engineering software for 20+ years
The reason why this article exists is to provide a tangible proof that LLMs can support the human in writing valuable software. Because everyone says they are doing it but nobody shows what they are doing. The article is fallout from an exercise in performing chat session semantic analysis to find out when the LLM was corrected by the human operator.
LLMs, Kubernetes, and cool stuff what not
happy fork, happy life
when one upgrades Istio and sees such a message
setting up a proof-of-concept connectivity with a VM in an Istio mesh
build the latest and greatest 2.19.0.0 in Docker
because life is too short to struggle with YAML on the command line
boost your productivity when working with WSL2 in Windows Terminal
cert-manager ACME Let's Encrypt with working catch-all HTTPS redirect, the how and the why
On 5th of July I have made a number of changes to the privacy settings on this website. Without going too much into detail about reasons: This website no longer uses Google Analytics. Theme fonts are no longer loaded from Google Fonts service. They’re now served from the gruchalski.com domain. If you’d like to do the same, here’s a good place to start:…
Regardless of the technology, most general-purpose software is easy. There’s a set of requirements. Someone implements said requirements. Code gets tested, problems are fixed, and code issues are resolved. Code is promoted to production. New requirements come in, and the process repeats. Dependencies change. Someone tests them and releases a new version. Like anything else critical to the…
Hanging the towel on the Zanzibar work
I’ve been working my way through The Art of Prolog . The book is a fantastic eye-opener. The first five chapters are very science-heavy as they cover all Prolog principles. What follows are the twenty or so delightful, short, but on-subject chapters explaining the Prolog language in detail. I have a couple of chapters left to go through. I am looking forward to the compiler example from…
Back in May, I looked at an implementation of Zanzibar-style ACLs in Open Policy Agent Rego 1 . I’m revisiting that problem while learning Prolog, another language from my never-ending to-learn list . There are some similarities to the previous article, but I’m taking the problem further: I’m adding permissions inheritance from anywhere within the filesystem tree.
An exercise on its own rather than a conscious future career choice. This is a short sentence describing my recent venture into Fortran. The language has been on my to learn list for many, many years, but Fortran requires a particular type of problem. The first version of Fortran, the first high-level programming language, appeared in 1957. Fortran is still in active development, it has seen…
Six years ago, during my short stint at The Weather Company, I was on the lookout for a programming language that would let me build software with no dependency on the runtime. There were two obvious candidates: Go and Rust. For many reasons, Rust had me a little bit anxious. The borrow checker, which I just could not fully understand back in the day, was the main sticking point. There were others…
I’ve been looking into upgrading Istio using canary upgrades. Canary upgrades let me test a new version of Istio by migrating part of the workloads to the new version and observing the impact of the change. If anything goes wrong, I can roll back to the old version. Old and new Istio versions run side-by-side until it’s verified that pods work fine. When everything is okay, I can…
reactive IAM with Keycloak event listeners
what does it take to convert Zanzibar ACLs to OPA Rego?
because every tutorial on the internet misses that one percent...
because an _and_ isn't always the end of it
an overview of the all-new CDC SDK beta
real-time systems + distributed SQL
when the roadmap isn't enough
I wanted to look into Keycloak.X for quite a while. Keycloak.X is a lighter, faster, easier, more scalable, more cloud-native solution than the—now legacy—WildFly based Keycloak. Keycloak.X is now officially known as Keycloak 17.0.0 , the first official Quarkus-based version. It’s been released a few days ago 1 and so it was the right time to look at it.
automate all the database things
with great power comes great responsibility
I know there's no money in writing technical books but money isn't the driver for me here
a brief intro to postgres_fdw with YugabyteDB
keep the postgres data across container restarts
create a YugabyteDB Docker image with custom uid / gid
After some insightful weeks of diving into the Ory platform, I am reverting back to Keycloak to investigate some other of its interesting features. The last few weeks spent in the Ory-land were enlightening. One of my previous post, Introduction to Keycloak Authorization Services 1 , gets about 20 daily reads but authorization services isn’t the only awesome thing about Keycloak.
20th of February, 2022: I have published a version of this article adapted for Keycloak 17: Keycloak 17.0.0 with TLS in Docker compose behind Envoy proxy . The 24 hours of Nürburgring race was just red flagged for the remainder of the night due to the fog. That’s a perfect opportunity to add TLS to my Keycloak Docker Compose setup described previously here 1 .
LEGO client with Docker and AWS Route53 DNS
It's like PostgreSQL with the storage part ripped out and RAFT plugged in
S3, Azure Blob, Google Storage and Minio, they're all a K/V storage at the core
I must admin—I struggled understanding Oathkeeper. Looking back, I think the reason was, I compared it one for one to things like Traefik or Envoy. Turns out, Oathkeeper does not necessarily intend replacing a reverse proxy, although many people probably use it as such.
More thoughts on RBAC with Keto 0.6
Building bare bones RBAC with Keto 0.6
Testing software against real system is the ultimate testing
The goal has been reached, I have a Consul cluster running
First look at ORY Keto
Thought on the ORY platform and a reference Docker compose
An end of an era
They are awesome but could be better
Well, sort of...
KIP-500 is implemented and Kafka is now completely standalone
There's a certificate authority right in firebuild
Manage firecracker root file systems and VMMs
Read this first before reading about firebuild