blog posts

once in a while inspiration hits and I share ideas here

blockchainkubernetesplatform-engineeringinfrastructure-as-code

Orchestrating blockchain nodes on Kubernetes at Blockdaemon: the design case

Kubernetes was built for stateless workloads. Blockchain nodes are the extreme opposite. A design proposal exploring what it would actually take to run validators and full nodes on Kubernetes at scale: storage, process exclusivity, key injection, and the upgrade automation that might make it worth the investment.

user photo

macunha

infrastructure-as-codecloudterraform

Real-life Terraform Refactoring Guide

Want to know how to better organize existing Terraform code? If you grasp these ideas, it could even serve for not-yet Infrastructure as Code resources. Jump in and take a look.

user photo

macunha

infrastructure-as-codecloudterraform

Terraform: Atomic Design

Adapting the Atomic Design methodology to Infrastructure as Code components to help foster code reusability, ease of maintenance and agile development of the infrastructure. Creates standardization, validates inputs and brings the Terraform definitions closer to the developers (self-service Ops).

user photo

macunha

infrastructure-as-codecloudterraform

Terraform Design Best Practices

Composing on the existing Terraform best-practices documents to empower developers and distribute the power of managing Infrastructure. In doing so, some self-service Ops and micro-services architecture were added to the mix.

user photo

macunha

ci-cdjenkinskubernetesinfrastructure-as-code

The Freeletics CI/CD rebuild, phase by phase

The build system: Kaniko replacing Docker-in-Docker, a Groovy Shared Library redesign that cut per-repository boilerplate to near zero, and the change that made Dependabot Monday mornings a non-event. What we shipped and what it changed.

user photo

macunha

ci-cdjenkinssecurityplatform-engineering

Boring security on Freeletics Jenkins, by design

Every G-Suite account had Jenkins admin access. Nobody chose this; it was the default, and it was never revisited. How authorization and secrets management were rebuilt to make the right thing the path of least resistance.

user photo

macunha

ci-cdjenkinsplatform-engineeringinfrastructure-as-code

Freeletics CI/CD: five years of debt (and why we kept Jenkins)

An inherited Jenkins setup nobody dared to touch, three CI/CD systems running in parallel, and a Monday morning ritual of watching builds hang. The case for rebuilding instead of replacing, and the benchmark data behind it.

user photo

macunha

data pipelineskubernetestutorials

Quickstart: Apache Spark on Kubernetes

Using Apache Spark Operator in Kubernetes to streamline your Big Data workflows with a cloud-native approach without relying on a Hadoop cluster.

user photo

macunha

devopscultureagilelean

DevOps: Benefits

Benefits of implementing DevOps culture in business, why this is a feasible option and the DevOps world big picture in-a-nutshell from a business point of view.

user photo

macunha

devopscultureagilelean

DevOps: The Genesis

From where DevOps came and to where we go. DevOps isn't simply automation, but a whole culture around agile business

user photo

macunha

product engineeringdevelopment

Insights from a perfectionist about Over-Engineering

Software engineers are always trying to do their best when it comes to being innovative and improving their systems. This article helps to put that willingness into perspective and drive it in the right direction.

user photo

macunha