Skip to main content
$ kubectl get deployments --all-namespaces

Work.

Shipped, in flight and planned. Nothing is marked done until it is a public repo with a write-up.

01 — deployments

Rolling out.

  1. 01
    deployment/carlosposada-dev

    carlosposada.dev

    This site. Astro 5 static build on Cloudflare Pages, SSR Workers at the edge for the contact form and newsletter, a Markdown blog with build-time syntax highlighting, RSS and Schema.org.

    Astro · Cloudflare Workers · Resend
    ● shipped live
  2. 02
    deployment/aws-terraform-baseline

    AWS Terraform baseline

    The base every lab starts from: remote state, GitHub OIDC instead of long-lived keys, a VPC module and budget guardrails.

    Terraform · AWS · GitHub OIDC
    ● building · in progress no public repo yet
  3. 03
    deployment/iac-labs-ecs-eks

    IaC labs: ECS and EKS

    Reproducible Terraform labs on AWS: ECS Fargate, and EKS across managed node groups, self-managed nodes and Auto Mode, plus ArgoCD, Kyverno and Istio. One public repo and write-up each.

    Terraform · ECS · EKS · ArgoCD
    ● building · in progress no public repo yet
02 — roadmap · $ terraform plan -target=labs

11 labs, built in order.

Each one becomes a public repo — make up, make down, a cost box and an honest "what broke" section — and one to three posts. 0 of 11 shipped so far.

  1. R1 aws-tf-foundation Remote state, GitHub OIDC role, VPC module, budget alarm, tagging standard. Every later repo consumes it. building
  2. R2 aws-ecs-fargate-platform ALB + ECS Fargate + ECR, autoscaling, Service Connect, Fargate Spot, blue/green via CodeDeploy. planned
  3. R3 aws-eks-managed-nodegroups EKS baseline: managed node groups, Pod Identity, core add-ons, Load Balancer Controller, external-dns, cert-manager. planned
  4. R4 aws-eks-self-managed-nodes Launch templates, Bottlerocket, upgrade and drain strategy, Cluster Autoscaler vs Karpenter. planned
  5. R5 aws-eks-auto-mode What EKS Auto Mode takes over, what you lose in control, and the real cost delta. planned
  6. R6 eks-gitops-argocd ArgoCD bootstrapped from Terraform, app-of-apps, ApplicationSets across three clusters. planned
  7. R7 eks-policy-kyverno Pod Security baseline, required labels, registry allowlist, kyverno test in CI. planned
  8. R8 eks-istio-ambient Istio ambient vs sidecar, Gateway API, mTLS, canary releases with Argo Rollouts. planned
  9. R9 eks-observability Prometheus or AMP/AMG, OpenTelemetry Collector, Loki, golden-signal dashboards and alerts. planned
  10. R10 platform-crossplane A Crossplane Composition that gives developers a self-service app environment. planned
  11. R11 platform-backstage A Backstage catalog over R1–R10 and a template that scaffolds repo → ArgoCD app → Crossplane claim. planned
service/contact ● healthy

Have infrastructure to build?

Start a conversation
[email protected]
Response time is typically within 24 hours.