Journal
Product announcements, press releases and the occasional longer essay on enterprise architecture, Kubernetes and building sovereign infrastructure from within the GCC.
Press Release · Tersane
Mamluk today released the Compliance and Assurance Convoy for Bahriya Tersane: it maps a regulator's technical controls onto a Kubernetes cluster, enforces and checks them, and keeps dated evidence for each regime inside the customer's own cluster. The first regime,...
Article · Tersane
How the Compliance and Assurance Convoy turns a Kubernetes cluster into the source of its own regulatory evidence: admission policies in two layers, the cluster's scanners, platform facts,...
Announcement · Kipchak
kipchak/cli 1.0 adds any Kipchak driver or middleware to an API in one command. It installs the package, copies its configuration, initialises it with the drivers it depends...
Announcement · Kipchak
An Enterprise driver and middleware that send a Kipchak API's traces, metrics and logs to any OpenTelemetry backend, with the HTTP, Doctrine, Valkey and Kafka drivers instrumented and...
Announcement · Kipchak
Version 4.0 of the Kipchak starter project is one container with one resource, an OpenAPI document generated from the code, tests and instructions for coding assistants. A new...
Announcement · Kipchak
Two Enterprise middlewares for Kipchak: one decides what each caller may do, from roles, attributes or Open Policy Agent, and the other stops an API from waiting on...
Announcement · Kipchak
A new Enterprise driver keeps database passwords, API keys and other credentials in HashiCorp Vault or OpenBao, and places them in a Kipchak API's configuration when the API...
Announcement · Kipchak
Three additions to Kipchak: a free NATS and JetStream driver, and two Enterprise middlewares that keep personal data out of responses and logs and record a signed audit...
Announcement · Kipchak
A new free Kipchak middleware places routes behind feature flags from Unleash, Flagsmith or GrowthBook, with percentage rollouts that keep each API key in or out.
Announcement · Kipchak
A new free Kipchak middleware caches API responses according to HTTP's own caching rules, with ETags, conditional requests and invalidation when data changes.
Announcement · Kipchak
A new Enterprise middleware lets clients retry POST and PATCH requests safely: an operation sent with an Idempotency-Key runs once, however many times it is retried.
Announcement · Kipchak
A new free Kipchak driver stores embeddings and searches them by similarity in Qdrant, PostgreSQL with pgvector or OpenSearch, for semantic search and retrieval-augmented generation.
Announcement · BKE
BKE 2.2.0 moves the container runtime, Calico and Longhorn, and turns on Longhorn's own network policies. The container runtime gains a directory for local settings that no upgrade...
Announcement · Kipchak
A new free Kipchak driver runs analytics queries against ClickHouse, streams large results and inserts events in batches.
Announcement · Kipchak
A new Enterprise driver connects Kipchak APIs to Active Directory and OpenLDAP, for logging users in, resolving their groups and managing directory entries.
Article · Enterprise architecture
Mamluk's enterprise offering is five layers: Debian, the Bahriya Kubernetes Engine, the Bahriya Tersane charts, the Kipchak framework, and Bahriya Cloud, which runs on the other four. Each...
Announcement · BKE
BKE 2.1.1 corrects the configuration BKE applies to Kong, cert-manager and Netdata. No software version moves and no node drains, so clusters on 2.1.0 upgrade with a single...
Press Release · Tersane
Mamluk today launched Bahriya Tersane, a catalogue of the production Helm charts that run bahriya.cloud, licensed per organisation for installation on the customer's own premises. Formerly the Mamluk...
Announcement · BKE
BKE 2.1.0 brings every bundled component to its latest release compatible with the Kubernetes minor BKE runs. Upgrades now check that the new software accepts your configuration before...
Announcement · BKE
Before the Bahriya Kubernetes Engine changes a component's configuration, it reports what would change and stops. The Passage Plan shows that report in the Mamluk console, in full...
