Dave ShepherdinWealth Wizards EngineeringA tale about object encryptionEncryption is difficult, it shouldn’t be, but it always seems to be a challenge. While something is difficult to do, its harder to adopt.May 13, 20201May 13, 20201
Dave ShepherdinWealth Wizards EngineeringVideo: Unblocking our release train with Istio traffic managementRecently, Pierre Meunier, and I delivered a talk at KubeCon/CloudNativeCon Europe 2019 in Barcelona on our use of the Istio service mesh…Aug 13, 2019Aug 13, 2019
Dave ShepherdinWealth Wizards EngineeringIstio performance in a multi-tenancy Kubernetes clusterAt Wealth Wizards we run a soft multi-tenancy set up in Kubernetes by defining a namespace to each of our customers (or tenants) and…May 29, 20191May 29, 20191
Dave ShepherdinWealth Wizards EngineeringUnblocking our release train with Istio traffic managementWealth Wizards employs a microservice architecture. This means lots of services, each being actively developed. To ensure that our…Jan 11, 2019Jan 11, 2019
Dave ShepherdinWealth Wizards EngineeringDevOps: I love it when a plan comes togetherWhen I first started in my current role as a platform/operations bod I seemed to spend a good majority of my time sorting out…May 25, 2018May 25, 2018
Dave ShepherdinWealth Wizards EngineeringPrivilege escalation in VaultAfter using Vault for a period of time we recognised a risk around the KV secrets engine which means that users could accidentally…Apr 16, 20181Apr 16, 20181
Dave ShepherdinWealth Wizards EngineeringWorking with Vault secrets that expire on KubernetesOne of the most powerful features of Vault is the dynamic secrets provided by a number of secrets engines. Most of these secrets engines…Apr 10, 20181Apr 10, 20181
Dave ShepherdinWealth Wizards EngineeringWorking with Vault secrets on KubernetesHashicorp’s Vault is more than just a secrets store, it can be used to dynamically create secrets with the relevant permissions at the time…Apr 4, 2018Apr 4, 2018