---
title: "Noah Makau (@noshmak) | Hashnode"
description: "DevSecOps Engineer, Entrepreneur & Nerd. Kubernetes, Vault & Crossplane at scale. CKA | CKAD | AWS SAP | Founder @ArkilaSystems"
url: "https://hashnode.com/@noshmak"
---

@noshmak

# Noah Makau

@noshmak · Nairobi, Kenya · Joined May 2026

DevSecOps Engineer, Entrepreneur & Nerd. Kubernetes, Vault & Crossplane at scale. CKA | CKAD | AWS SAP | Founder @ArkilaSystems

[Website](https://arkilasystems.com/)

### [The Day 2 Reality of Running a Kubernetes Lab on Your Mac: Stop/Start, CKS Scenarios, and What I Learned Building It.](https://blog.arkilasystems.com/the-day-2-reality-of-running-a-kubernetes-lab-on-your-mac-stop-start-cks-scenarios-and-what-i-learned-building-it?utm_source=hashnode&utm_medium=feed)

Part 7 of 7 — The Mac Kubernetes Lab: A Production-Mirror Setup from Scratch.

10 min read · [blog.arkilasystems.com](https://blog.arkilasystems.com/the-day-2-reality-of-running-a-kubernetes-lab-on-your-mac-stop-start-cks-scenarios-and-what-i-learned-building-it?utm_source=hashnode&utm_medium=feed)

[May 22](https://hashnode.com/posts/the-day-2-reality-of-running-a-kubernetes-lab-on-your-mac-stop-start-cks-scenarios-and-what-i-learned-building-it/6a106af81f237623ea03918c)

### [The Disk-Pressure Incident That Taught Me to Always Set LimitRanges and Other Lessons from Mirroring EKS Locally.](https://blog.arkilasystems.com/the-disk-pressure-incident-that-taught-me-to-always-set-limitranges-and-other-lessons-from-mirroring-eks-locally?utm_source=hashnode&utm_medium=feed)

Part 6 of 7 — The Mac Kubernetes Lab: A Production-Mirror Setup from Scratch.

8 min read · [blog.arkilasystems.com](https://blog.arkilasystems.com/the-disk-pressure-incident-that-taught-me-to-always-set-limitranges-and-other-lessons-from-mirroring-eks-locally?utm_source=hashnode&utm_medium=feed)

[May 22](https://hashnode.com/posts/the-disk-pressure-incident-that-taught-me-to-always-set-limitranges-and-other-lessons-from-mirroring-eks-locally/6a1059761f237623eafa0e30)

### [How I Practise Istio Upgrades Locally Before Touching Production EKS.](https://blog.arkilasystems.com/how-i-practise-istio-upgrades-locally-before-touching-production-eks?utm_source=hashnode&utm_medium=feed)

Part 5 of 7 — The Mac Kubernetes Lab: A Production-Mirror Setup from Scratch.

8 min read · [blog.arkilasystems.com](https://blog.arkilasystems.com/how-i-practise-istio-upgrades-locally-before-touching-production-eks?utm_source=hashnode&utm_medium=feed)

[May 22](https://hashnode.com/posts/how-i-practise-istio-upgrades-locally-before-touching-production-eks/6a1050871f237623eaf4d5df)

### [Same Cluster, Different Mac: A Debugging Story About Unprivileged LXC Containers, iptables, and Why Cilium Replaces kube-proxy.](https://blog.arkilasystems.com/same-cluster-different-mac-a-debugging-story-about-unprivileged-lxc-containers-iptables-and-why-cilium-replaces-kube-proxy?utm_source=hashnode&utm_medium=feed)

Part 4 of 7 — The Mac Kubernetes Lab: A Production-Mirror Setup from Scratch.

12 min read · [blog.arkilasystems.com](https://blog.arkilasystems.com/same-cluster-different-mac-a-debugging-story-about-unprivileged-lxc-containers-iptables-and-why-cilium-replaces-kube-proxy?utm_source=hashnode&utm_medium=feed)

[May 22](https://hashnode.com/posts/same-cluster-different-mac-a-debugging-story-about-unprivileged-lxc-containers-iptables-and-why-cilium-replaces-kube-proxy/6a1045711f237623eaed35b8)

### [Building a Production-Grade Vault PKI for a Local kubeadm Cluster Without the Shortcuts.](https://blog.arkilasystems.com/building-a-production-grade-vault-pki-for-a-local-kubeadm-cluster-without-the-shortcuts?utm_source=hashnode&utm_medium=feed)

Part 3 of 7 — The Mac Kubernetes Lab: A Production-Mirror Setup from Scratch.

11 min read · [blog.arkilasystems.com](https://blog.arkilasystems.com/building-a-production-grade-vault-pki-for-a-local-kubeadm-cluster-without-the-shortcuts?utm_source=hashnode&utm_medium=feed)

[May 17](https://hashnode.com/posts/building-a-production-grade-vault-pki-for-a-local-kubeadm-cluster-without-the-shortcuts/6a096e930f5e616ca8983c33)