 | jool nat64 coredns dns64
• 12021-06-10 | contour ipv6
• 12021-06-04 | cicd and gitops
• 12021-06-03 | job1 8 months
• 12021-06-02 | nomad questions
• 12021-06-01 | terraform single server
• 12021-05-13 | kubevirt notes
• 12021-05-09 | go mod vendor non go things
• 12021-04-30 | normalizing k8s manifests
• 12021-04-29 | go private modules in gitlab
• 12021-04-26 | istio gateway mtls
• 12021-04-25 | k8s application lifecycle controllers
• 12021-04-24 | hetzner arch k8s cilium
• 12021-04-17 | dns service discovery
• 12021-04-14 | choosing colormaps
• 12021-04-13 | go license scanning
• 12021-04-12 | go mod basics
• 12021-04-10 | sharing git hooks
• 12021-04-09 | go structured logging error key values
• 12021-04-08 | envoy 1 17 static
• 12021-04-07 | hardened systemd service
• 12021-04-06 | job1 6 months
• 12021-03-29 | plain git private go modules
• 12021-03-27 | ingress nginx opentracing
• 12021-03-22 | k8s cluster metrics
• 12021-03-21 | development environment
• 12021-03-20 | managing k8s manifests
• 12021-02-29 | k8s non root capabilities
• 12021-02-28 | k8s labelling reflections
• 12021-02-27 | go private doc server
• 12021-02-21 | reading openmetrics spec
• 12021-02-20 | go plugins
• 12021-02-19 | extracting from json
• 12021-02-18 | opinionated k8s deployment
• 12021-02-17 | github special urls
• 12021-02-16 | reading smi spec
• 12021-02-15 | reading otel spec
• 12021-02-14 | renovate and helm
• 12021-02-13 | state of metrics exemplars
• 12021-02-12 | otel go v0.16.0 tracing
• 12021-02-12 | grafana trace to log to trace
• 12021-01-28 | argocd private helm gcs
• 12021-01-27 | job1 4 months
• 12021-01-23 | docker buildx caching
• 12021-01-22 | cloudflare bot management
• 12021-01-21 | cert cli
• 12021-01-19 | go error proposals musings
• 12021-01-18 | what do you need in k8s
• 12021-01-17 | dayjob agile scrum
• 12021-01-16 | short circuit logic
• 12021-01-14 | knative scale to zero
• 12020-12-19 | migrating elasticcloud clusters
• 12020-12-18 | gh actions pr title fixer
• 12020-12-08 | k8s cluster setup
• 12020-12-04 | importing terraform
• 12020-12-03 | job1 2 months
• 12020-12-02 | avoid helm
• 12020-12-01 | ms teams
• 12020-11-24 | skopeo copy
• 12020-11-23 | go error handling proposals
• 12020-11-22 | k8s gitops secrets
• 12020-11-21 | kaniko
• 12020-11-20 | k8s rollouts
• 12020-11-19 | more cicd systems
• 12020-11-18 | thoughts on systemd homed
• 12020-11-17 | github actions revisited
• 12020-11-16 | docker build secrets
• 12020-11-15 | repo metadata
• 12020-11-14 | k8s operator
• 12020-11-13 | public data
• 12020-11-12 | git filter things
• 12020-11-11 | web git
• 12020-11-10 | common gateway interface
• 12020-11-09 | reinstall arch v4
• 12020-11-08 | arch dm crypt btrfs
• 12020-11-07 | arch btrfs
• 12020-11-04 | ircing
• 12020-11-03 | jekyll hugo
• 12020-11-02 | gcp https cloudflare
• 12020-11-01 | zsh prompt
• 12020-10-31 | git signing signify
• 12020-10-30 | tldr consensus
• 12020-10-29 | matrix irc
• 12020-10-28 | the update framework
• 12020-10-27 | squashed git
• 12020-10-25 | how many package managers
• 12020-10-24 | data serialization
• 12020-10-23 | irc
• 12020-10-22 | renaming files
• 12020-10-21 | search and replace maths
• 12020-10-19 | zero trust networking products
• 12020-10-18 | foundations of cloud native
• 12020-10-17 | go sql qol
• 12020-10-16 | terraform second impressions
• 12020-10-14 | tcp over wireguard
• 12020-10-13 | cloudflare for ipv6
• 12020-10-12 | proto encoding
• 12020-10-11 | logging revisited
• 12020-10-10 | multiplexing protocols
• 12020-10-09 | software supply chain musings
• 12020-10-05 | slow ipfs
• 12020-10-04 | hetzner arch k8s
• 12020-10-03 | go list patterns
• 12020-10-02 | zsh completion basic
• 12020-10-01 | go channel sync
• 12020-09-30 | go iterators
• 12020-09-29 | benchmark kaniko go
• 12020-09-28 | notes 20200928
• 12020-09-24 | gitattributes age encrypt
• 12020-09-23 | k8s clustered apps
• 12020-09-21 | k8s volume perms
• 12020-09-20 | k8s go dev loop
• 12020-09-19 | json unmarshal hack
• 12020-09-18 | random thoughts yaml conf
