Secrets Management in 2026 — Vault, External Secrets Operator, and the Patterns
How to manage secrets in production in 2026. Vault, ESO, cloud secret managers, sealed secrets, rotation, audit, and the developer-friendly patterns.
How to manage secrets in production in 2026. Vault, ESO, cloud secret managers, sealed secrets, rotation, audit, and the developer-friendly patterns.
How to deploy without downtime in 2026. Blue/green, canary, rolling, feature flags, db migrations the right way, and the patterns that survive Friday afternoons.
Practical incident response in 2026. Severity levels, IC role, comms cadence, runbooks, blameless postmortems, action item tracking, and the cultural shifts that produce real learning.
Where Kubernetes stands in 2026: eBPF-default networking, Gateway API, sidecarless meshes, KEDA, Argo, and the operational realities you’ll face.
Productivity Rust tooling for 2026. cargo, clippy, fmt, workspaces, nextest, watch, and the strict-lints that catch bugs in CI.
Production HA for Postgres in 2026. Streaming vs logical replication, Patroni vs pg_auto_failover vs Stolon, RPO/RTO tradeoffs, and the patterns that keep a primary alive.
How to ship safely with feature flags in 2026. The OpenFeature standard, picking a vendor, the patterns (boolean flags, percentage rollouts, targeting), and the costs of doing it wrong.
Picking a reproducible dev-environment tool in 2026. Nix flakes (deepest), Devbox (Nix made friendly), mise (lightweight version manager), devcontainers (Docker-based), and which fits which team.
Picking an IaC tool in 2026. Pulumi (real programming languages), Terraform (HashiCorp’s BSL-licensed original), OpenTofu (open-source fork). Tradeoffs, ecosystem, state, and how to migrate.
Why eBPF won the cloud-native networking layer in 2026. Cilium architecture, sidecarless service mesh, network policy at L7, mTLS, observability with Hubble + Tetragon + Pixie, and the migration path from Istio.