Both manage your cloud. One thinks in files, the other thinks in APIs.

Crossplane vs Terraform — and it's not about which is "better."

It's about which model fits your platform.

Most boring CNCF project. Most essential

Backstage doesn't autoscale your pods. Doesn't encrypt your traffic. Doesn't monitor anything.

It just tells you what you have. And somehow that's the hardest problem.

Your documentation is not a guardrail.

Nobody reads the wiki before deploying. You know this. I know this.

So why do we keep pretending it works?

kube-proxy uses iptables.
1000 services = 1000s of rules.
Every packet walks the chain.

O(n) lookup. In 2025. In your kernel.

Your pod runs distroless.

No shell. No curl. No tcpdump. Nothing.

How do you debug it? 🧵

Istio without sidecars.

Not a dream. Not a beta. GA since version 1.24.

Here's how Ambient Mesh actually works. 🧵

SLO monitoring shouldn't require a PhD in PromQL.

One YAML file. Full error budget tracking. Burn rate alerts. Grafana dashboards.

Here's sloth. 🧵

"What actually changes in my cluster if I merge this PR?"

kubectl diff doesn't understand Flux.
Helm diff doesn't handle Kustomizations.

flux diff does both. 🧵

`:latest` doesn't mean latest.

It means "whatever was built last time someone forgot to tag."

Here's why it will burn you. 🧵

You can see decrypted TLS traffic in your cluster without touching a single line of code.

Not a proxy. Not a sidecar. eBPF magic. 🧵

Your cluster pulls the same image 50 times when you scale up.

Every node. Same image. Same egress bill.

There's a fix—and it's stateless. 🧵