blog.wlami.com

Welcome to my blog. Here I write about technology, security, cloud and programming. If you have any questions or need help with any of these topics, you should get in touch with me now:

Featured

• AWS Credentials for k3s Pods, Without a Single Stored Key

  Published:Oct 30, 2026 |  at 06:00 PM

  IRSA without EKS: a k3s cluster as an AWS OIDC provider, issuer documents in S3, no webhook, no access keys. Plus the three gotchas that cost me time.

• Listmonk with Amazon SES: Three Ways It Fails Quietly

  Published:Oct 30, 2026 |  at 04:00 PM

  Lost complaints, skipped recipients and a captcha that only covers half the signup paths: three silent failures in Listmonk 6.2 with SES, and how to fix them.

• Managing INWX DNS with Pulumi

  Published:Oct 27, 2026 |  at 08:00 PM

  My DNS records for four domains live in one Pulumi program, through the INWX Terraform provider. How it is set up, what to do about two-factor auth on the API, and why I stopped clicking through the INWX web UI.

Recent Posts

• 270 GB of images my k3s node never cleaned up

  Published:Nov 1, 2026 |  at 05:30 PM

  The kubelet only deletes unused images when the disk is 85% full. On a 2 TB disk that is never. How I found it, how to check your node, and the one setting that fixes it.

• I let an AI agent upgrade the k3s cluster it runs on

  Published:Nov 1, 2026 |  at 05:00 PM

  Two k3s minor upgrades in one afternoon, done by Claude Code from a session on the node itself. What it checked, what it got wrong, and the one check that proved its fix.

• Two Ahrefs Findings on My Astro Sites, Fixed

  Published:Oct 29, 2026 |  at 09:00 PM

  Canonical URLs without internal links and 2 MB press PNGs: what caused both on my Astro sites, the fixes, and the redirect gotcha I found on the way.

• Managing App Store Connect with Pulumi

  Published:Oct 29, 2026 |  at 08:00 PM

  My iOS app's App Store Connect listing, TestFlight groups and review notes as a Pulumi program: provider audit, import, and what Apple keeps manual.