Skip to main content

Practical DevOps, Cloud, AI & Linux engineering guides

Featured Article

GitLab's New Rate Limits: What to Fix Before Oct 19

GitLab is capping unauthenticated API calls at 60 an hour starting October 19, and the preview windows land before most teams will have noticed.

KU
Kiril UrbonasAI Engineer
|Oct 4, 2026
GitLab's New Rate Limits: What to Fix Before Oct 19

Most read

  1. 01
  2. 02
  3. 03
  4. 04
  5. 05

Topics

Latest Articles

View All →
Drift happens when real infrastructure diverges from your Terraform config, and here is how to spot it and put it back in sync.
••2 months ago

How to Detect and Fix Terraform Drift

Drift happens when real infrastructure diverges from your Terraform config, and here is how to spot it and put it back in sync.

KU
Kiril Urbonas·2 min read·25
Read article
A stuck state lock stops every apply cold, and the fix is one command away once you confirm nobody else is actually running Terraform.
••2 months ago

Fix "Error Acquiring the State Lock" in Terraform

A stuck state lock stops every apply cold, and the fix is one command away once you confirm nobody else is actually running Terraform.

KU
Kiril Urbonas·2 min read·14
Read article
A practical look at when to reach for count, when for_each saves you, and the specific errors each meta-argument tends to throw.
••2 months ago

Terraform count vs for_each (and the Errors)

A practical look at when to reach for count, when for_each saves you, and the specific errors each meta-argument tends to throw.

KU
Kiril Urbonas·2 min read·24
Read article
A practitioner's comparison of Trivy, Grype, and Snyk for finding CVEs in container images, plus how to wire scanning into CI without drowning in noise.
••2 months ago

Container Vulnerability Scanning: Trivy vs Grype vs Snyk

A practitioner's comparison of Trivy, Grype, and Snyk for finding CVEs in container images, plus how to wire scanning into CI without drowning in noise.

KU
Kiril Urbonas·3 min read·35
Read article
Your pipeline holds the keys to production and signs off on everything you ship, so harden both the pipeline itself and the artifacts it builds.
••2 months ago

How to Secure Your CI/CD Pipeline (DevSecOps)

Your pipeline holds the keys to production and signs off on everything you ship, so harden both the pipeline itself and the artifacts it builds.

KU
Kiril Urbonas·2 min read·19
Read article
A service mesh solves real problems and creates new ones. This is the map: what it actually does, when it earns its cost, and how the options compare.
••2 months ago

Service Mesh Explained — Do You Need One in 2026?

A service mesh solves real problems and creates new ones. This is the map: what it actually does, when it earns its cost, and how the options compare.

KU
Kiril Urbonas·1 min read·32
Read article
A practical walkthrough to install Istio, turn on automatic mTLS, and run a canary traffic split on Kubernetes.
••2 months ago

Getting Started with Istio: A Hands-On Tutorial (2026)

A practical walkthrough to install Istio, turn on automatic mTLS, and run a canary traffic split on Kubernetes.

KU
Kiril Urbonas·3 min read·27
Read article
A practical, layer-by-layer checklist for securing Kubernetes clusters, workloads, networking, secrets, and the software supply chain.
••2 months ago

Kubernetes Security Best Practices (2026)

A practical, layer-by-layer checklist for securing Kubernetes clusters, workloads, networking, secrets, and the software supply chain.

KU
Kiril Urbonas·2 min read·34
Read article
A practitioner-grade breakdown of Istio and Linkerd across architecture, mTLS, traffic control, performance, and total cost of ownership.
••2 months ago

Istio vs Linkerd: Service Mesh Comparison (2026)

A practitioner-grade breakdown of Istio and Linkerd across architecture, mTLS, traffic control, performance, and total cost of ownership.

KU
Kiril Urbonas·2 min read·67
Read article
A practitioner's checklist for securing AWS, ordered by impact so you fix the things attackers actually exploit first.
••2 months ago

AWS Security Best Practices Checklist (2026)

A practitioner's checklist for securing AWS, ordered by impact so you fix the things attackers actually exploit first.

KU
Kiril Urbonas·2 min read·24
Read article
A practitioner's comparison of Cilium's eBPF, sidecar-less dataplane against Istio's Envoy sidecar and ambient mesh models.
••2 months ago

Cilium vs Istio: eBPF Service Mesh Compared (2026)

A practitioner's comparison of Cilium's eBPF, sidecar-less dataplane against Istio's Envoy sidecar and ambient mesh models.

KU
Kiril Urbonas·2 min read·130
Read article
AI agents went from demos to production this year. This is the map: the frameworks, the protocol tying them together, and the patterns that actually ship.
••2 months ago

Building AI Agents — The 2026 Guide

AI agents went from demos to production this year. This is the map: the frameworks, the protocol tying them together, and the patterns that actually ship.

KU
Kiril Urbonas·2 min read·28
Read article
Page 10 of 47 · 559 posts