Resizes journal · 27 articles
Notes on platform engineering, cloud infrastructure, and building better software. Written by the people doing the work.
SIG Network retires Ingress NGINX in March 2026. Scope, the oauth2-proxy bugs we caught before DNS moved, what ingress2gateway does not cover, and how Resizes runs the same cutover for you.
A chat message is not one request — it is a loop of model calls. How we attributed LiteLLM spend, saw the whole proxy in Grafana, and cut tokens without breaking the agent.
What Secrets Manager really costs at 50, 500, and 5,000 secrets — and how we help organisations move to a portable, cheaper operating model with 1Password and External Secrets.
Batch and ML workloads often need resources that aren't known at Job creation time. The optimal allocation depends on cluster capacity, queue priorities, and hardware availability — all of which ca…
Platform engineering is now a critical function in modern software organizations. Gartner predicts that 80% of large engineering organizations will have dedicated platform teams by 2026. But simply…
The problem of giant PRs that nobody wants to review is universal. You open a pull request with 50 modified files and think: "this is going to take days to review." Reviewers lose context, conflict…
Automating Dependency Updates with Renovate Bot (for Any Language) Keeping dependencies up to date is one of those things that everyone agrees is important… and yet no one enjoys doing. Between ver…
Automating AWS IAM Identity Center with Terraform in Multi-Account Environments Managing access in AWS can seem simple at first: a few accounts, a handful of users, and permissions that are easy to…
Shift-left Philosophy: Why Security Matters You might remember the recent supply chain attack that hit NPM packages — maybe your team even felt the impact. It was a good reminder that one vulnerabl…
If you’ve ever tried to expose both TCP and UDP on the same port using Kubernetes with AWS Load Balancers, you’ve probably run into a common limitation: you can only choose one protocol per port, w…
