Encrypt each .env value with OpenBao Transit, give CI encrypt-only and apps decrypt-only access, and rotate keys without redeploying.

Most teams leaving Vault Enterprise only use features OpenBao and free Vault already have. The hard part is configuration, so we built a tool to migrate it.

Extending our open-source Datadog alternative with ClickHouse for traces and logs, Grafana Pyroscope for profiling, and new terraform-k8s-monitoring features.

Europe's shift away from US tech isn't ideology; it's risk management, and businesses face the same vendor dependency problem governments are now acting on.

A blueprint for multi-DC Apache Cassandra across sovereign European infrastructure, using a WireGuard mesh for data autonomy and vendor-neutral security.

How Python list assignment, append, extend, copy and deepcopy behave under the hood, so you avoid subtle bugs and write more memory-efficient code.

Achieve European cloud sovereignty by mastering multi-cloud routing with OSPF.

Build immutable server images with Packer and Ansible instead of patching live boxes over SSH, for more secure, repeatable infrastructure.

The traditional narrative that Europe only ‘writes the rules’ while others innovate is being dismantled by a new movement: The Sovereign Stack.

In an era where proprietary licensing can threaten operational stability, OpenBao emerges as a vendor-neutral alternative for secrets management.

Stop managing certificates manually. Learn how to automate Kubernetes SSL/TLS for Ingress and internal services using cert-manager, Vault, and OpenBao.

Why Cassandra 5.x should run on Java 17 with the Shenandoah garbage collector, and the performance, stability and operational gains you can expect.

A three-step strategy for upgrading Apache Cassandra from 4.x to 5.x without downtime, keeping data consistent while adopting the new 5.x features.

Your cloud invoice is only part of infrastructure TCO. The hidden costs of Day 2 operations, skills gaps and vendor lock-in, and how to reduce them.

Deploy a production-ready Prometheus, Grafana, Mimir, Loki and Tempo monitoring stack on a single AWS VM with a pre-configured AMI and setup wizard.

ScyllaDB's source-available licence and 10TB cap have teams rethinking. Why Apache Cassandra 5.0 is the open-source alternative and how to migrate.

The Kubernetes features we were waiting for, including in-place pod resizing and native sidecar containers, and what they change for performance and security.

Ditch the SaaS bill and take control of your data! This post walks you through building your own powerful observability platform using open-source tools

How Digitalis builds robust, compliant data platforms for enterprises, turning real-time and sensitive data into secure, scalable insight.

Kubernetes makes it easy to overspend. Where the hidden costs come from and practical ways to downscale clusters and control your cloud bill.

Kubernetes is no longer just for tech giants. A step-by-step approach to modernising your application with Kubernetes, whatever your company size.

Secure external access to a Strimzi Kafka cluster on Kubernetes using Traefik ingress and your own certificate authority instead of self-signed certificates.

Vals-Operator 0.6.2 syncs secrets from external stores into Kubernetes secrets. This release updates core libraries and adds secret templates.

Learn about capacity planning in Kubernetes with Vertical Pod Autoscaler