The Workstation Blog
Kubernetes
Posts tagged Kubernetes.
Ring Promoter vs Argo CD, Kargo and CI: Which Tool Answers Which Release Question
Argo CD syncs, CI builds, Ring Promoter promotes. A fact-checked look at the comparison, its honest limits, which tool fits, and how to record the choice as an ADR.
Balinder WaliaRead 
Stop paying for idle CI: GitLab Runners on Kubernetes
Most teams pay for CI as if every night were still Monday morning. GitLab Runners on Kubernetes flip that: ephemeral job pods, scale up under load, scale down when quiet.
Balinder WaliaRead 
Ring Promoter v1.0.2 — Rings, Orbit and Lanes Side by Side
Ring Promoter v1.0.2 ships Orbit and Lanes side by side — pause on Orbit for the fleet, flip to Lanes when you need the matrix.
Balinder WaliaRead 
WSLVault: Why AI Agents Need Cryptographic Secrets Isolation
AI agents use secrets at machine speed across tools and tenants. WSLVault seals per tenant so a shared platform never leaks another team's plaintext.
Balinder WaliaRead 
WSLVault: Steal the Server. Not the Secrets.
WSLVault seals secrets before they touch disk — DEK to tenant KEK to root KEK — so a stolen host still leaves attackers with ciphertext they cannot open.
Balinder WaliaRead 
Faster WSLProxy Deploys: Prebuilt Images, Build Cache — and Using AI So the Pipeline Work Actually Ships
Workstation WSL Proxy: compile OpenResty once into bwalia/wslproxy-openresty, warm Buildx/GHA layers, extract on bare metal, prefer DEPLOY_MODE=code — and why AI-assisted delivery made this cross-cutting work finishable.
Balinder WaliaRead 
AI GPU Workstations: NVIDIA DGX Spark/Station & Mac Studio M5
How Workstation maps NVIDIA DGX Spark, DGX Station, and Mac Studio M5 into AI Labs and SME packages — factual positioning, no invented prices.
Balinder WaliaRead 
WSLProxy WAF Engine v2: Enterprise Enforcement You Can Explain
Workstation WSL Proxy WAF Engine v2: governed stages and signatures on the OpenResty hot path — explainable enforcement with support IDs.
Balinder WaliaRead 