Skip to main content
Skip to navigation
Skip to footerLisandro Fernández RochaHomeBlogProjectsContactkubernetesKMQ: WAL retention-by-consumption, a timecode bus and a tape feedSelf-rotation inside the single writer. A cut that always fires and a reclaim gated on consumption. The same retention serves an SMPTE timecode bus and a verifiable tape-archive feed.Last modified: agoPublished on: Pulling container images on a node that has no internetA kubernetes worker on a default-deny segment cannot reach any upstream registry. All pulls go through a private OCI registry on the same segment, pre-populated from a control plane that can reach the outside. What it is, what each component does, and the four dead ends on the way.Last modified: agoPublished on: From push-and-pray to complete feedback loop: dual sidecar ACK and TLSHow a second ACK sidecar closes the consumer-processing gap and how dual-stack TLS secures every broker endpoint without touching the hot path.Last modified: agoPublished on: Closing the delivery gap: an out-of-band acknowledgment sidecar and retry loopHow a tiny AWK sidecar turns the append log into a pull-based durability contract. A retry loop proves zero-loss delivery across pod restarts.Last modified: agoPublished on: KMQ: four scenarios, four passes and the block policy that closes the gapA Pub/Sub-shaped pipeline assembled from FIFOs, gawk and Kubernetes primitives. Four scenarios. Four passes. A ring-buffer policy that makes the difference.Last modified: agoPublished on: A message broker from FIFOs and awk: four scenarios, two passes, two failuresA Pub/Sub-shaped pipeline assembled from FIFOs, gawk and Kubernetes primitives. Four scenarios. Two clean passes. Two failures with measured boundaries.Last modified: agoPublished on: Container Oriented Programming (COP)Last modified: agoPublished on: DevSecOps Supply Chain SecurityLast modified: agoPublished on:
Last modified: ago
Published on: