Secrets Belong in Git. Plaintext Does Not.
Every GitOps rollout stalls on one question: where do the secrets go? A practical guide to SOPS and AGE encryption in Ankra, so credentials live in Git safely and AI-generated config never leaks a key.
Mattias writes about GitOps, security, and platform architecture - from draft-first AI workflows to the engineering behind Ankra's native deployment engine.
LinkedInEvery GitOps rollout stalls on one question: where do the secrets go? A practical guide to SOPS and AGE encryption in Ankra, so credentials live in Git safely and AI-generated config never leaks a key.
'Don't use Kubernetes until you have a platform team' was good advice in 2019. The premises changed. What a two-to-six person company should set up in week one, what to deliberately skip, and what it actually costs: about zero.
Half of all clusters are running an ingress controller that stopped receiving security patches in March. Meanwhile, teams debate service meshes. The five findings that show up in every real cluster security review, each with the incident that proves it and the fix.
New Ankra clusters no longer run ArgoCD. Here is the engineering story of the native deployment engine: why we built it, how the reconcile loop works, what the migration does to your live resources (nothing), and what we have not finished yet.
AI agents have wiped real production databases this year. Replit's went down during a code freeze, Cursor's took nine seconds via Terraform. Here's how Ankra's draft-first, GitOps-backed AI gives teams a senior DevOps agent without that failure mode.
Master the essential strategies and patterns for running reliable, scalable applications on Kubernetes in production. Learn from real-world examples and avoid common pitfalls.