kotona.app writingPosts and technical notes from kotona.app.https://www.kotona.app/A GitOps rollback needs time to reach Githttps://www.kotona.app/writing/a-gitops-rollback-needs-time-to-reach-git/https://www.kotona.app/writing/a-gitops-rollback-needs-time-to-reach-git/A live rollback fixed a crashlooping workload, but the more interesting part was needing to suspend reconciliation long enough for the fix to become the desired state instead of a temporary lie.Wed, 08 Apr 2026 18:00:00 GMTnoteoperationsgitopsGatus does not need to monitor everythinghttps://www.kotona.app/writing/gatus-does-not-need-to-monitor-everything/https://www.kotona.app/writing/gatus-does-not-need-to-monitor-everything/The monitoring split that held up best was also the less ambitious one: keep Gatus on in-cluster checks, keep edge probes in blackbox-exporter, and stop trying to make one checker own every route shape.Wed, 08 Apr 2026 17:00:00 GMTnotemonitoringkubernetesThe boring auth boundary was righthttps://www.kotona.app/writing/the-boring-auth-boundary-was-right/https://www.kotona.app/writing/the-boring-auth-boundary-was-right/Homelab analytics had enough auth surface to accidentally grow a second identity product. The useful decision was to keep identity proof upstream, keep authorization local, and demote local login to a narrow break-glass path.Wed, 08 Apr 2026 16:00:00 GMTnoteautharchitectureCompatibility reports should be a little rudehttps://www.kotona.app/writing/compatibility-reports-should-be-a-little-rude/https://www.kotona.app/writing/compatibility-reports-should-be-a-little-rude/Backend-owned contracts only become useful release artifacts once the compatibility tooling is conservative enough to complain about real breakage instead of politely missing it.Wed, 08 Apr 2026 15:00:00 GMTnotecontractsrelease-engineeringRemote dev shells turn the filesystem into the producthttps://www.kotona.app/writing/remote-dev-shells-turn-the-filesystem-into-the-product/https://www.kotona.app/writing/remote-dev-shells-turn-the-filesystem-into-the-product/The interesting part of the remote dev shell cutover was not SSH or code-server. It was moving the real working state onto shared storage without corrupting repo-local databases or pretending two writable trees could coexist peacefully.Wed, 08 Apr 2026 14:00:00 GMTnoteremote-developmentinfrastructureLocal execution state should stay localhttps://www.kotona.app/writing/local-execution-state-should-stay-local/https://www.kotona.app/writing/local-execution-state-should-stay-local/The sprintctl and kctl workflow is useful largely because it does not pretend every intermediate agent artifact belongs in Git. Live state stays local, committed artifacts stay small, and promotion has to be deliberate.Wed, 08 Apr 2026 13:00:00 GMTnoteworkflowagentsYou can fix contract drift or you can pretend the frontend is authoritativehttps://www.kotona.app/writing/you-can-fix-contract-drift-or-you-can-pretend-the-frontend-is-authoritative/https://www.kotona.app/writing/you-can-fix-contract-drift-or-you-can-pretend-the-frontend-is-authoritative/Backend-owned contract exports are mainly a way to stop arguing with a stale frontend view of reality. The useful part is not code generation by itself but making the backend the source of truth and then checking the drift explicitly.Wed, 08 Apr 2026 12:00:00 GMTnotecontractsfrontendThe site existshttps://www.kotona.app/writing/the-site-exists/https://www.kotona.app/writing/the-site-exists/The first post is mostly a marker that the site exists and the machinery got here before the archive did.Wed, 08 Apr 2026 00:00:00 GMTmetasite