By Bhawani Singh10 min read
Running macOS Builds from Tekton 1 / 7Connecting a Mac build host to a private EKS cluster
A private EKS cluster drives macOS builds on a local Mac without inbound access, using an outbound SSM tunnel and disposable VMs.
Tag · 19 posts
kubernetes
By Bhawani Singh7 min read
A circuit breaker for Kubernetes admission webhooks
A Go controller switches an approved Kubernetes webhook to Ignore after repeated failures and restores its policy after recovery. Admission continues, but requests still pay the webhook timeout.
By Bhawani Singh6 min read
Pod-level resources for Tekton TaskRuns
A mutating webhook gives a Tekton build step and Docker-in-Docker sidecar one Pod-level resource budget, then verifies the limits in node cgroups.
By Bhawani Singh9 min read
A Kube-Scheduler Plugin for Tekton Capacity Reservation
An out-of-tree kube-scheduler plugin that reserves node capacity across a Tekton PipelineRun's full lifetime, closing a gap none of Tekton's own coschedule modes cover on their own.
By Bhawani Singh12 min read
Pod Startup Forensics 7 / 7Pod Startup Forensics: Closure and What's Next
Closing the series: what six parts proved, the two scaling questions still untested, and the remaining exec-probe and production-kernel boundaries.
By Bhawani Singh7 min read
Pod Startup Forensics 6 / 7Pod Startup Forensics: Closing the Gap
Correlating socket syscalls and kubelet probe attempts into the merged timeline, then fixing a real cgroup-attribution bug that left most of those events unresolved.