Churts

The Churts

Page 2 of 4 · newest first · back to latest

uBix Vault Hits Beta — From Design Notes to a Working Secrets Manager

uBix Vault Hits Beta — From Design Notes to a Working Secrets Manager

A few weeks ago I posted the design notes for a from-scratch, Vault-style secrets manager in Go. It's now a working beta — v0.2.0-beta.1 — with encryption at rest, Shamir seal/unseal, dynamic database credentials, auto-unseal, backups, and more. Here's what got built, and the engineering bits worth writing down.

Replikate 1.0 — A Stable Contract

Replikate 1.0 — A Stable Contract

Replikate is 1.0. The annotation contract is frozen, the same-name clobber-war bug is fixed, and the one path that had never run on a real cluster — the admission webhook — is now green end to end. Here's what closing out a 1.0 actually took.

uBix Core — Migrations, Feature Flags, and Quality Gates That Bite

uBix Core — Migrations, Feature Flags, and Quality Gates That Bite

When I open-sourced uBix Core I said a framework is best stress-tested by the tooling and products built on it. Since then it's grown a schema-migration framework, a feature-flag system with an audit trail, an eleven-tool code-review gate that blocks bad pushes, and an eight-stage pipeline — the unglamorous machinery that decides whether a monorepo stays maintainable.

Replikate Grows Up — Instant Drift Correction, Metrics, and a Webhook

Replikate Grows Up — Instant Drift Correction, Metrics, and a Webhook

Two days after launching the MVP, Replikate went from v0.1 to v0.4: near-instant drift correction, Prometheus metrics, an optional validating webhook, namespace exclusions, a field indexer, and a real integration test suite. Here's what shipped — and an honest revisit of the three edges I named on day one.

uBix Vault — Building a Secrets Manager From Scratch

uBix Vault — Building a Secrets Manager From Scratch

A new project, still in early development: a from-scratch, HashiCorp Vault–style secrets manager in Go. Here's what it is, why I'm building it when Vault and OpenBao already exist, and the design decisions I've committed to so far.

Replikate — ConfigMap and Secret Replication Across Kubernetes Namespaces

Replikate — ConfigMap and Secret Replication Across Kubernetes Namespaces

Kubernetes has no native way to share a ConfigMap or Secret across namespaces. Replikate is a small BSD-licensed controller that fixes that: annotate a source object, and it keeps synced copies in every namespace you select — including ones that don't exist yet.

uBixOS 3.0 — It Compiles Itself Now, and It Boots on a Raspberry Pi

uBixOS 3.0 — It Compiles Itself Now, and It Boots on a Raspberry Pi

A month after the last write-up, uBixOS shipped 3.0.0-BETA, retired 32-bit, brought x86_64 to full parity, went truly SMP, learned to compile itself, and booted on a real Raspberry Pi 3 with graphics and networking.

The 8-Bit Machine — Design Any 8-Bit Computer You Can Imagine

The 8-Bit Machine — Design Any 8-Bit Computer You Can Imagine

A passion project born from a deep love of retro computing history — build and debug any 8-bit architecture you can dream up, with presets for the machines that defined an era.