Lab article · ~14 min read

DevOps & Platform Engineering: Tekton & ArgoCD

GitOps for state, Tekton for events. Pipeline shape, environment promotion, secrets, image signing & SBOM, audit and compliance — the platform patterns for regulated integration delivery.

Tekton ArgoCD GitOps OpenShift Vault
Read article →
Lab article · ~14 min read

Internal Developer Platform for Integration Teams: Backstage, Golden Paths & Scaffolders

Backstage as the developer portal, golden-path scaffolders that generate production-ready integration skeletons, and Crossplane infrastructure provisioning — how to give integration teams self-service without a snowflake per team.

Backstage Crossplane OpenShift Tekton Helm
Read article →
Lab article · ~14 min read

Observability Pipeline Architecture: OTel, Prometheus, Loki & Tempo

OpenTelemetry collectors, Prometheus for metrics, Loki for logs, Tempo for distributed traces, and Grafana as the unified pane — an end-to-end observability platform for an integration estate at scale in regulated financial services.

OpenTelemetry Prometheus Loki Tempo Grafana
Read article →
Lab article · ~14 min read

Vault Secrets Management: Dynamic Secrets, ExternalSecrets & cert-manager on OpenShift

HashiCorp Vault HCL role and policy, ExternalSecret CR wiring into OpenShift, dynamic Oracle and DB2 credential leases, cert-manager Vault issuer for workload certificates, and the audit log patterns that satisfy a SAMA secrets governance examination.

HashiCorp Vault ExternalSecrets cert-manager OpenShift SAMA Compliance
Read article →
Lab article · ~14 min read

Multi-Cluster GitOps: ArgoCD ApplicationSets, Hub-Spoke Topology & AppProject Governance

ArgoCD ApplicationSets with Cluster and Matrix generators, hub-spoke multi-cluster topology, AppProject YAML for team boundary enforcement, progressive delivery with Argo Rollouts, and the deployment governance model that scales across a regulated financial services estate.

ArgoCD ApplicationSets GitOps Argo Rollouts OpenShift
Read article →
Lab article · ~14 min read

Progressive Delivery: Flagger, Argo Rollouts & Feature Flags for Regulated Financial Services

Canary release automation with Flagger and Argo Rollouts, Prometheus metric-gated analysis templates, Unleash feature flags with the OpenFeature SDK, SAMA TRM change management alignment, and the rollback automation that makes progressive delivery audit-safe in a KSA bank.

Argo Rollouts Flagger Istio Unleash OpenFeature
Read article →