{cloud, middleware, software} architect · dev.sec.ops.
API gateways, service meshes and the plumbing underneath them — Envoy, Kubernetes,
Keycloak, PKI. I spend my days with enterprise platform teams and my evenings
building the tools I wish those platforms already had: small, single-binary,
brew install-able things that make a laptop feel like a real cluster.
Most of what is below started as "this takes me 20 minutes every time" and ended up on the Homebrew tap.
|
Multi-cluster kind manager for Apple Silicon. One Lima VM,
many clusters, and pure L3 routing from macOS into the kind bridge — no SNAT,
no VPN, real IPs for pods and
|
Web-based debug terminal for Kubernetes, designed for devs, not ops. Pick a
pod, inject an ephemeral container (
|
|
HTTP header editor for Chrome, built on
|
Replaces Chrome's bookmark dialog with a fuzzy-searchable folder picker. Type
three letters, land in any nested folder. Every release is byte-reproducible and
attested —
|
|
Keycloak on Google Cloud Run, entirely in Terraform — Cloud SQL Postgres behind a Serverless VPC connector, a global load balancer, managed TLS and private DNS. Built so a lab IdP survives cluster resets: wipe every kind cluster you own and the realms, clients and users are still there.
|
|
| keycloak-cli | Manage Keycloak realms, clients, users, groups and OAuth scopes from the terminal. No Docker, no Java, no kcadm.sh in a pod. |
Go |
| homepki | Your own three-tier PKI for home labs — root CA, intermediates, server & client certs. mTLS labs in four commands. | Go |
| push-to-cdn | Drop a file in a GCS bucket, get a public URL back. For workshops, demos and long-lived assets. | Go |
| kuma-migrator | Migrates Kuma / Kong Mesh users from kuma.io/service to the MeshService API, with deprecation scans for Kuma 2.11–2.14. |
Go |
| Claude Status · site | macOS menu-bar app for Claude Code usage: live plan limits, today's spend, weekly cap, per-model breakdown. ~1.5k lines of Swift, no Electron. | Swift |
| slack-clauded-status-updater | Rotates your Slack status with Claude Code "thinking mode" words on a schedule. Cloud Function + Scheduler + Terraform, because why not. | Go · HCL |
Taps: bcollard/claude-status · bcollard/homepki · bcollard/keycloak-cli · bcollard/klimax · bcollard/kuma-migrator · bcollard/push-to-cdn
Where I send patches when the tool I depend on is missing a piece:
- containerd/containerd —
cri: honour the platform configured inruntime_platforms - lima-vm/lima — stop identifying additional disks by filesystem label
- gnachman/iTerm2 — two-row tab bar
- Kong/charts —
Service.spec.trafficDistributionsupport for zone-aware routing - kgateway-dev/kgateway (ex-Gloo Edge) — ~28 merged PRs: production-readiness guides, zero-downtime gateway rollouts, NLB/TLS termination, timeouts, dynamic forward proxy
- mccutchen/go-httpbin · kumahq/kuma-demo · kumahq/kuma-website · gohugoio/hugo · giraffi/fluent-plugin-amqp
📝 baptistout.net — long-form, mostly on things that are annoying to figure out from the docs:
- Run multiple Kubernetes clusters on macOS with LoadBalancer support — the post that became
kind-on-lima⭐30, and eventuallyklimax - How Kubelet actually runs containers
- Let's make OpenID Connect crystal-clear
- Passwordless authentication with WebAuthn, Keycloak and Istio
- Upgrade to HTTP/3 with Envoy
- How I conduct technical interviews, with the question matrix
🎤 Talks & webinars
- Multi-cluster Mesh by Kong — APIDays Paris · Dec 2023
- Get to know Envoy — ContainerDays Hamburg · Sep 2023
- 10 things I wish I had known before using Istio — Solo.io · Mar 2023
- Istio Gateway on steroids with WebAuthn — APIDays Paris · Dec 2022
- Envoy — le proxy moderne pour les infra cloud-native — OSXP Paris · Nov 2022
- Istio Gateway on steroids with WebAuthn — APIDays London · Oct 2022
- Getting started with Envoy — KubeHuddle Edinburgh · Oct 2022
Read. Understand. Do. Repeat.