https://didibe.dev/blog Notes on Kubernetes, platform engineering, and cloud infrastructure. en https://didibe.dev/blog/trivy-supply-chain-attack https://didibe.dev/blog/trivy-supply-chain-attack Sun, 05 Jul 2026 00:00:00 GMT Trivy scans your software for security holes. In March 2026, attackers hacked Trivy itself, hunted for Kubernetes kubeconfig files in CI/CD, and used them to break into clusters. Here is the simple version. https://didibe.dev/blog/kserve-inference-made-simple https://didibe.dev/blog/kserve-inference-made-simple Sat, 04 Jul 2026 00:00:00 GMT Model serving on Kubernetes is its own problem - autoscaling, rollouts, HTTP glue. KServe is the layer that turns model artifacts into a production API the Kubernetes way. https://didibe.dev/blog/virtual-clusters-explained https://didibe.dev/blog/virtual-clusters-explained Fri, 03 Jul 2026 00:00:00 GMT Every platform team faces the same tenancy dilemma. A cluster per team is safe but expensive. A namespace per team is cheap but leaky. Virtual clusters are the middle path, the isolation of a real cluster at the cost of a namespace. https://didibe.dev/blog/idp-approaches-compared https://didibe.dev/blog/idp-approaches-compared Fri, 03 Jul 2026 00:00:00 GMT Ticket queues, golden modules, GitOps, and full self-service portals. I've built versions of each. Here's what each one buys you, and what it quietly costs. https://didibe.dev/blog/kubernetes-for-dummies https://didibe.dev/blog/kubernetes-for-dummies Thu, 02 Jul 2026 00:00:00 GMT Kubernetes stopped being scary the day I realized it's not a machine you command. It's a pile of objects, a handful of tireless robots, and one idea repeated forever: the reconciliation loop.