https://eljirari.me/tags/platform-engineering/Recent content in platform-engineering on Youssef El JirariHugo -- gohugo.ioenhttps://eljirari.me/posts/kubernetes-cni/Mon, 01 Jan 0001 00:00:00 +0000https://eljirari.me/posts/kubernetes-cni/When people compare Kubernetes CNIs, the discussion quickly becomes a feature matrix. Does it support NetworkPolicy? BGP? eBPF? Encryption? Observability? Those are useful questions, but I think they miss the first one: What networking problem does this cluster actually need the CNI to solve? A three-node K3s cluster and a large multi-tenant Kubernetes platform do not need the same network architecture. Start with what the CNI does A pod needs an IP address and it needs to communicate with other pods.https://eljirari.me/posts/azure-landing-zones/Mon, 01 Jan 0001 00:00:00 +0000https://eljirari.me/posts/azure-landing-zones/An Azure landing zone is sometimes presented as a collection of subscriptions, policies and management groups that you deploy before application teams arrive. That is technically true, but it undersells the problem. The real objective is to make it possible for many teams to use Azure independently without every team having to redesign identity, networking, security, governance and operations from zero. Why a landing zone appears With one subscription and one team, governance can be informal.