Posts

78 articles on DevOps, Cloud, and Infrastructure.

EMQX Production Deployment via Helm

Enterprise MQTT broker on Kubernetes with JWT auth, TLS, auto-scaling, backup/recovery, and Prometheus monitoring.

messaging emqx mqtt +3

Gateway API Migration — Helm Chart for Ingress to Gateway API

Automate Ingress to Gateway API migration with a Helm chart that creates HTTPRoutes and HealthCheckPolicies for multiple apps.

kubernetes gateway-api helm +3

GKE Cluster Creation — Best Practices Guide

Production-grade GKE cluster setup: node pools, security hardening, networking, and environment-specific configurations.

gcp gke kubernetes +3

Grafana Alloy Migration — Replace Promtail with Alloy

Step-by-step migration from Promtail to Grafana Alloy for log collection and trace ingestion in Kubernetes.

observability grafana alloy +3

Loki Distributed on Kubernetes — Helm Production Guide

Production Loki deployment with GCS backend, SimpleScalable mode, retention policies, and optimized ingestion limits.

observability loki grafana +3

Tempo Distributed on Kubernetes — Helm Production Guide

Production Tempo deployment with GCS storage, OTLP/Jaeger/Zipkin receivers, metrics generator, and vParquet4.

observability tempo grafana +3

Unbound DNS — Best Practice Setup

Modular Unbound DNS resolver configuration with forwarding zones, caching, access control, and management best practices.

dns networking unbound +2

VPC Resource Gateways — Implementation Patterns & Use Cases

Deep dive into VPC Resource Gateways: private RDS access across accounts, overlapping CIDR connectivity, centralized interface endpoints without Transit Gateway, and proxying to public SaaS domains.

aws vpc networking +4

KEDA — Event-Driven Autoscaling on Kubernetes

Deep dive into KEDA (Kubernetes Event-Driven Autoscaler) — architecture, ScaledObject CRDs, CloudWatch scaler with EKS IRSA, load testing, and production considerations.

kubernetes autoscaling keda +4

From Ingress to Gateway API in AWS EKS

Why the Kubernetes Gateway API is replacing traditional Ingress on EKS — separation of concerns between platform and application teams, cleaner multi-tenant routing, and production-ready patterns with the AWS Load Balancer Controller.

kubernetes aws eks +4

Karpenter on EKS — Automatic Node Provisioning at Scale

Why Karpenter has replaced Cluster Autoscaler as the default node scheduler on EKS — group-less scaling, built-in consolidation, and how to configure NodePools and EC2NodeClass for production workloads.

kubernetes aws eks +4

How to Set Up Custom SSH Configurations for GitHub Projects

A step-by-step guide to managing multiple SSH keys for different GitHub projects using custom configurations.

GitHub SSH DevOps +1

Terraform Interview Preparation Guide

Prepare for Terraform and IaC interview questions — state management, module design, CI/CD integration, and real-world infrastructure scenarios.

interview terraform iac +2

Kubernetes Interview Preparation Guide

Ace your Kubernetes interview — cover architecture, networking, storage, security, and troubleshooting with curated questions and real-world scenarios.

interview kubernetes preparation +3

CI/CD Interview Preparation Guide

Master CI/CD interview questions — pipeline design, branching strategies, deployment patterns, and tooling comparisons for DevOps and platform engineering roles.

interview cicd devops +4

AWS Interview Preparation Guide

Curated AWS interview questions and answers covering networking, compute, storage, security, and architecture — structured for cloud engineering interviews.

interview aws cloud +4

SRE — Keeping the Lights On

Day two operations for reliable systems: monitoring, alerting, incident management, capacity planning, and the operational practices that keep services running.

sre operations incident-management +3

SRE — Humans and Organizations

How to structure SRE teams, build an SRE culture, and navigate the organizational challenges of implementing reliability engineering practices.

sre culture organization +3

SRE — What and Why

Site Reliability Engineering fundamentals: SLIs, SLOs, error budgets, toil reduction, and how SRE bridges the gap between development and operations.

