Posts on Kubernetes, AWS, Terraform, and platform engineering, plus TIL notes.https://wibrow.dev/en-ushttps://wibrow.dev/posts/eks-pod-identity-verify-iam/https://wibrow.dev/posts/eks-pod-identity-verify-iam/Poking the Pod Identity Agent from inside a running pod to confirm which IAM role you actually got, with curl, wget, and a debug sidecar fallback for distroless containersWed, 22 Apr 2026 00:00:00 GMTawsekskubernetesiampod-identitySamuel Wibrowhttps://wibrow.dev/posts/gh-pr-alias/https://wibrow.dev/posts/gh-pr-alias/A simple shell alias that saves a surprising amount of context switching.Thu, 12 Mar 2026 00:00:00 GMTtilcligithubproductivitySamuel Wibrowhttps://wibrow.dev/posts/how/https://wibrow.dev/posts/how/A CLI tool that turns plain English into shell commands, powered by LLMs running locally with OllamaWed, 18 Feb 2026 00:00:00 GMTgocliaiollamallmSamuel Wibrowhttps://wibrow.dev/posts/aws-alb-transform-actions/https://wibrow.dev/posts/aws-alb-transform-actions/AWS ALB now supports URL rewrites via transform actions, no more redirects or backend rewrites needed.Fri, 24 Oct 2025 00:00:00 GMTtilawsalbkubernetesingressSamuel Wibrowhttps://wibrow.dev/posts/time-unit-conversions/https://wibrow.dev/posts/time-unit-conversions/Handy time-unit conversions for SRE work — requests per month, cost over time, and the like.Mon, 29 Sep 2025 00:00:00 GMTtilsremathreferenceSamuel Wibrowhttps://wibrow.dev/posts/terraform-time-ids/https://wibrow.dev/posts/terraform-time-ids/Using time-based IDs for Terraform resources so they stay unique and sortable by creation time.Sun, 28 Sep 2025 00:00:00 GMTtilterraformhclSamuel Wibrowhttps://wibrow.dev/posts/kubernetes-oomkilled/https://wibrow.dev/posts/kubernetes-oomkilled/A deployment that will eventually get OOMKilled once it tries to allocate more memory than its limit.Sat, 27 Sep 2025 00:00:00 GMTtilkubernetesdebuggingSamuel Wibrowhttps://wibrow.dev/posts/argocd-multi-source/https://wibrow.dev/posts/argocd-multi-source/Any Kubernetes resource in a multi-source ref source path gets included in the rendered template.Sun, 14 Sep 2025 00:00:00 GMTtilargocdkubernetesgitopsSamuel Wibrowhttps://wibrow.dev/posts/fzf/https://wibrow.dev/posts/fzf/fzf fuzzy-finds files, commands, and git branches, and it's completely changed my command line workflow.Sat, 13 Sep 2025 00:00:00 GMTtilclifzftmuxproductivitySamuel Wibrowhttps://wibrow.dev/posts/ncspot/https://wibrow.dev/posts/ncspot/ncspot is a cross-platform, terminal-based Spotify client written in Rust — a lightweight alternative to the desktop app.Fri, 12 Sep 2025 00:00:00 GMTtilclispotifyrusttuiSamuel Wibrowhttps://wibrow.dev/posts/renovate-github-action/https://wibrow.dev/posts/renovate-github-action/Using Renovate packageRules to migrate action references across repos when a GitHub org changes.Thu, 11 Sep 2025 00:00:00 GMTtilrenovategithub-actionsci-cdSamuel Wibrowhttps://wibrow.dev/posts/sofle-split-keyboard/https://wibrow.dev/posts/sofle-split-keyboard/First impressions building and configuring a 66-key Sofle wireless split keyboard with Gateron Browns, XDA keycaps, and QMKWed, 10 Sep 2025 00:00:00 GMTkeyboardsmechanical-keyboardsergonomicsdiySamuel Wibrowhttps://wibrow.dev/posts/terraform-removed/https://wibrow.dev/posts/terraform-removed/How to remove a resource from Terraform state without destroying it.Wed, 10 Sep 2025 00:00:00 GMTtilterraformhclSamuel Wibrowhttps://wibrow.dev/posts/aws-proxy-kube-socat/https://wibrow.dev/posts/aws-proxy-kube-socat/A simple solution for tunneling AWS services through Kubernetes using bash, socat, and port forwardingFri, 15 Aug 2025 00:00:00 GMTAWSKubernetesBashProxyDevOpsSamuel Wibrowhttps://wibrow.dev/posts/tfout/https://wibrow.dev/posts/tfout/A simple operator to sync Terraform outputs into Kubernetes ConfigMaps and SecretsWed, 28 May 2025 00:00:00 GMTkubernetesoperatorkubebuilderclaudeaiSamuel Wibrowhttps://wibrow.dev/posts/aws-oidc-pod-identity/https://wibrow.dev/posts/aws-oidc-pod-identity/Self-hosting an OIDC issuer on a GitHub repo so a Raspberry Pi running Talos can hand out AWS IAM credentials, IRSA-style, with no AWS keys mounted anywhere.Sun, 09 Jun 2024 00:00:00 GMTawsoidckubernetestaloshomelabSamuel Wibrow