Tessellative Solutions

secure, sovereign open-source platform engineering
expertise without the corporate theater
Platform Engineering
Kubernetes, IDP, PKI, observability, scalability
Dev[Sec]Ops
deterministic GitOps, IaC and CasC environments, SDLC management
Cloud Security
zero trust, encryption at runtime and rest, HSM Integration

recent writeups

LabFromZero Part 4 - IDP and Platform Services
GitOps, IDP, Platform

LabFromZero Part 4 - IDP and Platform Services

IDP and platform services setup
LabFromZero Part 3 - Cluster Bootstraping and GitOps
GitOps, FluxCD, Bootstrapping

LabFromZero Part 3 - Cluster Bootstraping and GitOps

Platform GitOps bootstrapping for the lab environment
LabFromZero Part 2 - Network, k8s, HSM
Network, HSM, Kubernetes

LabFromZero Part 2 - Network, k8s, HSM

From network to cluster with HSM
LabFromZero Part 1 - Hardware, PKI, Security
Hardware, HSM, PKI, Security

LabFromZero Part 1 - Hardware, PKI, Security

Foundations of a lab environment
OpenBAO Auto Unseal with YubiHSM
OpenBAO, Vault, HSM, YubiHSM, PKCS#11, Security

OpenBAO Auto Unseal with YubiHSM

Proof of concept OpenBAO configuration with yubiHSM as the seal provider
Kubernetes on a Hetzner Private Network
IaC, Kubernetes, Hetzner Cloud, Cloud Native, Terraform, OpenTofu, Kubespray

Kubernetes on a Hetzner Private Network

Proof of Concept IaC for managing a Kubernetes cluster on Hetzner Cloud

map your path from lab to prod

open source by default | secure from day 0 | deterministic by design
BlogView on Codeberg
CNCF CKACNCF CKA
CNCF CKSCNCF CKS

contact[at]tessellative.com

Tessellative Solutions • © 2026