De Workstation-blog
DevOps
Berichten met de tag DevOps.
Gateway API Shifts Cluster Networking: An Ownership Model for the Edge
Ingress is frozen and Ingress NGINX is retired. Gateway API replaces one shared object with resources owned by platform and application teams, joined by explicit handshakes. Here is what that means for platform design, RBAC, topology and CRD ownership.
MCP for DevOps: Give Agents Pipeline Context Without the Keys
How platform teams can use the Model Context Protocol safely: start with read-only servers and scoped identities behind a gateway, trace every tool call, and add write tools only behind human approval. Includes RBAC, tool and task examples.
Gemini 4 Argon: What It Means for Your Team, and Where to Use It First
Gemini 4 Argon is built to work for hours on one measurable problem. Here is what shipped, the real costs, and how to pilot it safely on your own backlog.
Balinder WaliaLezen 
AWS Resilience Hub: Keep Workload Scope and Recovery Targets Aligned
A practical guide to the September 2026 Resilience Hub features: scope EKS services with labels, use dependency discovery and insights to find hidden coupling, classify hard and soft dependencies, and share one resilience policy across AWS accounts.
Observability Is Not Optional: Make It a Business Standard
Why fragmented monitoring creates blind spots, duplicate spend, and slow incidents — and how to make centralised observability a non-negotiable company standard.
Balinder WaliaLezen 
WSL Vault for Compliance: One Tenant Never Opens Another’s Secrets
How WSL Vault keeps app, team, and environment tenants cryptographically isolated — so a stolen root-style token cannot empty the estate — and why dual-tenant control beats secrets sprawl.
Balinder WaliaLezen 
Workstation AI Shop: Promoting the AI Sales Storefront Through int → test → acc → prod
Workstation AI Shop sells GPU machines with a fully autonomous AI Sales Agent that configures the basket. See how Ring Promoter moves each build through int → test → acc → prod — with Orbit screenshots release engineers and stakeholders share.
Balinder WaliaLezen 
Ring Promoter vs Argo CD, Kargo and CI: Which Tool Answers Which Release Question
Argo CD syncs, CI builds, Ring Promoter promotes. A fact-checked look at the comparison, its honest limits, which tool fits, and how to record the choice as an ADR.
Balinder WaliaLezen 
Stop met betalen voor inactieve CI: GitLab Runners op Kubernetes
De meeste teams betalen voor CI alsof elke nacht nog steeds maandagochtend is. GitLab Runners op Kubernetes keren dat om: tijdelijke job-pods, schaal op onder belasting, schaal af wanneer het rustig is.
Balinder WaliaLezen 
How We Protected the Payments Secure FinTech App with WSLProxy Edge, an Open-Source API Gateway
How we put WSLProxy Edge, our open-source API gateway, in front of Payments Secure (payments-secure.fictionally.org): real-IP checks, scanner detection, login throttling and audit logs, rolled out safely in audit mode.
Balinder WaliaLezen