Home
Feed

Extend

Hashnode Pro
Hashnode for Agents

Resources

The foreword
Hashnode gql skill

Buildful - AI coding agent that delivers frontier-level results at a fraction of the cost Bug0 - The AI-native e2e QA regression testing Hackathons Changelog Brand @hashnode on X Hashnode on LinkedIn Support - hello+support@hashnode.com Code of Conduct Terms Privacy Sitemap

Sign in

Search Hashnode

Search posts, tags, users, and pages

@noshmak

Noah Makau

@noshmak·Nairobi, Kenya·Joined May 2026

DevSecOps Engineer, Entrepreneur & Nerd. Kubernetes, Vault & Crossplane at scale. CKA | CKAD | AWS SAP | Founder @ArkilaSystems

About

DevSecOps Engineer, Entrepreneur & Nerd. CKA | CKAD | AWS SAP | SAA | Cloud Practitioner. Building and breaking things with Kubernetes, Vault, Istio & Crossplane at scale. Founder @ArkilaSystems | Preparing for CKS.

Available for

Technical writing and DevOps consulting

Noah Makau's blogs

Noah Makau — DevSecOps & Platform Engineeringblog.arkilasystems.com8 posts

Articles Comments

The Day 2 Reality of Running a Kubernetes Lab on Your Mac: Stop/Start, CKS Scenarios, and What I Learned Building It.

Previously in Part 6: We wired up Vault Kubernetes auth, installed Crossplane with the AWS provider, and applied LimitRanges mirroring the production configuration that resulted from a real disk-press

May 22 · 10 min readblog.arkilasystems.com

The Disk-Pressure Incident That Taught Me to Always Set LimitRanges and Other Lessons from Mirroring EKS Locally.

Previously in Part 5: We installed Istio with revision-based upgrades, MetalLB for LoadBalancer IPs, and practised traffic management with Gateways, VirtualServices, and fault injection. The cluster b

May 22 · 8 min readblog.arkilasystems.com

How I Practise Istio Upgrades Locally Before Touching Production EKS.

Previously in Part 4: kubeadm 1.34 is bootstrapped, the M1 vs M4 CNI problem is solved (Calico on M4, Cilium on M1), and the three-node cluster is running with certificates signed by our Vault PKI. No

May 22 · 8 min readblog.arkilasystems.com

Same Cluster, Different Mac: A Debugging Story About Unprivileged LXC Containers, iptables, and Why Cilium Replaces kube-proxy.

I built a four-VM Kubernetes lab on my M4 Mac. Everything worked the first time. kubeadm init finished cleanly, Calico installed without complaint, and every node went Ready within a minute. The clust

May 22 · 12 min readblog.arkilasystems.com

Building a Production-Grade Vault PKI for a Local kubeadm Cluster Without the Shortcuts.

Previously in Part 2: Cluster 1- the OrbStack-native daily driver is up with Istio, Vault dev mode, and Crossplane. Now we start the harder half: a four-VM kubeadm cluster that mirrors a real producti

May 17 · 11 min readblog.arkilasystems.com

About

DevSecOps Engineer, Entrepreneur & Nerd. CKA | CKAD | AWS SAP | SAA | Cloud Practitioner. Building and breaking things with Kubernetes, Vault, Istio & Crossplane at scale. Founder @ArkilaSystems | Preparing for CKS.

Available for

Technical writing and DevOps consulting

Noah Makau's blogs

Noah Makau — DevSecOps & Platform Engineeringblog.arkilasystems.com8 posts