Skip to main content

Featured Article

The Edge Computing Playbook — What to Run at the Edge (and What Not To)

The edge is fast because it's constrained. This is the decision map for what belongs at the edge, what belongs at origin, and how compute, data, caching, and auth fit together.

Cloud Edge Cloudflare Serverless

KU

Topics

Terraform188 Monitoring180 AWS155 Kubernetes112 LLM108 CI/CD94 Linux83 Python81 Security78 GPT74

Latest Articles

Production RAG Reliability — Making LLM Answers Trustworthy

••yesterday

Production RAG Reliability — Making LLM Answers Trustworthy

A demo RAG app is easy; one users trust is not. This is the map for reliable retrieval-augmented generation: grounding, evaluation, retrieval quality, guardrails, and safe rollout.

Kiril Urbonas·4 min read·2

Detecting and Rotating Leaked Cloud Credentials

••yesterday

Detecting and Rotating Leaked Cloud Credentials

Static keys leak. The question isn't if but how fast you notice and how clean your response runbook is when the pager goes off.

Kiril Urbonas·5 min read·2

Page 1 of 27 · 317 posts

Previous

1 2...27

DevOpsNess

Practical AI, DevOps, Cloud, and Linux guidance for engineering teams

Weekly deep dives, implementation patterns, and reliability-focused playbooks.

Join Newsletter Browse Posts

A practical blog covering AI, cloud, DevOps, and modern technology for engineering teams.

Explore

Latest Articles
Archive
Reading List

Resources

About
FAQ
RSS Feed
Newsletter

Kiril UrbonasDevOps Engineer

|

Jul 14, 2026

The Edge Computing Playbook — What to Run at the Edge (and What Not To)

Observability for Edge Functions — Logs, Traces, and Metrics

••2 days ago

Observability for Edge Functions — Logs, Traces, and Metrics

Edge code runs in hundreds of PoPs, lives for milliseconds, and gives you no shell. Here's how we get logs, traces, and metrics out of it anyway.

Kiril Urbonas·6 min read·2

Shadow Testing and Canary Releases for LLM Changes

••2 days ago

Shadow Testing and Canary Releases for LLM Changes

A prompt tweak or model bump can quietly wreck answers everywhere. Ship LLM changes the way you ship risky code: gate, shadow, canary, roll back.

Kiril Urbonas·6 min read·1

OIDC Federation Beyond GitHub — GitLab, Buildkite, and Generic Providers

••2 days ago

OIDC Federation Beyond GitHub — GitLab, Buildkite, and Generic Providers

GitHub Actions OIDC gets all the attention, but GitLab, Buildkite, and CircleCI issue the same signed tokens. Here's how to trust them without opening a hole.

Kiril Urbonas·5 min read·2

Edge Auth — Validating JWTs Without Origin Round-Trips

••3 days ago

Edge Auth — Validating JWTs Without Origin Round-Trips

Verifying signed tokens at the edge with WebCrypto blocks bad traffic early and saves a full origin hop. Here's the pattern we ship, and the traps.

Kiril Urbonas·6 min read·2

Debugging RAG Retrieval — Why It Returns Garbage

••3 days ago

Debugging RAG Retrieval — Why It Returns Garbage

When RAG answers go sideways, the model usually isn't the problem. Here's the top-to-bottom checklist we run to find where retrieval actually breaks.

Kiril Urbonas·6 min read·2

Short-Lived Credentials — STS, Dynamic Secrets, and Why Static Keys Die

••3 days ago

Short-Lived Credentials — STS, Dynamic Secrets, and Why Static Keys Die

Static keys leak and live forever. Short-lived credentials from STS and Vault expire on their own — here's the token-exchange machinery and the TTL math that make it work.

Kiril Urbonas·6 min read·2

Anycast and Geo-Routing — How Requests Reach the Nearest PoP

••4 days ago

Anycast and Geo-Routing — How Requests Reach the Nearest PoP

A request leaving a laptop somehow lands on a server 20ms away. Here is what actually decides which point of presence answers.

Kiril Urbonas·5 min read·2

Long Context vs RAG — When to Use Which

••4 days ago

Long Context vs RAG — When to Use Which

A million-token window doesn't retire your retrieval stack. Here's when to stuff the prompt, when to retrieve, and when to do both.

Kiril Urbonas·5 min read·2

mTLS for Service-to-Service Auth — Beyond API Keys

••4 days ago

mTLS for Service-to-Service Auth — Beyond API Keys

A shared API key between two internal services proves nothing about who is calling. mTLS makes every service present a cryptographic identity instead.

Kiril Urbonas·5 min read·1

Cloudflare Durable Objects — Stateful Coordination at the Edge

••5 days ago

Cloudflare Durable Objects — Stateful Coordination at the Edge

Edge functions run everywhere and remember nothing. Durable Objects give you one addressable, single-threaded instance with transactional storage — the missing source of truth.

Kiril Urbonas·5 min read·1

Legal

Privacy
Terms

© 2026 DevOpsNess. By Kiril Urbonas.

RSS Privacy Terms

Reading List About

Most read

01
Cloudflare Workers vs Vercel Edge: A Latency-Cost Comparison
Cloud · 140 views
02
Azure DevOps Best Practices in 2026: Build Pipelines You Can Trust
DevOps · 82 views
03
GCP Workload Identity Federation: Replacing Service Account Keys
Cloud · 79 views
04
GitOps with Argo CD: Best Practices for 2025
DevOps · 66 views
05
Edge Databases for Low-Latency Apps — D1, Turso, Neon Serverless
Cloud · 52 views