Skip to main content

Practical DevOps, Cloud, AI & Linux engineering guides

Featured Article

Terraform Plan Wants to Recreate Your Production Database? Read This First

The plan says -/+ next to your RDS instance and one attribute ends in "forces replacement". Why it happens, how to undo it without data loss, and the CI gate that stops it reaching apply.

KU
Kiril UrbonasAI Engineer
|Oct 30, 2026
Terraform Plan Wants to Recreate Your Production Database? Read This First

Topics

Latest Articles

View All →
The sync succeeds, the app goes green for a second, then OutOfSync again. Almost always a controller is changing a field Git also sets. How to find it and the three fixes, in order of preference.
••22 hours ago

Argo CD App Always OutOfSync? Find the Field, Then Fix It

The sync succeeds, the app goes green for a second, then OutOfSync again. Almost always a controller is changing a field Git also sets. How to find it and the three fixes, in order of preference.

KU
Kiril Urbonas·6 min read·1
Read article
The HorizontalPodAutoscaler is up, traffic is spiking, and replicas won't move. Seven causes in the order we check them, each with the command that confirms it.
••yesterday

Kubernetes HPA Not Scaling? The 7 Causes, in Order

The HorizontalPodAutoscaler is up, traffic is spiking, and replicas won't move. Seven causes in the order we check them, each with the command that confirms it.

KU
Kiril Urbonas·6 min read·1
Read article
GitLab lost six hours of data to one command on the wrong host. Linear lost five hours to one TRUNCATE CASCADE in a reviewed migration. The six guardrails that make that kind of mistake hard to make and cheap to recover from.
••yesterday

How to Stop Anyone From Deleting Your Production Database

GitLab lost six hours of data to one command on the wrong host. Linear lost five hours to one TRUNCATE CASCADE in a reviewed migration. The six guardrails that make that kind of mistake hard to make and cheap to recover from.

KU
Kiril Urbonas·6 min read
Read article
A scary number on the AWS bill is an incident, not a finance question. What to check in the first ten minutes, how to find the line item with two CLI queries, and when to stop the bleeding before you understand it.
••yesterday

Your AWS Bill Just Spiked: The First-Hour Runbook

A scary number on the AWS bill is an incident, not a finance question. What to check in the first ten minutes, how to find the line item with two CLI queries, and when to stop the bleeding before you understand it.

KU
Kiril Urbonas·6 min read·1
Read article
Since Kubernetes 1.35 the kubelet refuses to start on cgroup v1 nodes by default. How to check every node in one command, the safe migration, and the temporary override with an expiry date.
••2 days ago

Kubelet Won't Start After Upgrading to Kubernetes 1.35? It's cgroup v1

Since Kubernetes 1.35 the kubelet refuses to start on cgroup v1 nodes by default. How to check every node in one command, the safe migration, and the temporary override with an expiry date.

KU
Kiril Urbonas·5 min read
Read article
In March 2026 an attacker force-pushed 76 trivy-action tags to an infostealer that read secrets straight out of runner memory. Seven fixes that would have contained it, in the order we'd apply them.
••2 days ago

GitHub Actions Security: 7 Fixes After the Trivy Compromise

In March 2026 an attacker force-pushed 76 trivy-action tags to an infostealer that read secrets straight out of runner memory. Seven fixes that would have contained it, in the order we'd apply them.

KU
Kiril Urbonas·6 min read·1
Read article
Kubernetes is the right answer for fewer teams than run it. Five questions that tell you whether you need it, and what to run instead when you don't.
••2 days ago

Do You Need Kubernetes in 2026? A Decision Framework

Kubernetes is the right answer for fewer teams than run it. Five questions that tell you whether you need it, and what to run instead when you don't.

KU
Kiril Urbonas·6 min read·1
Read article
Senior DevOps interviews have moved from definitions to "it's 2 a.m. and this is broken". Twelve real scenarios, what the interviewer is testing, and the answer that gets the offer.
••3 days ago

12 Scenario-Based DevOps Interview Questions (With Answers)

Senior DevOps interviews have moved from definitions to "it's 2 a.m. and this is broken". Twelve real scenarios, what the interviewer is testing, and the answer that gets the offer.

KU
Kiril Urbonas·7 min read·1
Read article
Most DevOps roadmaps are a wall of logos. This one is an order of operations, with a project that proves each stage and the topics you can safely skip in year one.
••3 days ago

DevOps Engineer Roadmap 2026: What to Learn, in Order

Most DevOps roadmaps are a wall of logos. This one is an order of operations, with a project that proves each stage and the topics you can safely skip in year one.

KU
Kiril Urbonas·7 min read·1
Read article
OpenAI shut down o1, o3-mini, o4-mini and gpt-4-turbo on October 23, and the gpt-4o and gpt-4.1 families follow on January 14. Here is the full calendar and a migration plan that won't break production.
••4 days ago

OpenAI Model Shutdowns: gpt-4o and gpt-4.1 Go Dark Jan 14, 2027

OpenAI shut down o1, o3-mini, o4-mini and gpt-4-turbo on October 23, and the gpt-4o and gpt-4.1 families follow on January 14. Here is the full calendar and a migration plan that won't break production.

KU
Kiril Urbonas·6 min read·16
Read article
GitHub now records the exact commit of every direct and transitive action in .github/workflows/actions.lock. Here is how to adopt it, what it fixes that SHA pinning never did, and where it still leaks.
••4 days ago

GitHub Actions Workflow Lockfiles: Pin Every Action, Including the Ones You Can't See

GitHub now records the exact commit of every direct and transitive action in .github/workflows/actions.lock. Here is how to adopt it, what it fixes that SHA pinning never did, and where it still leaks.

KU
Kiril Urbonas·6 min read·7
Read article
A Harvard study of 718 firms found coding agents raise code output 30% while shipped work barely moves. The gains are stuck in code review. Here is how to unstick them.
••4 days ago

AI Agents Write 30% More Code. Teams Don't Ship More.

A Harvard study of 718 firms found coding agents raise code output 30% while shipped work barely moves. The gains are stuck in code review. Here is how to unstick them.

KU
Kiril Urbonas·7 min read·27
Read article
Page 1 of 48 · 570 posts
of 48