ARG:2025 Join the game and solve riddles to win the prize!

What's inside the pkpass file?

As a long-time smartphone user, I always found the idea of storing a hefty amount of cards in a single convenient place mighty impressive. Instead of cluttering the whole wallet with plastic, you just add a virtual card to an app -- and it's right there when you need it. After all, the data remains the same -- only the format changes. It's especially convenient (and cool -- I just like the feature so much) for storing temporary data -- cinema tickets, boarding passes, museum tickets, etc. But what's inside these magic pkpass files, exactly? Today we're gonna dive deep into the topic and figure out what convenience looks like under the hood.

Continue reading →

"I think I suck at my job"

I think some of us thought the same at least once. Me, I've thought this hundreds of times. And today, instead of a usual strict technical format, I want to talk a bit and share my thoughts on feeling like an impostor.

Continue reading →

2025 in review

The New Year is nigh, and it's time to look back at the past year. Let's take a look at some numbers and noticeable changes, however big or small they might be. Mostly related to this blog, though some may be personal.

Continue reading →

Advent of Sysadmin 2025

Advent season is here! And that means advent challenges as well!

After a disastrous attempt at Advent of Code last year, this year I was very happy to see that Sad Servers started an Advent challenge of their own -- Advent of Sysadmin! At last, a challenge I can (hopefully) progress further than task 3. And this means more challenges for us to tackle. The Advent will consist of 12 challenges. To keep things slightly more interesting, I will publish the solution to each task the day after it's released: for example, today, on December 2, I will solve the task from December 1, and so on. Have fun!

All tasks are available!

Continue reading →

Centralized EKS monitoring across multiple AWS accounts

Complex systems require extensive monitoring and observability. Systems as complex as Kubernetes clusters have so many moving parts that sometimes it's a task and a half just to configure their monitoring properly. Today I'm going to talk in depth about cross-account observability for multiple EKS clusters, explore various implementation options, outline the pros and cons of each approach, and explain one of them in close detail. Whether you're an aspiring engineer seeking best-practice advice, a seasoned professional ready to disagree with everything, or a manager looking for ways to optimize costs -- this article might be just right for you.

Continue reading →

ARG:2025

I love a good challenge. I love the feeling when the brain sparks and screeches while trying to solve another mystery. For several years, I've been tackling all sorts of nut-cracking challenges, and for several months, I've been thinking of creating one myself. Luckily, I have just the right resources for that: a personal website and a blog. And finally, we're here. Welcome to hatedabamboo's ARG:2025!

Continue reading →

Kubernetes to RDS: secure connections via IAM roles without passwords

Databases are a cornerstone of any meaningful business application. Or not meaningful. Or not even business. They keep things consistent. Yes, that's the one.

For decades, we've been using usernames and passwords to connect to databases inside applications. While consistent and secure enough, sometimes we want a different, more secure way to access sensitive data. And in this article, I'm going to show you the entire process of configuring a database connection using AWS native tools -- IAM roles and policies.

Continue reading →