sre reliability principles +3

Implementing Grafana Alloy via Helm in Kubernetes

Deploy Grafana Alloy as a telemetry collection pipeline in Kubernetes — replace multiple agents with a single, flexible collector for metrics, logs, and traces.

grafana alloy monitoring +4

Mounting JSON Service Account Credentials via Kubernetes Secrets

Securely mount JSON service account key files into pods using Kubernetes Secrets — proper volume mounts, permissions, and rotation strategies.

kubernetes secrets security +2

How Pod Disruption Budgets Work

Protect your Kubernetes workloads from voluntary disruptions — node drains, cluster upgrades, and spot instance preemptions — with properly configured PDBs.

kubernetes pdb reliability +2

Kubernetes Control Plane Internals

What happens when you run kubectl apply? A deep dive into the Kubernetes control plane — API server, etcd, scheduler, and controller manager internals.

kubernetes control-plane etcd +3

Kubernetes Resource Naming Standardization

Establish consistent naming conventions for Kubernetes resources — namespaces, deployments, services, and labels — to improve discoverability and automation.

kubernetes naming standards +2

Kubernetes CSI — Container Storage Interface

How the Container Storage Interface (CSI) enables pluggable storage in Kubernetes — from PersistentVolume provisioning to volume snapshots and resizing.

kubernetes storage csi +3

Kubernetes Networking & CNI — How Container Networking Works

Deep dive into Kubernetes networking: the CNI specification, how Calico and Cilium implement pod networking, and the Linux primitives that make it all work.

kubernetes networking cni +4

Cross-Namespace CronJob Centralization in Kubernetes

Centralize CronJob management across multiple namespaces using a controller pattern — schedule and monitor all your cluster's cron jobs from one place.

kubernetes cronjob rbac +2

Workload Identity & IRSA on EKS

Implement fine-grained IAM roles for Kubernetes pods using IAM Roles for Service Accounts (IRSA) on Amazon EKS — no more sharing instance profiles.

aws eks iam +4

AWS Well-Architected Framework — Production Reference

A practical guide to applying the AWS Well-Architected Framework's six pillars to real production workloads for security, reliability, and cost efficiency.

aws well-architected architecture +3

How AWS PrivateLink Works

Deep dive into AWS PrivateLink architecture — how VPC endpoints route traffic privately without traversing the public internet, and when to use Interface vs Gateway endpoints.

aws networking privatelink +2

AWS Landing Zones — Control Tower, AFT & Enterprise Patterns

Design and deploy a multi-account AWS Landing Zone using Control Tower and AFT to enforce governance, security, and networking at scale.

aws landing-zone control-tower +3

AWS FinOps — Cloud Financial Operations

Implement FinOps practices on AWS: cost allocation tags, budgeting, anomaly detection, savings plans, and building a cost-aware engineering culture.

aws finops cost-optimization +2

Egress Inspection with AWS Gateway Load Balancer

Implement centralized traffic inspection for outbound flows using AWS Gateway Load Balancer with third-party security appliances.

aws networking security +3

Pre-commit & Policy-as-Code for Infrastructure

Shift-left infrastructure validation with pre-commit hooks and policy-as-code — catch misconfigurations before they reach production.

terraform iac policy-as-code +4

EC2 Instance Scheduler — Automating Start/Stop to Reduce Costs

Implement automated scheduling for EC2 and RDS instances to shut down non-production resources during off-hours and cut cloud costs.

aws ec2 cost-optimization +3

Prometheus on Kubernetes — kube-prometheus-stack Helm (v3.12)

Deploy the full Prometheus monitoring stack on Kubernetes with kube-prometheus-stack Helm chart — Prometheus v3.12, Grafana, Alertmanager, and Operator.

monitoring prometheus grafana +5

Split-Horizon DNS Forwarding (BIND9, dnsmasq, Unbound)

Configure split-horizon DNS to resolve internal and external hostnames differently — essential for hybrid cloud and multi-network environments.

