A Ship Boring build-in-public series
Build, Break & Operate
Boring deploys are a feature. This series documents building a platform where that's true by design.
Most deploy pipelines are exciting in the wrong way — manual steps, silent failures, untested rollbacks. This series builds the opposite: every promotion is a merged PR, every gate is policy-as-code, rollback is measured in seconds.
- PROVISION
- TerraformEKS (spot, OIDC, IRSA)
- DELIVER
- Helm (hand-written)ArgoCD GitOps
- PROTECT
- Kyverno policy-as-code
- RELEASE
- Argo Rollouts canaryKEDA + SQS
- OBSERVE
- Prometheus + Grafana SLOs
- public primitives only
- hand-written load-bearing parts
- failure drills mandatory — an unrehearsed rollback path is fiction
- cost is a feature — public cost ledger
- everything ships as it happens, including what breaks
In this series
Post 0
Build, Break & Operate — a Ship Boring build-in-public series
Seven years building platforms on in-house tooling, rebuilt on vanilla Kubernetes in public: build it, break it deliberately, then you've earned the right to operate it.