Things I
figure out.
Written down.
Certifications, tools, cloud setups and everything I pick up along the way — documented as I go.
Latest posts
GCP ACE: GKE and AI — Training, Serving, and Cost Management for ML Workloads
Why ML workloads need different scheduling than a regular Deployment, and the GKE-specific tools (Kueue, Dynamic Workload Scheduler, Custom Compute Classes) built for them.
Read more →GCP ACE: Security Posture, Compliance, and Preventative Controls in GKE
The security posture dashboard, workload vulnerability scanning, node-level hardening, and how these checks turn into concrete, prioritized action.
Read more →GCP ACE: CI/CD at Scale in GKE — Cloud Build, Cloud Deploy, Cloud Run, and Supply Chain Security
From building an image to progressively rolling it out across fleet clusters, reaching private clusters from CI, and proving an image is trustworthy before it deploys.
Read more →GCP ACE: Managing Identity in GKE — GKE Identity Service and Fleet Workload Identity
Letting users authenticate to fleet clusters with your own identity provider instead of Google identities, and the fleet-wide version of Workload Identity.
Read more →GCP ACE: Multi-Cluster Networking with Cloud Service Mesh — Single vs. Multiple Network
Why some multi-cluster meshes need nothing extra for cross-cluster traffic, while others require an east-west gateway to bridge separate networks.
Read more →GCP ACE: Service Mesh Security — mTLS, Service Authentication, End-User Authentication, and Authorization
Four distinct security questions the mesh answers: is this traffic encrypted, which workload sent it, which human sent it, and is either one allowed to do this.
Read more →IT professional documenting the journey into cloud, automation and modern infrastructure — one certification, tool and project at a time.