aether What I hardened before Aether's first release Aether is close to its first release. Here are the three decisions behind it: immutable Talos Linux nodes, Harbor proxy caching so image pulls survive registry outages, and CAPI autoscaling that takes a Pending pod to a Ready node in ~80 seconds.
aether Why Aether dropped Kamaji and vcluster for custom controllers I replaced Kamaji's tenant control plane and shelved vcluster in favour of two custom controllers — aether-operator and aether-controllers — with cert-manager driving the entire PKI. Here is why.
aether Why Aether runs seven isolation layers for every tenant cluster Multi-tenant Kubernetes isolation is the hardest unsolved problem in the ecosystem. Here is why I don't trust any single layer to solve it, and what seven layers working together actually looks like.
kubernetes 17 things that broke getting the first tenant cluster running on Aether I am building a managed Kubernetes platform from scratch on Proxmox with Kamaji, Talos and Cilium. Getting the first tenant worker to join took two days and 17 things broke along the way. Here is what went wrong and how I fixed it.
