Skip to content
edixos
Book a consultation

Field notes

The Edixos engineering blog

Hard-won lessons on Kubernetes, platform engineering, GitOps, and running cloud-native infrastructure in production.

Filter by topic

21 articles

  1. provider-ovh 2.23.0: OVHcloud load balancers, instance snapshots and 14 more resources

    provider-ovh 2.23.0 adds 16 OVHcloud resources, including the new load balancer API and instance snapshots, with no breaking changes for manifests.

    9 min

  2. provider-ovh 2.19.1: we removed the Terraform CLI from the provider

    provider-ovh 2.19.1 reconciles every OVHcloud resource in-process: no terraform binary, no workspace on disk, but breaking CRD changes under a patch number.

    10 min

  3. provider-ovh 2.18.0: FileShare access rules become their own resource

    provider-ovh 2.18.0 adds FileShareACL and removes inline accessRules from FileShare — silently pruned, not rejected, so unchanged manifests stop managing rules.

    4 min

  4. provider-ovh 2.17.0: full OVHcloud schema coverage for Crossplane

    provider-ovh 2.17.0 exposes every OVHcloud Terraform resource as a Crossplane CRD: 335 CRDs, 31 new kinds, and four removed database engines to migrate first.

    5 min

  5. Integrator, consultancy, hire or freelancer: what each model really costs

    Time and materials, fixed scope, hiring or a freelancer: what each really costs once elapsed time is counted, and when the large integrator is still right.

    7 min

  6. Kubernetes expertise: how to choose a consulting partner in 2026

    Five kinds of Kubernetes provider sell the same promise without selling the same thing. How to pick the right model, the seven questions to ask, the red flags.

    9 min

  7. Kubernetes FinOps: A Field Guide to Cutting Cluster Cost Without Breaking Prod

    Cut Kubernetes cluster cost without breaking production: rightsizing, spot capacity, governance as code, and the cost metrics that actually matter.

    7 min

  8. AI SRE Agents: Autonomous Kubernetes Operations That Won't Wreck Prod

    The senior pattern for autonomous incident response: LLM reasoning bounded by GitOps guardrails, with no drift in production.

    6 min

  9. Local Kubernetes Development with Tilt: Fast Inner Loop

    Run a multi-service stack on a real local Kubernetes cluster with Tilt, Kind, and ctlptl. Live Update, per-service Tiltfiles, Delve debugging, and no Bitnami.

    10 min

  10. Bare-Metal Kubernetes with Talos: Provisioning War Stories

    Talos Linux (10.7k GitHub stars) meets bare-metal Kubernetes: honest provisioning war stories on iPXE, kexec, rescue mode, disk wipes, and Pulumi gotchas.

    11 min

  11. Fleet-Scale Kubernetes Addon Management with Sveltos

    Staged addon promotion across cluster fleets with Sveltos. 48% of teams expect >50% cluster growth in a year (Portainer 2026). Here is the full lifecycle.

    12 min

  12. Kubernetes Controllers: The Cache-Staleness Bug at Scale

    Kubernetes production use hit 82% in 2025. Here is how step-based reconcilers and informer-cache staleness fixes keep custom controllers reliable at scale.

    12 min

  13. Just-in-Time Privileged Access for Multi-Tenant Kubernetes

    Unit 42 found 99% of cloud identities are over-permissive. A field-tested reference architecture for just-in-time privileged access on shared Kubernetes.

    14 min

  14. GKE Dataplane V2: Stale eBPF Blocks Deleted NetworkPolicy

    On GKE Dataplane V2, deleting a NetworkPolicy left running pods blocked by stale eBPF state. A hands-on field postmortem, with Cilium adoption up 47% in 2025.

    12 min

  15. Private Service Connect Multi-Gateway Pattern on GCP

    Private Service Connect traffic grew 4x in 2025. A field-tested GCP pattern for exposing Kubernetes services privately at enterprise scale with Envoy Gateway.

    13 min

  16. Deterministic IPAM for Multi-Tenant Kubernetes on GKE

    GKE rounds every node up to a /24, so a /20 pod range caps a cluster at 16 nodes. A deterministic SubnetPool playbook to escape multi-tenant VPC exhaustion.

    11 min

  17. AI Agents as Code Reviewers: Give Them the Design Doc

    Over 1 in 5 GitHub code reviews now involve Copilot. We gave an AI agent our design docs to grade real pull requests. Here is what it caught, and missed.

    9 min

  18. Crossplane and OVHcloud: A provider-ovh Step-by-Step Guide

    Provision OVHcloud as Kubernetes CRDs with Crossplane and Edixos' provider-ovh: install on kind, discover resources, wire credentials, deploy a managed cluster.

    11 min

  19. How to Build Kubernetes as a Service with Custom Controllers

    A field-tested blueprint for Kubernetes as a Service: a management cluster as control plane, KRM CRDs, custom Go controllers, Crossplane, and multi-tenant RBAC.

    13 min

  20. Why Terraform Falls Short for Platform Engineering (and Kubernetes Wins)

    Terraform provisions, but it can't run a self-service platform. Why Kubernetes, KRM, and CRDs replace TicketOps with API-first, self-healing control planes.

    6 min

  21. Our Kubernetes Journey: 10 Years Building Cloud-Native Platforms

    How Edixos went from Kubernetes 1.2 in production (2015) to multi-tenant platforms running 1,000+ apps — with custom controllers, GitOps, and Crossplane.

    4 min