Artemstar
Notes on infrastructure, tooling, and the small bits in betw
Notes on infrastructure, tooling, and the small bits in betw
Notes on infrastructure, tooling, and the small bits in betw
This is a small revival project. The original blog stopped updating around 2018, then the server went down, then the only thing left was the domain. I liked the writing, so I brought it back.
What this site is
It was a DevOps blog — clear, hands-on, the way the best technical writing is: an engineer working through a problem and writing it down so the next person doesn’t have to start from scratch. Docker, Kubernetes, Terraform, Git, AWS, VPN. I read it years ago and a couple of the posts genuinely saved me an afternoon.
When I checked back recently, the site was gone. Not just stale — gone. Hosting lapsed, database recycled, no backups. The domain was available, the Wayback Machine had snapshots, and the original tone of the blog felt worth preserving, so I started a small project.
Artemstar is a revived DevOps blog that preserves clear, hands-on technical writing originally published between 2016 and 2018. The site covers modern infrastructure topics like Docker, Kubernetes, Terraform, Git, AWS, and VPN solutions — written by an engineer working through real problems and documenting them so others don't have to start from scratch. After the original server went down and the domain lapsed, the blog was brought back using Wayback Machine snapshots, keeping the original tone and practical focus intact.
A practical walkthrough of Tailscale as a modern VPN alternative. The post directly contrasts the blog's 2017 Cisco ASA setup with FreeRADIUS and two-factor authentication, making a strong case for why you shouldn't build that kind of infrastructure anymore. It's a clear before-and-after comparison of VPN approaches.
A 60-line YAML template for AWS deployments using GitHub Actions — no long-lived access keys, no plaintext secrets, no magic. The post focuses on IAM roles and short-lived credentials, giving teams a production-ready starting point that eliminates common security pitfalls.
A considered answer to whether you should switch from Terraform to OpenTofu after HashiCorp's license change. The post acknowledges Terraform's MPL departure and evaluates the community fork on its own merits, helping readers make an informed decision about their infrastructure codebase.
A focused explanation of how EKS pods get AWS credentials without stuffing access keys into Kubernetes secrets. The post covers IAM roles for service accounts, solving a long-standing problem in Kubernetes cluster security with a clean, native AWS integration.
"The respectful suggestion in 2026 is: don't do any of that anymore."
This line captures the blog's entire philosophy — it's not about showing off complex setups, but about saving you time by pointing to simpler, better solutions. Every post treats the reader as a colleague who deserves the honest, updated answer rather than the clever one. The writing assumes you're competent and just needs the straight path forward.
You manage cloud infrastructure and want concise, practical guides on modern DevOps tooling — especially if you're evaluating Tailscale, migrating from Terraform to OpenTofu, or setting up secure AWS deployments with GitHub Actions. The Kubernetes and EKS content is particularly useful for teams moving away from manual credential management.
Other tools you might consider
Loading comments…
Maker
alan miao
Visit Website
artemstar.com
Project Info
Product Keywords
Compare with
Achievement
