Removing kubectl from CI Pipelines
Why CI pipelines shouldn't treat kubectl as a deployment tool, and how to replace it with a safer, more repeatable workflow.
gitopsStart Here
New here? Start with these articles to get a sense of my approach and the topics I cover.
Terraform Should Not Deploy Into EKS. ArgoCD Should.
Where the AWS API boundary ends and the Kubernetes API boundary begins, and why one cluster should have exactly one declarative writer.
terraformAI Agents Belong in CI/CD. Not in the Deploy Step.
Where the line goes between an agent that reads your pipeline and one that can deploy it, and why untrusted input plus privileged credentials is the whole problem.
aiAgents Can Talk, But They Can't Commit
The agent protocol stack standardizes speech, not commitment. What happens when step four fails and steps one through three already happened, and the architecture that fixes it.
agentsWant to read all the articles? Go to the full archive →