Terraform Drift Detection in CI: Alert-Only vs Auto-Remediate
Terraform drift detection in CI can alert humans or auto-fix infra. I've run both — here's which one saved us and which one bit us.
PostgreSQL Logical Replication Across Kubernetes StatefulSets
A deep dive into PostgreSQL logical replication on Kubernetes StatefulSets — the wire mechanics, common misconfigurations, and production-safe wiring.
Ansible Dynamic Inventory for EC2 Fleets: 7 Tuning Tips
Ansible dynamic inventory for EC2 can throttle your API and break patch runs if left untuned — here's what we fixed after it bit us.
Cloudflare Workers Rate Limiting: 3 KV Mistakes We Made
We built Cloudflare Workers rate limiting on KV assuming it behaved like Redis. It didn't — here's what broke and how we fixed it.
Fix GitHub Copilot Terraform Security Risks Before They Hit Prod
GitHub Copilot Terraform security gaps are silent — valid HCL, clean plan, broken posture. Here's how we block dangerous suggestions in CI.
Self-Hosted Ollama Homelab: 3 Mistakes Running Local LLMs
We ran self-hosted Ollama on a homelab for DevOps automation and hit silent CPU fallback, OOM crashes, and an exposed API. Here's what we fixed.
Automate Kubernetes RBAC Audits with Python and a Custom Controller
Kubernetes RBAC compliance automation caught our cluster-admin misconfiguration after 11 days. Here's the Python controller that now catches it in minutes.
Kubernetes Bash Health Check Scripts vs Native Probes
Native Kubernetes probes pass while your app burns. Here's when to write custom bash health check scripts — and when to leave them alone.
RAG Pipeline for SRE Runbooks: 7 Vector Search Tips That Work
Building a RAG pipeline for SRE runbooks? These 7 practical tips cover embeddings, retrieval tuning, and cost control before you trust it on-call.
AI Code Review for Terraform PRs: CI Checklist and Automation
Set up AI Terraform PR review in CI with this 15-item checklist covering tflint, checkov, GPT-4o plan analysis, and GitHub Actions automation.
☕ Support us · 💳 Monobank