DevOps & Cloud

Documentation drift isn't a docs problem — it's a smell. The tools I forgot to document turned out to be the most dangerous ones in the project.

Your Terraform state file is the single most sensitive artifact in your cloud. It is a complete map...

How to Package a Running Docker App and Deploy It on a Different Machine (No Source Code, No Downtime) Continue reading on Medium »

Reference: https://aws.amazon.com/blogs/compute/upgrading-lambda-function-runtimes-at-scale-with-aws-transform-custom/ Continue reading on AWS Tip »

Am I the only DevOps engineer that has an array of options appear in my mind when dealing with people at work. ​ I'll start by listing some of my most recent di

TL;DR: I built a .NET library that renders Helm charts and drives Kubernetes releases without...

A year of running a paid service alone. My Claude Code memory has more battle scars than my runbook. Here's what I'd tell my past self.

For context: our customer is clueless about the work we are doing. I don’t want to get too specific about the nature of the work or the customer to avoid potent

The deploy script had been running in production for four months without a problem. It built releases into a temp directory, ran some… Continue reading on Mediu

Someone runs the formatter, the line width changes, and suddenly the pull request touches 80 lines....

Five real debugging scenarios: ephemeral containers, distroless images, CrashLoopBackOff, node-level access, and network tracing with… Continue reading on Beyon

Sysdig's agent-driven container escape report is not scary because the primitives are new. It is scary because orchestration-plane mistakes are now easy for an

Kikplate started as a simple idea. A plate is a project template backed by a real GitHub repository, and the CLI lets you pull one down in… Continue reading on

Most Kubernetes tutorials stop at “the cluster is running” or focus on a single component in isolation. In reality, that’s just the… Continue reading on Medium

After hitting a sitemap _redirects bug and a Bluesky image race condition, I added three targeted smoke checks that catch silent Cloudflare Pages failures fast.

The same failures keep appearing. The same decisions keep going wrong. The same career moments keep repeating. This is the pattern library… Continue reading on

The same failures keep appearing. The same decisions keep going wrong. The same career moments keep repeating. This is the pattern library… Continue reading on

A field guide to debugging the “fast in localhost, slow in prod” problem — and the one missing line that caused it Continue reading on Medium »

By default, crowdsec-firewall-bouncer injects its own chain into iptables. That works fine on a simple system where nothing else is… Continue reading on Medium

The hardest part of frontend testing isn't writing the test. It's getting the backend to return the...

The multipass obsession continues… Continue reading on Medium »

Chaos engineering has a credibility problem. Half the teams that adopt it are doing it because it's...

By Prabhu Jayaseelan AWS Ambassador | 14x AWS Certified | Golden Jacket Holder | 9 min read Continue reading on Medium »

This was the second month in a row I hit the GitHub Actions minutes limit. And I'd already switched...

From someone who’s deployed both in production and paid the price of choosing wrong. Continue reading on Medium »

got paged for something flaky on a system that, turns out, only one engineer really understood, and she left like 6 months ago. spent 3 hours debugging somethin

A measured, claim-by-claim case for why discarded smartphones can replace cloud servers for bursty, latency-tolerant workloads and why Google just backed a 2,00

One of the biggest mistakes I see in cloud environments is treating observability as an afterthought. Continue reading on Medium »

How I Built a CDN SaaS in 30 Days 🚀 Building CDNZero: From Idea to Production Over the...

The Never-Ending Quest for Reliable E2E Testing As I sat in front of my computer, sipping my morning...

If your users are inside mainland China, the standard region-routing tricks fall apart. IP geolocation is unreliable behind the Great Firewall, so instead of gu

If your app only talks to AWS, LocalStack is fantastic. But the moment a service reaches into GCP or...

Multiple rounds of 'reconstruct the firewall' work each added a fresh generation of rules without removing the old one. Because RouterOS evaluates rules in orde

Most Kubernetes clusters accept any container image, any privilege level, and any resource configuration by default. Kyverno lets you enforce policies at admiss

kubectl apply succeeds, the field reverts within seconds, and there's no error anywhere. Two ArgoCD debugging patterns that hit the same homelab three times in

A practical walkthrough of the cache-aside pattern — why it exists, how to implement it, and what...

How to build security into your CI/CD pipeline without slowing down development? Continue reading on Stackademic »

Kubernetes Was Built for Scale—Not for Cost Efficiency Kubernetes has transformed the way...

SaaS finance apps know your salary, your spending, your net worth, and where you invest. That data is...

The first time someone explained DevOps to me, I had the same reaction most people do: “Wait, I already do all of that.” And that reaction… Continue reading on

A security tool should be willing to scan itself. I used the public eliottreich/taskbounty-check...

Imagine you are responsible for maintaining a website: Continue reading on Medium »

Originally published at shieldly.io/blog. Of all the IAM permissions that appear in misconfigured...

The engineering trade-offs behind a multi-tenant CI platform on AWS — ~40 teams, ~10k jobs/day, and the honest cost of each decision. Continue reading on Medium

Hey developers, ever feel like you're constantly chasing productivity hacks, only to find yourself...

AWS Systems Manager Parameter Store is regional by design. If you create a parameter in ap-south-1,...

Hey everyone, Senior DevOps engineer at a mid-sized e-commerce company in India here. We’re currently planning a complete overhaul of our observability stack. W

You've probably had this incident. Dashboards are all green. CPU is fine. Memory looks good. Pods...