De Workstation-blog
DevOps
Berichten met de tag DevOps.
Gateway API Replaces Ingress: A Step-by-Step Migration Playbook
Ingress NGINX is retired and Ingress is frozen. This playbook maps Ingress fields and annotations to Gateway and HTTPRoute, flags the ingress-nginx behaviours that break, and walks through conversion, side-by-side testing, weighted cutover and rollback.
DynaCI and runtime-grounded CI: better GitHub Actions workflows
DynaCI, an October 2026 research preprint, drafts GitHub Actions workflows from traces of real local runs. What its results show, what they do not, and a playbook to lint, test, harden and review every workflow you ship.
Code as infrastructure: one reviewed path for every production change
Infrastructure as code made servers into files. Code as infrastructure goes further: desired state, policy, pipelines and AI agent access all live in Git, are checked by policy, applied by automation and watched for drift. A practical playbook.
Decoupling Network Policy in Kubernetes: One Owner per Rule
Network rules scattered across annotations, app config and stray NetworkPolicies slow every change. Here is how to split them into layers with one owner each, using ClusterNetworkPolicy, NetworkPolicy and Gateway API, plus a step-by-step migration playbook.
One Sign-In for Every App, Run on Our Own Cluster
Five demo apps in five languages never see a password and never talk to Google: they send users to a self-hosted OpsAPI, which signs them in and hands back a token the app checks with one API call. What it costs to add an app, why admin dashboards belong behind a VPN or zero-trust broker, and the honest limits.
Balinder WaliaLezen 
Keep Your Test Sites Private: VPN at the Edge, One Sign-In for Every App
Staging and test sites hold real-looking data, yet they're often protected by an IP allowlist alone. Here's how two layers keep them private: a VPN checked at the edge proves where a request came from, and one OpsAPI sign-in with MFA proves who sent it, across every app.
Balinder WaliaLezen 
Put Internal Apps Behind Your VPN, Without Rebuilding Them
Staging sites and admin panels are often 'private' because of an IP allowlist. Put them behind the wslvpn Zero Trust VPN, enforced at the WSLProxy edge: check the tunnel and the person, fail closed, and see why someone was blocked. One field per domain, no app changes, no reload.
Balinder WaliaLezen 
Generative AI's Hidden Impact on Developers: What Surveys Miss
Developers say AI makes them faster, but the evidence shows hidden costs: almost-right answers, a gap between felt and measured speed, tool admin work and accessibility barriers. Here is what the research says and how to measure it in your team.
Beyond Unit Tests: Testing How Your System Fails and Recovers
Unit tests prove a function is correct, not that a system survives a slow database or a lost zone. A practical guide to cold-start integration tests, fault injection with Toxiproxy, circuit breakers, recovery drills and safely automated mitigation.
