How to Avoid ATS Traps While Scouting Senior Talent

Posted on July 19, 2026July 21, 2026 by Marco Antonio Carcano

Over-reliance on Applicant Tracking Systems (ATS) is creating a silent crisis in tech hiring. While these systems catch hyper-specialized executioners, they systematically filter out the senior talent who actually understand the bigger picture.

The root cause isn't just the software; it's a broken process driven by time scarcity. Recruitment is often treated as an afterthought, leading to rushed or copy-pasted job descriptions.

Underestimating hiring requirements is exactly like butchering business requirements in a software project: you might clear the initial hurdle, but you trigger long-term human technical debt.

Without a holistic and well-defined strategy, companies fall into a dangerous trap:

Day 1 looks perfect: The specialized feature is shipped fast because the immediate checkbox was ticked.
Day 2 brings the crisis: The accumulation of unmanaged technical debt hits the business, leading to skyrocketing costs or severe system disruptions.

In this post, we discuss the root cause of this systemic issue and how to address it.

External Services Discovery With Prometheus ServiceMonitor

Posted on July 18, 2026July 21, 2026 by Marco Antonio Carcano

Prometheus automatic scraping is a game-changer for Kubernetes environments: it dynamically discovers metrics exporter endpoints without requiring manual configuration every time a new workload drops. But what happens when your core infrastructure relies on databases or legacy services running outside the cluster?

While this setup was natively designed for internal Kubernetes workloads, you can successfully extend automatic scraping to external servers. You do not need to abandon Kubernetes-native abstractions or hardcode static scrape targets in your Prometheus configuration.

External Services Discovery With Prometheus ServiceMonitor demonstrates how to exploit the Prometheus Operator's ServiceMonitor to dynamically discover and scrape metrics from external servers. As a practical example, we will configure a production-grade monitoring pipeline for external PostgreSQL nodes and system metrics, implementing enterprise security best practices along the way.

Kubernetes cert-manager: How to for mTLS,CSI Driver and Helm

Posted on June 30, 2026June 30, 2026 by Marco Antonio Carcano

Kubernetes cert-manager: How to for mTLS,CSI Driver and Helm post explains how to issue TLS Server certificates and Mutual TLS (mTLS) Client certificates using Kubernetes cert-manager.

We will start with raw YAML manifests to understand the core mechanics of rigid mTLS communication. Then, we will explore how to eliminate long-lived Kubernetes Secrets using the cert-manager CSI Driver, before wrapping up with a practical Helm example to cleanly automate the entire certificate lifecycle for production deployments.

Kubernetes cert-manager Tutorial: How to Set Up Custom CA

Posted on June 12, 2026June 30, 2026 by Marco Antonio Carcano

Kubernetes cert-manager Tutorial: How to Set Up Custom CA post provides a quick overview of using cert-manager on Kubernetes, showing how to easily set up a CA with the simple CA Issuer.

Certificate management is not just a security sensitive task dealing with issuing security sensitive objects: it is a cumbersome activity including taking care of handling the reissuing of expiring certificates before they reach their end of life, delivering them to the consuming services.

In Kubernetes cert-manager Tutorial: How to Set Up Custom CA post we discuss how to simplify this process using cert-manager, automating the issuing and renewal of issued certificates.

Kubernetes Backup – perform Gitea backup on S3 with MinIO

Posted on December 8, 2025June 27, 2026 by Marco Antonio Carcano

When dealing with Kubernetes, backing up an application's data is not as straightforward as when the application is installed directly on your system. Due to its design, Kubernetes orchestrates applications to make them resilient by horizontally scaling them as needed and restarting them upon failure. This often results in applications being started or restarted on different worker nodes in an unpredictable manner.
Moreover, it is often not possible to attach a container for running the backup process to an already running pod. Given these factors, it is clear that backing up applications on Kubernetes introduces additional challenges. Kubernetes Backup - perform Gitea backup on S3 with MinIO shows how to run backups of Kubernets workloads, providing as example how to backup Gitea on S3.

Vagrant Box Catalog And Vagrant Box Repository Tutorial

Posted on November 25, 2025June 27, 2026 by Marco Antonio Carcano

As we saw in the Vagrant - installing and operating post, Vagrant provides a convenient way for automating the setup, configuration and management of virtual machines, enabling reproducible and consistent development environments.

In that post, we also had an overview of how to create a Vagrantbox from scratch for the Parallels provider. We then digged further the process of creating Vagrant boxes from scratch in the Create Oracle Linux 10 aarch64 Vagrantbox for UTM post, where we generated a full featured Vagrant box for ARM64 using the UTM provider.

The missing part to complete your Vagrant skill sets is the creation of Vagrant Boxes Repositories, grouping them into a Vagratn Box Catalog and publish them on an HTTP server, so to make them available to other users.

Vagrant Box Catalog And Vagrant Box Repository Tutorial explains how to pack mutliple Vagrant boxes into a box repositotory and publish it on an HTTP server.