Field notes by Rutger Blom
Cloud infrastructure.
Built. Tested. Explained.
Practical notes on private cloud, networking, Kubernetes, and automation. From architectural decisions to the details that only show up in the lab.
When AI Agents Design and Build Infrastructure
Two agent roles. One VCF lab. A practical test of what happens when architecture and implementation meet real infrastructure constraints.
Follow your curiosity.
Explore by topic
A few good starting points.
Selected reading
01
Think beyond deployment
Owning the Platform on VCF 9
The responsibilities and decisions that come with owning a private cloud platform.
02
Build a repeatable foundation
Building the Foundation for a VCF Automation All Apps Landing Zone with Terraform
A hands-on starting point for a VCF Automation landing zone with Terraform.
03
Follow the network
Testing the VCF 9.1 Distributed Connection Model with BGP EVPN and VXLAN
Explore the distributed connection model through a focused lab experiment.
Fresh from the lab.
-
Using Keycloak as an OIDC Identity Provider for a VCF Automation Organization
Read article ↗: Using Keycloak as an OIDC Identity Provider for a VCF Automation OrganizationI wanted to test organization-level OIDC authentication in VCF Automation 9.1 using Keycloak from my Provider Box setup. It worked in the end, but a few…
-
Guardrails in VCF Automation 9.1
Read article ↗: Guardrails in VCF Automation 9.1Self-service without guardrails is just delegated infrastructure access with a nicer interface. In this post I look at guardrails in the VCF Automation 9.1 All Apps…
-
Owning the Platform on VCF 9
Read article ↗: Owning the Platform on VCF 9In my previous article, I reflected on what I would design differently if I were building an NSX platform today. That piece was about architectural choices:…
-
Avi Load Balancer Metrics with Prometheus and Grafana
Read article ↗: Avi Load Balancer Metrics with Prometheus and GrafanaAvi Load Balancer offers a wealth of valuable metrics that can be accessed directly via the Avi Controller’s UI or API. However, there are various reasons…
-
Network Visibility for TKG Service Clusters
Read article ↗: Network Visibility for TKG Service ClustersTKG Service Clusters using the default Antrea CNI, can be easily configured for enhanced network visibility through flow visualization and monitoring. The ability to monitor network…