• 12020-09-17 | k8s default policies
• 12020-09-16 | traefik backend tls
• 12020-09-15 | authnz services
• 12020-09-14 | k8s policy enforment
• 12020-09-13 | service authnz
• 12020-09-12 | exotic shells
• 12020-09-11 | neovim init.lua
• 12020-09-10 | neovim plugins
• 12020-09-09 | container tools
• 12020-09-08 | base n
• 12020-09-07 | terraform first impressions
• 12020-09-05 | monad
• 12020-09-04 | container runtime
• 12020-08-11 | go opentelemetry
• 12020-08-09 | analytics report
• 12020-08-07 | ntu im
• 12020-08-06 | updated weechat
• 12020-08-05 | openssl oneline curve certs
• 12020-08-04 | loginctl linger
• 12020-08-03 | no tofu ssh
• 12020-08-02 | reverse proxies
• 12020-08-01 | frontend thoughts
• 12020-07-31 | protoc gen go grpc
• 12020-07-30 | go modules tldr
• 12020-07-29 | terminal dashboard
• 12020-07-28 | diff tools
• 12020-07-26 | email date
• 12020-07-25 | rsync slashes
• 12020-07-07 | lua
• 12020-07-06 | modern cli toolbox
• 12020-07-05 | hyped blogging
• 12020-07-04 | reusing tcp ports
• 12020-07-03 | ssh login failures
• 12020-06-23 | uva sne
• 12020-06-22 | digitalocean scam
• 12020-06-21 | TURN proxy
• 12020-06-20 | named data networking
• 12020-06-07 | bluetooth headset
• 12020-05-27 | go module proxies
• 12020-05-25 | messaging systems
• 12020-05-24 | databases
• 12020-05-21 | static site hosts
• 12020-05-16 | permanently backlogged ideas
• 12020-05-15 | spotify codes
• 12020-05-14 | osc 52
• 12020-05-11 | go mod stats
• 12020-05-10 | tar
• 12020-05-08 | http headers
• 12020-05-06 | webauthn
• 12020-05-02 | arch reproducible builds
• 12020-05-01 | lc lang
• 12020-04-30 | wayback machine
• 12020-04-29 | irc weechat
• 12020-04-28 | tekton pipelines
• 12020-04-19 | kubernetes secrets
• 12020-04-17 | passwordless sudo u2f
• 12020-04-12 | go structured logging
• 12020-04-06 | nftables notes
• 12020-04-05 | iptables notes
• 12020-04-01 | metrics and tracing
• 12020-03-31 | wireguard systemd p2
• 12020-03-30 | kubernetes cluster 19 p3
• 12020-03-29 | kubernetes cluster 19 p2
• 12020-03-28 | kubernetes cluster 19 p1
• 12020-03-14 | wireguard systemd
• 12020-03-13 | pomerium traefik auth proxy
• 12020-03-08 | wpa eap tls
• 12020-03-07 | latex notes
• 12020-02-02 | fosdem
• 12020-01-12 | ssh u2f
• 12020-01-09 | signing and encrypting
• 12020-01-03 | go module stats
• 12019-12-30 | chaos communication congress 4
• 12019-12-29 | chaos communication congress 3
• 12019-12-28 | chaos communication congress 2
• 12019-12-27 | chaos communication congress 1
• 12019-12-26 | chaos communication congress 0
• 12019-12-24 | experiments with sxg
• 12019-11-23 | custom initramfs
• 12019-11-03 | archlinux custom repo
• 12019-11-02 | reinstall arch v3
• 12019-10-30 | reinstall arch v2
• 12019-10-17 | cloudbuild github app
• 12019-10-16 | standalone coredns
• 12019-10-08 | traefik v2 kubernetescrd tls
• 12019-10-07 | reinstall archlinux
• 12019-10-06 | github actions action
• 12019-09-21 | go reproducible builds
• 12019-09-20 | go string rune byte
• 12019-09-14 | eduroam iwd
• 12019-09-04 | eduroam
• 12019-08-31 | github actions beta
• 12019-08-10 | go vanity imports
• 12019-08-07 | custom email
• 12019-08-05 | go module versioning
• 12019-07-08 | cloudbuild git
• 12019-07-04 | service ui
• 12019-06-26 | go dialogflow fulfillment
• 12019-06-25 | k8s network ingress
• 12019-06-24 | benchmark js compiler
• 12019-06-23 | kustomize all the things
• 12019-06-21 | authnz
• 12019-06-20 | privacy policy
• 12019-06-19 | micro boilerplate
• 12019-06-18 | license to hack
• 12019-06-12 | benchmark cloudbuild
• 12019-06-11 | social media messaging
• 12019-06-10 | grpc web 2019
• 12019-06-09 | cloudbuild yaml
• 12019-06-08 | cube uhhm nates
• 12019-06-07 | traefik v2 on k8s
• 12019-06-06 | notes git
• 12019-06-05 | inbox zero
• 12019-06-04 | cloudbuild arch pkgbuild
• 12019-06-03 | todo list
• 12019-06-02 | notes 20190602
• 12019-06-01 | cloud build kaniko
• 12019-05-29 | trust the rabbit hole
• 12019-05-28 | blog sub home
• 12019-05-24 | this blog
• 12019-05-23 | a blog