dns networking bind9 +4

Grafana Tempo on Kubernetes — Distributed Tracing with Helm

Deploy Grafana Tempo for object-storage-based distributed tracing with TraceQL, Metrics Generator, and native Grafana integration.

monitoring tempo tracing +5

Thanos on Kubernetes — Global Prometheus with Helm

Deploy Thanos for unlimited Prometheus retention, global query view, and high availability across clusters using Bitnami Helm chart.

monitoring thanos prometheus +4

Uptime Kuma — Self-Hosted Monitoring & Status Pages

Deploy Uptime Kuma for uptime monitoring, SSL checks, and public status pages — self-hosted alternative to UptimeRobot and Pingdom.

monitoring uptime-kuma observability +4

IaC CI/CD: Terraform & Terragrunt Pipelines

Build automated CI/CD pipelines for infrastructure code — plan on PR, apply on merge, with Terragrunt for multi-environment DRY configurations.

terraform terragrunt cicd +3

Terraform Best Practices & Core Principles

Production-grade Terraform practices: module design, state management, DRY configurations, remote backends, and collaboration workflows for infrastructure teams.

terraform iac best-practices +2

Centralized VPC Endpoints & Private DNS Resolution

Design patterns for centrally managing AWS VPC Endpoints and private DNS resolution across multi-account, multi-VPC environments.

aws networking vpc +3

EMQX on GKE — MQTT Broker with Gateway API

EMQX 3-node cluster with JWT auth, webhooks, and Gateway API routing.

messaging emqx mqtt +4

GKE FrontendConfig — Auto Redirect HTTP to HTTPS

GKE FrontendConfig for automatic HTTP to HTTPS redirect using Load Balancer-level configuration.

gcp gke kubernetes +4

GKE Gateway API — Production Migration from Ingress

Complete Gateway API migration guide with Gateway, HTTPRoute, GCPBackendPolicy, and canary deployments.

gcp gke kubernetes +4

HyperDisk Balanced High Availability for Multi-AZ GKE

HyperDisk Balanced HA for stateful workloads surviving zone failures on GKE.

gcp gke kubernetes +4

WebRTC TURN/STUN with Coturn on Kubernetes

Coturn deployment for MyApp customer calls with Envoy Gateway UDPRoute.

gcp gke kubernetes +5

Kafka Cluster with Docker — ZooKeeper and KRaft

Multi-broker Kafka cluster with Docker Compose.

messaging kafka docker +3

Kafka on GKE with KRaft — No ZooKeeper

KRaft mode Kafka cluster on GKE StatefulSet.

messaging kafka gke +3

Kafka on GKE with ZooKeeper — StatefulSet

Kafka + ZooKeeper cluster on GKE with StatefulSet.

messaging kafka gke +3

Kafka Standalone on VM — Bare Metal Installation

Single-broker Kafka with ZooKeeper on bare metal VM.

messaging kafka vm +3

Kafka UI on GKE — Kafbat UI via YAML and Helm

Kafbat UI deployment on GKE with YAML and Helm options.

messaging kafka gke +4

Building a MicroK8s Sandbox Cluster on Proxmox

3-node MicroK8s cluster on Proxmox VMs for local development.

kubernetes microk8s proxmox +3

The Silent Data Loss Bug: How Prepared Statements Break PostgreSQL Connection Pooling

Why PostgreSQL connections are expensive, how PgBouncer Transaction Mode breaks prepared statements, and the silent data loss bug that haunts auto-scaling apps.

postgresql pgbouncer connection-pooling +4

RDS Proxy on AWS — Connection Pooling for ECS with Terraform

RDS Proxy implementation for ECS tasks with Terraform — IAM, security groups, credential rotation, and connection pooling.

aws rds rds-proxy +5

Shared VPC with Google Managed Services on GKE

Private Service Access and Shared VPC for GKE services.

gcp gke kubernetes +3

VerneMQ on GKE — MQTT Broker via Helm

VerneMQ Helm deployment as EMQX alternative.

