https://www.lucavallin.com/blog/tags/cloud-native Platform Engineer at Xebia, focused on AI platform engineering - the infrastructure behind reliable, observable, scalable AI and cloud-native workloads. I work primarily in Go and Google Cloud, with deep experience in Kubernetes, containers, and end-to-end observability - and a strong interest in networking and lower-level systems work in Rust. My current focus is the platform layer beneath AI: inference serving infrastructure on Kubernetes, AI gateway and MCP connectivity, agentic workload orchestration, and end-to-end observability for GenAI systems. My broader experience is full-stack: strong on backend, with solid frontend and mobile knowledge. I contribute to open source, write on my blog, and pick up the occasional talk, training, or meetup when something interesting comes up. I'm a Google Developer Expert (GDE) and a CNCF Ambassador. For a deeper dive, see my blog. If you're new to open source, check out Verto.sh. For mentorship, I'm on Mentorcruise. Outside of work, activities like photography, motorcycling, playing a handpan and cleaning litterboxes keep me occupied 🐈. en-us Luca Cavallin Luca Cavallin Wed, 10 Jul 2024 00:00:00 GMT https://www.lucavallin.com/blog/things-i-learned-about-terraform-that-i-keep-telling-people-about https://www.lucavallin.com/blog/things-i-learned-about-terraform-that-i-keep-telling-people-about I've been working with Terraform for a while now, and I've noticed that there are a few things that I keep telling people about. I thought it would be helpful to write a blog post about some of the most common questions I get asked and share some of the things I've learned along the way. Wed, 10 Jul 2024 00:00:00 GMT Luca Cavallin terraformcloud-nativecncf https://www.lucavallin.com/blog/kubefm-podcast-lucavallin-barco-containers-from-scratch-in-c https://www.lucavallin.com/blog/kubefm-podcast-lucavallin-barco-containers-from-scratch-in-c KubeFM recently invited me to talk about my project "barco: Linux Containers From Scratch in C". In this episode, I talk about why Linux containers don't exist, how to use cgroups and namespaces to isolate a process, how to secure the container with seccomp and capabilities, and how to make the right syscall from C to build your own container engine. Thank you, KubeFM, for having me! Wed, 24 Jan 2024 00:00:00 GMT Luca Cavallin podcastcontainerslinuxcloud-nativecncfkubernetes https://www.lucavallin.com/blog/how-to-configure-oidc-with-terraform-for-github-enterprise-server https://www.lucavallin.com/blog/how-to-configure-oidc-with-terraform-for-github-enterprise-server OpenID Connect (OIDC) is an authentication protocol that extends OAuth 2.0, providing a solid and standardized method for authentication often involving an ID token in the JWT (JSON Web Token) format. OIDC is the recommended way to authenticate with GitHub Enterprise Server when setting up GitHub Actions. Since the setup can be tricky, I've created a Terraform configuration that makes it easier to get started. Sun, 31 Dec 2023 00:00:00 GMT Luca Cavallin githubgithub-actionsterraformsecuritycloud-nativecncf