Notes on platform engineering, Kubernetes, GitOps and production operations. Configuration, failure modes and the reasoning behind them.https://chlebowski.it/enhttps://chlebowski.it/blog/deploying-glance-self-hosted-dashboard/https://chlebowski.it/blog/deploying-glance-self-hosted-dashboard/A practical Glance deployment behind Nginx Proxy Manager, with Docker and server metrics, service monitoring, API widgets and secrets kept out of YAML.Mon, 27 Jul 2026 00:00:00 GMTHomelabhttps://chlebowski.it/blog/restart-globalprotect-macos/https://chlebowski.it/blog/restart-globalprotect-macos/When the VPN agent wedges and breaks DNS or routing, launchctl restarts it in seconds. The bootout and bootstrap commands, and why it sometimes comes straight back.Wed, 22 Jul 2026 00:00:00 GMTmacOShttps://chlebowski.it/blog/argocd-entra-oidc/https://chlebowski.it/blog/argocd-entra-oidc/Configuring Entra ID OIDC through the argo-cd Helm chart, mapping groups to roles, and the group overage claim that breaks it in larger tenants.Tue, 21 Jul 2026 00:00:00 GMTSecurityhttps://chlebowski.it/blog/zero-downtime-kubernetes-upgrades/https://chlebowski.it/blog/zero-downtime-kubernetes-upgrades/Rolling clusters forward one node at a time without dropping traffic: surge capacity, PodDisruptionBudgets, and the pre-flight checks that catch problems first.Sun, 12 Jul 2026 00:00:00 GMTKuberneteshttps://chlebowski.it/blog/argo-cd-vs-flux-2026/https://chlebowski.it/blog/argo-cd-vs-flux-2026/Both reconcile Git into a cluster reliably. The differences that matter are operational: Helm semantics, tenancy model and who needs access.Thu, 18 Jun 2026 00:00:00 GMTGitOps