messaging vernemq mqtt +3

Why We Migrated from Ingress to Gateway API on GKE

Production retrospective of migrating from Ingress to Gateway API.

gcp gke kubernetes +4

Centralized Egress — Transit Gateway & NAT Gateway

Designing a scalable centralized egress architecture on AWS using Transit Gateway and NAT Gateway for outbound traffic from multiple VPCs.

aws networking vpc +3

GitOps — Git as the Source of Truth

Implement GitOps with Argo CD or Flux — use Git as the single source of truth for declarative infrastructure and application configuration.

gitops cicd argocd +3

IaC Paradigms, Patterns & Decisions

Understanding the foundations of Infrastructure as Code — declarative vs imperative, mutable vs immutable, and when to use Terraform, Pulumi, or CloudFormation.

terraform iac infrastructure +3

GitHub Actions — CI/CD Pipeline Reference

A comprehensive reference for building production-grade CI/CD pipelines with GitHub Actions — OIDC authentication, matrix builds, caching, and reusable workflows.

cicd github-actions automation +3

DORA Metrics — Measuring Software Delivery Performance

Use the four DORA metrics — Deployment Frequency, Lead Time, MTTR, and Change Failure Rate — to measure and improve your software delivery performance.

cicd dora metrics +3

Build Once, Deploy Many

The fundamental CI/CD principle of immutable artifacts — build your application once, then promote the exact same artifact through all environments.

cicd devops artifact-management +3

Blue/Green Deployment Strategy

Zero-downtime deployments using blue/green patterns — run two identical environments and swap traffic instantly when the new version is verified.

cicd deployment kubernetes +3

CI/CD — Best Practices & Core Principles

Production-proven CI/CD patterns: fail-fast pipelines, trunk-based development, artifact promotion, immutable builds, and deployment strategies.

cicd devops best-practices +2

CI/CD Paradigms, Concepts & Philosophies

Understanding the foundational concepts behind CI/CD — continuous integration, continuous delivery, and continuous deployment — and when to use each.

cicd devops foundations +2

Migrating to GKE Workload Identity

Replace static service account keys with GKE Workload Identity — federate Kubernetes service accounts with Google Cloud IAM for secure, automated credential management.

gcp gke identity +3

Pod Disruption Budgets in GKE with Spot VMs

Best practices for configuring Pod Disruption Budgets on GKE when using Spot VMs to balance cost savings with workload reliability.

gcp gke kubernetes +4

Git Branching Strategy & Workflow Guide

A practical guide to Git branching strategies — trunk-based development, Git Flow, and GitHub Flow — and how to choose the right one for your team.

git branching trunk-based-development +2

Setting Up a MongoDB Replica Set

Step-by-step guide to deploying a production MongoDB replica set — automatic failover, read scaling, and data redundancy for high availability.

mongodb database replication +2

MongoDB Monitoring with Prometheus and Grafana

Complete guide to setting up mongodb_exporter for monitoring MongoDB performance and health using Prometheus and Grafana.

mongodb prometheus grafana +2

Repository Naming Conventions Best Practices

A comprehensive guide to establishing clear and consistent naming conventions for repositories to enhance collaboration and code discoverability.

git devops best-practices +1

Docker Multi-stage Builds for 6 Languages

Production-ready multi-stage Dockerfiles for Go, Python, Java, Laravel (PHP), Ruby on Rails, and Vue.js — reduce image size by 80-98%.

docker devops multi-stage +6

MikroTik Firewall Automation with Express.js

Build an Express.js microservice to automate MikroTik firewall rules via REST API — dynamic IP whitelisting for CI/CD runners with 30-min TTL.

mikrotik firewall express +3

WireGuard Setup: Server + Client

Deploy a WireGuard VPN server and connect clients on Ubuntu/Debian — complete guide covering key generation, server/client configs, split tunneling, and troubleshooting.

wireguard vpn linux +1

CI/CD Pipeline Automation

How to set up an efficient CI/CD pipeline for your projects.

ci-cd automation devops +1