Skip to content
Florin Loghiade

Florin Loghiade

Writing about technology and born in the field issues

Featured AKS Automatic - Kubernetes without headaches

AKS Automatic - Kubernetes without headaches

This article examines AKS Automatic, a new, managed way to run Kubernetes on Azure. If you want to simplify cluster management and reduce manual work, read on to see if AKS Automatic fits your needs.

in
Featured Azure - Which region should I choose?

Azure - Which region should I choose?

This is something that I've been trying to write for more than a year, but I never got any time to assemble my thoughts and put them in wr

in
Featured Governance & Security in Azure - The untold truth

Governance & Security in Azure - The untold truth

Moving to the cloud is “easy”; Managing it is another ordeal. I’m going to start with a disclaimer; This post focuses on achieving governance

in
Azure Platform Guardrails: Policy, Workload Identity, and Governance That Works

Azure Platform Guardrails: Policy, Workload Identity, and Governance That Works

Platform guardrails prevent damage but often turn into friction machines. How to design guardrails that actually prevent bad patterns, layer detection and correction, and build platforms developers trust.

in
Operating AKS After Azure Linux Retirement: Image Lifecycle as Platform Practice

Operating AKS After Azure Linux Retirement: Image Lifecycle as Platform Practice

Node image retirement is not an emergency if you treat it as a predictable operating model. How to migrate images without chaos, what to test, and how to govern the decision.

in
API Management as a Runtime Control Plane for AKS and Container Apps

API Management as a Runtime Control Plane for AKS and Container Apps

APIM isn't just a gateway. It's a governance layer that enforces consistency across AKS, Container Apps, and other platforms. When to use it and when to keep things simple.

in
Cilium in AKS: Network Policy and Observability

Cilium in AKS: Network Policy and Observability

Network policy is not theoretical; Cilium and eBPF make it practical. Learn when segmentation actually matters, how to observe before you enforce, and why most teams get it wrong at first.

in
Defender for Containers and AKS Runtime Security

Defender for Containers and AKS Runtime Security

Runtime security is not posture; learn how Defender bridges the gap between admission controls and what containers actually do at runtime, and when the observability it provides actually matters for real threat response.

in
Secretless Delivery: GitHub Actions, Entra Workload Identity, and AKS

Secretless Delivery: GitHub Actions, Entra Workload Identity, and AKS

If you're still deploying to Azure from GitHub Actions with static credentials in 2026, you have better options. Here's how to eliminate credentials from GitHub entirely using OIDC and workload identity, and why it matters.

in
Multi-Region Application Design with AKS, Front Door, and Azure PaaS

Multi-Region Application Design with AKS, Front Door, and Azure PaaS

Multi-region architecture is sold as inevitable, but it is not. This guide covers when to build multi-region systems, how to choose between active-active and active-passive models, how to design for data consistency, and how to test failover without creating incidents. Written for architects and ...

in
Azure Kubernetes Fleet Manager in Production

Azure Kubernetes Fleet Manager in Production

Operating multiple AKS clusters becomes a different problem than running a single cluster. Azure Fleet Manager is Microsoft's opinionated answer to multi-cluster orchestration, not the only approach, but a native one worth understanding.

in