Skip to content
edixos
Book a consultation

Field notes

The Edixos engineering blog

Hard-won lessons on Kubernetes, platform engineering, GitOps, and running cloud-native infrastructure in production.

Filter by topic

19 articles

  1. provider-ovh 2.18.0: FileShare access rules become their own resource

    provider-ovh 2.18.0 adds FileShareACL and removes inline accessRules from FileShare — silently pruned, not rejected, so unchanged manifests stop managing rules.

    4 min

  2. provider-ovh 2.17.0: full OVHcloud schema coverage for Crossplane

    provider-ovh 2.17.0 exposes every OVHcloud Terraform resource as a Crossplane CRD: 335 CRDs, 31 new kinds, and four removed database engines to migrate first.

    5 min

  3. Integrator, consultancy, hire or freelancer: what each model really costs

    Time and materials, fixed scope, hiring or a freelancer: what each really costs once elapsed time is counted, and when the large integrator is still right.

    7 min

  4. Kubernetes expertise: how to choose a consulting partner in 2026

    Five kinds of Kubernetes provider sell the same promise without selling the same thing. How to pick the right model, the seven questions to ask, the red flags.

    9 min

  5. Kubernetes FinOps: A Field Guide to Cutting Cluster Cost Without Breaking Prod

    Cut Kubernetes cluster cost without breaking production: rightsizing, spot capacity, governance as code, and the cost metrics that actually matter.

    7 min

  6. AI SRE Agents: Autonomous Kubernetes Operations That Won't Wreck Prod

    The senior pattern for autonomous incident response: LLM reasoning bounded by GitOps guardrails, with no drift in production.

    6 min

  7. Local Kubernetes Development with Tilt: Fast Inner Loop

    Run a multi-service stack on a real local Kubernetes cluster with Tilt, Kind, and ctlptl. Live Update, per-service Tiltfiles, Delve debugging, and no Bitnami.

    10 min

  8. Bare-Metal Kubernetes with Talos: Provisioning War Stories

    Talos Linux (10.7k GitHub stars) meets bare-metal Kubernetes: honest provisioning war stories on iPXE, kexec, rescue mode, disk wipes, and Pulumi gotchas.

    11 min

  9. Fleet-Scale Kubernetes Addon Management with Sveltos

    Staged addon promotion across cluster fleets with Sveltos. 48% of teams expect >50% cluster growth in a year (Portainer 2026). Here is the full lifecycle.

    12 min

  10. Kubernetes Controllers: The Cache-Staleness Bug at Scale

    Kubernetes production use hit 82% in 2025. Here is how step-based reconcilers and informer-cache staleness fixes keep custom controllers reliable at scale.

    12 min

  11. Just-in-Time Privileged Access for Multi-Tenant Kubernetes

    Unit 42 found 99% of cloud identities are over-permissive. A field-tested reference architecture for just-in-time privileged access on shared Kubernetes.

    14 min

  12. GKE Dataplane V2: Stale eBPF Blocks Deleted NetworkPolicy

    On GKE Dataplane V2, deleting a NetworkPolicy left running pods blocked by stale eBPF state. A hands-on field postmortem, with Cilium adoption up 47% in 2025.

    12 min

  13. Private Service Connect Multi-Gateway Pattern on GCP

    Private Service Connect traffic grew 4x in 2025. A field-tested GCP pattern for exposing Kubernetes services privately at enterprise scale with Envoy Gateway.

    13 min

  14. Deterministic IPAM for Multi-Tenant Kubernetes on GKE

    GKE rounds every node up to a /24, so a /20 pod range caps a cluster at 16 nodes. A deterministic SubnetPool playbook to escape multi-tenant VPC exhaustion.

    11 min

  15. AI Agents as Code Reviewers: Give Them the Design Doc

    Over 1 in 5 GitHub code reviews now involve Copilot. We gave an AI agent our design docs to grade real pull requests. Here is what it caught, and missed.

    9 min

  16. Crossplane and OVHcloud: A provider-ovh Step-by-Step Guide

    Provision OVHcloud as Kubernetes CRDs with Crossplane and Edixos' provider-ovh: install on kind, discover resources, wire credentials, deploy a managed cluster.

    11 min

  17. How to Build Kubernetes as a Service with Custom Controllers

    A field-tested blueprint for Kubernetes as a Service: a management cluster as control plane, KRM CRDs, custom Go controllers, Crossplane, and multi-tenant RBAC.

    13 min

  18. Why Terraform Falls Short for Platform Engineering (and Kubernetes Wins)

    Terraform provisions, but it can't run a self-service platform. Why Kubernetes, KRM, and CRDs replace TicketOps with API-first, self-healing control planes.

    6 min

  19. Our Kubernetes Journey: 10 Years Building Cloud-Native Platforms

    How Edixos went from Kubernetes 1.2 in production (2015) to multi-tenant platforms running 1,000+ apps — with custom controllers, GitOps, and Crossplane.

    4 min