Notes on observability, distributed systems, and software engineering.https://pnj-e6y.pages.dev/https://pnj-e6y.pages.dev/blog/cross-account-prometheus-mtls/https://pnj-e6y.pages.dev/blog/cross-account-prometheus-mtls/How to stream Prometheus metrics from one AWS account to another over the public internet, with Envoy doing mTLS termination on both sides and a NAT-pinned IP allow-list as the outer fence.Mon, 29 Jun 2026 00:00:00 GMThttps://pnj-e6y.pages.dev/blog/servicemonitor-kube-apiserver-impact/https://pnj-e6y.pages.dev/blog/servicemonitor-kube-apiserver-impact/Adding a ServiceMonitor looks innocent — at scale it sets off a chain reaction through EndpointSlices, Istio XDS, and kube-proxy that can take down your control plane.Sun, 28 Jun 2026 00:00:00 GMT