Work
Projects
Upstream fixes to Kong projects, open source tools, and a few things from the Apigee years.
Upstream
When something is broken in a tool I depend on, I’d rather fix it upstream than work around it.
- Kong/kong-operator Certificate rotation without 401s: register the renewed KonnectExtension client certificate with Konnect before data planes use it.
- Kong/developer.konghq.com Document that kongctl lint uses vacuum rulesets, with a working example.
- Kong/kwot Inject RBAC user tokens from environment variables: CI secrets, no YAML pre-processing.
Open source
- kongctl-lint-governance A kongctl lint ruleset for Kong AI Gateway and MCP configuration, used as a pull-request gate before apply.
- kong-grafana-observability-stack Metrics, logs and traces from a Konnect hybrid gateway, wired into Prometheus, Loki and Tempo on a local kind cluster with one command.
- kong-konnect-observability-datadog The same idea wired into Datadog, as Terraform.
- dvm decK Version Manager, written during a Kong 2.8 to 3.4 upgrade. For new work I recommend pinning tools with mise instead.