https://byteherder.com/log/ Notes from Byteherder on platform engineering, secure delivery and the data systems in between. Written from the work, not from the roadmap. en https://byteherder.com/log/fourteen-months-behind-on-purpose/ https://byteherder.com/log/fourteen-months-behind-on-purpose/ Tue, 15 Sep 2026 09:00:00 GMT A cluster sat two minor versions back because nobody had measured the upgrade risk. Unmeasured risk gets treated as infinite, and infinite risk never gets scheduled. kubernetes upgrades operations risk https://byteherder.com/log/provenance-is-the-product/ https://byteherder.com/log/provenance-is-the-product/ Thu, 20 Aug 2026 09:00:00 GMT Two dashboards, one metric, two numbers. Working out which one was right took longer than building either of them, and the answer was that neither could be checked. data bi osint provenance https://byteherder.com/log/the-plus-in-the-secret/ https://byteherder.com/log/the-plus-in-the-secret/ Wed, 29 Jul 2026 09:00:00 GMT Keycloak returned unauthorized_client for a client secret that was byte-identical on both sides. The character causing it was a plus sign. oidc keycloak debugging secrets https://byteherder.com/log/a-gate-that-cannot-fail-is-a-report/ https://byteherder.com/log/a-gate-that-cannot-fail-is-a-report/ Thu, 02 Jul 2026 09:00:00 GMT Every pipeline I inherit has a security scanning stage. Almost none of them can stop a release. That is not a tooling problem. devsecops supply-chain ci-cd https://byteherder.com/log/publish-the-interface/ https://byteherder.com/log/publish-the-interface/ Thu, 11 Jun 2026 09:00:00 GMT A platform team without a written-down interface is a ticket queue with a roadmap attached. Here is what writing it down actually looks like. kubernetes platform-engineering operations