Luis Siccha

1. Cluster-wide memory policy for Kubernetes

   Traced recurring node exhaustion to an old JDK that ignored container limits, then fixed it at the cluster level — Kyverno mutation policies and namespace LimitRanges — instead of hand-editing every manifest.

   Kyverno · AKS · LimitRange · JVM

2. Session revocation for an identity provider

   Closed penetration-test findings on a client platform by adding single-session enforcement and token revocation to Keycloak: a custom SPI event listener plus a token-validation function backed by Redis, wired through the API gateway.

   Keycloak SPI · Azure Functions · Redis · APIM

3. A Kafka consumer that doesn’t lose events

   Root-caused message loss in a consumer writing to Cosmos DB and rebuilt it with rate limiting, exponential backoff, dead-letter topics and redrive.

   Spring Kafka · Java 21 · Cosmos DB

Reading A Tale of Two Cities, Frankenstein and The House of the Spirits. Finished the CNCF Kubestronaut track in September — all five Kubernetes certifications. Next up: AZ-104, then AZ-305.

• Now What has my attention
• Books A reading log
• Perspective Beyond work
• Uses Tools, and why
• Blog Essays, first one coming
• Digital garden Notes still growing