Build securely with Github Actions and ECR using OpenID Connect
Intro Most companies and projects these days use some form of CI/CD to automatically build artifacts like binaries or container images when…
Your Site's RSS Feed
Outside the box, no one can hear you scream.
Latest posts
Kubernetes at Home: Hardware
Diagram of Rack Disclaimer: While writing this article, I realize I could use Affiliate Links to the stuff I bought. So I gave it a try…
Kubernetes Native CI With Argo
Introduction As I discussed in Why Kubernetes at small scale, Kubernetes is more an infrastructure framework than just a container scheduler…
Running Kubernetes on OpenWrt
Why.. Me, better with clean software than clean hardware As you might know, I’m living in Berlin, Germany. Maybe you also know that our…
Why Kubernetes at small scale?
Google Scale Wannabes I’ve frequently hear people say something like this: The number of people who adopt complicated stuff like Kubernetes…
Run Prometheus Blackbox Exporter as Lambda
Introduction When providing any service to a global customer base, you are probably interested in measuring the performance and…
fluentd for data warehousing with athena
Or how I replaced AWS Firehose by fluentd instances and saved >80% EC2 traffic costs. Using AWS Kinesis Firehose koko is one of my current…
Found severe Azure Kubernetes Bug but ain't even got a lousy T-Shirt
About half a year ago at one of my last gigs, I built a Kubernetes Cluster on Azure. On Azure, the Kubernetes Volume Claims are commonly…
kubecfn: Cloudformation installer for reasonably secure multi-master Kubernetes Cluster
Introduction These days I’m helping koko to build their Kubernetes infrastructure on AWS. Initially, we used kops to deploy the cluster but…
No title
Impressum Angaben gemäß § 5 TMG: Johannes Ziemke Mittenwalder Str. 24 10961 Berlin, Germany E-Mail: inquiry+impressum@5pi.de Umsatzsteuer…
Production Grade Kubernetes
About a year ago I blogged about how to build a $15 Production Kubernetes Cluster on DigitalOcean and submitted it to Hacker News. HN being…
Use Prometheus Vector Matching to get Kubernetes Utilization across any Pod Label
Prometheus was designed for dynamic environments like Kubernetes. Its powerful service discovery and query language allows you to answer all…
Frontend Testing Zoo - Or, Nightwatch without Selenium
What I always find hardest to figure it when it comes to unknown systems, it’s ‘how things fit together’. These project might have great…
$15 Production Kubernetes Cluster on DigitalOcean
Four sweets or production Kubernetes for a month Introduction As you might already know, I’m into containers, static configuration and self…
The Future: Fabrication Cloud
The Cloud Given the ubiquity of “The Cloud” even in mainstream media, you might expect the readers of this blog know what it means. From my…
The Future
Since I was a kid, I was fascinated with sci-fi and today I’m thrilled to live in the unique age of unprecedenced velocity of invention. A…
Uploaded thousands of Photos to Google Photos, here are the best classification mistakes
I’m a lazy person who never took time to organize their photos so I got really excited about Google Photos and just finished uploading all…
Don't manage configuration unless you have to.
At my first job, there was no code driven infrastructure at all. A nightmare from today’s perspective. The next job, there were some perl…
CloudFormation driven Consul in AutoScalingGroup
CloudFormation templates are a great way to manage AWS resources. All resources for a stack are configured in a json and CloudFormation…
Scope and Ownership in Tech Companies
My first job was a typical corporate job at a financial service provider after which I worked at large hosting company before joining…
Building AWS AMIs from Scratch for Immutable Infrastructures
Why? I’m a big fan of what some might call “immutable infrastructures” which, to me, boils down to manging complexity by isolating change to…
Prometheus on Raspberry Pi
Prometheus Prometheus is a new open-source service monitoring system and time series database written in Go. Check out the announcement and…
Find GHOSTs in your Docker images
A severe security vulnerability in glibc < 2.18, nicknamed GHOST was just reported. Here is a handy one-liner (Debian/Ubuntu only though) to…
Monitor Docker Containers with Prometheus
Monitoring Docker Running all your services in containers makes it possible to get in-depth resource and performance characteristics, since…
Containerize your Infrastructure
The Hype Everyone is talking about containers. Containers are a great way to bundle your application with all dependencies and isolate it…
Using docker run --net=container:XX ... to debug network issues
Sharing the network namespace with a existing container is a less known feature of Docker. If you run: Your container runs in the same…
Running a highly available load balancer on Docker
For quite some time I felt like I should do a blog - again. Instead of spending time writting rants on facebook or commenting other peoples…
Hire me
Did you know? You can hire me! I grew infrastructures from a handful engineers and thousands of users to platforms with hundreds of millions…
Styla: Content Experience Engine
Advising a content commerce startup on Docker migration, AWS deployment and DevOps strategy. Debugging a ELB/ECS based pilot deployment. Implementation of and migration to lambda based machine learning pipeline.
Koko: AI-Powered Community Moderation
From legacy infrastructure to over 100 million content moderation decisions per day and acquired by Airbnb. Building an agile cloud native infrastructure for a high velocity AI based content moderation startup.