https://johanneskueber.com/tags/platform-engineering/Recent content in Platform-Engineering on johanneskueber.comHugoen_USSat, 31 Oct 2026 10:00:00 +0100https://johanneskueber.com/posts/2026-10-31-crossplane-opentofu-workspaces/Sat, 31 Oct 2026 10:00:00 +0100https://johanneskueber.com/posts/2026-10-31-crossplane-opentofu-workspaces/<p>Every app in my homelab needs a few things that do not live inside Kubernetes: a bucket for its backups, a DNS record so I can reach it over NetBird, and - since I retired LLDAP in October - an OIDC client in Keycloak. For a long time these were handled in a central OpenTofu environment on my laptop, plus a SOPS-encrypted secret per app into which I copied the client secret by hand. Adding an app meant touching three places, and removing one meant remembering all three. I usually remembered two.</p>