<![CDATA[Tuft Mesh Vault]]> https://tuftmeshvault.com/ en <![CDATA[Running a service mesh without Kubernetes]]> https://tuftmeshvault.com/notes/service-mesh-without-kubernetes.html https://tuftmeshvault.com/notes/service-mesh-without-kubernetes.html Sun, 02 Aug 2026 19:43:18 GMT <![CDATA[How zero-downtime certificate rotation actually works]]> https://tuftmeshvault.com/notes/mtls-certificate-rotation-zero-downtime.html https://tuftmeshvault.com/notes/mtls-certificate-rotation-zero-downtime.html Thu, 16 Jul 2026 14:13:54 GMT <![CDATA[Using the policy engine dry-run mode before you commit]]> https://tuftmeshvault.com/notes/policy-engine-dry-run-mode-explained.html https://tuftmeshvault.com/notes/policy-engine-dry-run-mode-explained.html Sun, 28 Jun 2026 15:32:31 GMT <![CDATA[What Prometheus metrics a service mesh should expose]]> https://tuftmeshvault.com/notes/prometheus-metrics-service-mesh.html https://tuftmeshvault.com/notes/prometheus-metrics-service-mesh.html Fri, 29 May 2026 15:51:59 GMT <![CDATA[SPIFFE workload identity: what it is and why it matters]]> https://tuftmeshvault.com/notes/spiffe-workload-identity-explained.html https://tuftmeshvault.com/notes/spiffe-workload-identity-explained.html Fri, 24 Apr 2026 07:33:40 GMT <![CDATA[Migrating off Istio: what to plan for]]> https://tuftmeshvault.com/notes/migrating-from-istio-to-self-hosted-mesh.html https://tuftmeshvault.com/notes/migrating-from-istio-to-self-hosted-mesh.html Sun, 08 Mar 2026 14:21:24 GMT <![CDATA[Getting Tuft Mesh Vault audit logs into your SIEM]]> https://tuftmeshvault.com/notes/audit-log-siem-integration.html https://tuftmeshvault.com/notes/audit-log-siem-integration.html Thu, 19 Feb 2026 09:44:21 GMT <![CDATA[Why Tuft Mesh Vault is written in Go]]> https://tuftmeshvault.com/notes/go-service-mesh-design-decisions.html https://tuftmeshvault.com/notes/go-service-mesh-design-decisions.html Wed, 28 Jan 2026 11:24:23 GMT