Article · BKE
Most Kubernetes distributions are sold as a finished platform, and the organisation that buys one inherits every decision inside it. BKE is a fixed base and a set...
Announcement · Kipchak
Two new free Kipchak drivers: SFTP for exchanging batch files with partners, and feature flags from Unleash, Flagsmith or GrowthBook.
Announcement · Kipchak
The Kipchak Enterprise runtime image runs an API as a single static FrankenPHP binary on an otherwise empty filesystem, with no shell, no package manager and no root...
Announcement · Kipchak
Kipchak APIs can now record what each customer uses and enforce what each customer has bought, with Usage Metering, Quotas and Kipchak Identity.
Announcement · Kipchak
Two new Kipchak packages: a free middleware that verifies signed requests and webhooks, and an Enterprise driver for Open Policy Agent.
Article · BKE
A bank in Saudi Arabia running production, staging and performance testing on 320 worker cores pays for OpenShift by the core. The same estate on BKE, with Bahriya...
Announcement · BKE
The Bahriya Kubernetes Engine now has a dedicated site, and its installation and operation documentation is public — the same pages our customers operate from, readable before you...
Announcement · BKE
console.maml.uk is open to everyone: licences for BKE and Kipchak Enterprise, versioned documentation and ticketed support in one place — and a 14-day BKE trial you issue yourself,...
Announcement · BKE
BKE 2.0.0 moves the Kubernetes minor and, by design, nothing else. It also brings cluster login through your own identity provider and configuration you own, with upgrades that...
Announcement · Kipchak
kipchak.dev has been redesigned as a full product site, and the Kipchak Enterprise tier now has a published roadmap, published licence terms and support through the Mamluk Console....
Article · Enterprise architecture
Handing a customer-facing product to the IT department — and to an IT manager — is a category error, not a resourcing decision. IT engineering selects, integrates and...
Article · Enterprise architecture
The industry took a word coined to remove a wall and turned it into a department. Splitting development from operations damages a business the way a body would...
Article · Kipchak
A full tour of the enterprise WAF for Kipchak — the rule model, the OWASP defaults, geo and ASN matching, rate limiting and diagnostics.
Announcement · Kipchak
Subashi Pro 1.25 resolves country and ASN from databases bundled with the middleware — no API key, and no network call while a request is in flight.
Press Release · Bahriya Cloud
Bahriya, the first public cloud provider built in the United Arab Emirates, today exited early access. Container deployment, Managed Valkey and Managed Memcached are generally available across four...
Article · Software development
Two years of copilots, agents and pilots, and the delivery numbers have barely moved. Three reasons: the tool does not travel left to right, nobody agreed what the...
Press Release · Bahriya Cloud
Bahriya, the first public cloud provider built in the United Arab Emirates, today launched Managed Valkey — an enterprise in-memory data store engineered in Dubai, with bring-your-own-key TLS,...
Press Release · Company
Mamluk LLC-FZ has completed the relocation of its registered entity from Sharjah Media City to Meydan Free Zone in Dubai, a logistical move that places the company in...
Announcement · Company
We are closing the public 7x service on 1 September 2026 to focus on Bahriya and the Bahriya Kubernetes Engine.
Announcement · Kipchak
Kipchak v3 ships with PHP 8.5 and still maintains compatibility with 8.4.
Article · Kubernetes
CAP theorem to the reality of distributed container ecosystems: Consistency, Availability, Performance, and Tolerance of Network Failures as four dials wired to each other, not a menu you...
Article · Kubernetes
A new availability zone with a local flag on it is not sovereignty. Real control means owning the distribution, the operators and the people who get paged at...
Announcement · Bahriya Cloud
Bahriya - an Edge Container Cloud from Bahriya is now live and accepting early access users.
Press Release · BKE
UAE-based Mamluk LLC today announced a fully managed on-premise Kubernetes offering, run by GCC-resident engineers on the Bahriya Kubernetes Engine, for organisations that cannot send their data offshore....