On software, systems, and the occasional finance tooling sidequest.
Part two of replacing every stored credential in my home cluster. Flux reads its configuration from a registry instead of GitHub, the trust conditions do the real work, one key is left, and the cluster survives the cloud being down.
My home Kubernetes cluster used to run on long-lived keys, copied into more places than I could list. Part one: the idea that replaced them, and how the cluster now pulls its images as the pod that needs them, without a stored credential.
Kafka's log is immutable and replicated everywhere; GDPR demands you make a user's data unreachable on request. Per-user DEKs in Postgres, an Avro envelope on the wire, and crypto-shredding gets you both — without ever mutating Kafka.
Co-locating the Kafka offset with business data in a single PostgreSQL transaction gives you exactly-once consumer semantics without a distributed transaction coordinator. A walkthrough in Spring Boot and Kotlin.
Wrapping a Future in a Try is usually redundant — Future already carries failure. Here's a closer look at when (if ever) the wrapper adds value.
How to combine Getting Things Done with SCRUM/Agile when you're a consultant juggling personal, employer, and client responsibilities — and the obstacles that remain.
When IntelliJ 13's SBT support gets confused about multi-project setups, here's the one-liner that gets it back to a clean state.
Notes on splitting frontend (ScalaJS) and backend (Spray) into separate SBT subprojects so the backend jar doesn't drag generated JS classes along.
