Skip to main content

Practical DevOps, Cloud, AI & Linux engineering guides

Featured Article

GitLab's New Rate Limits: What to Fix Before Oct 19

GitLab is capping unauthenticated API calls at 60 an hour starting October 19, and the preview windows land before most teams will have noticed.

KU
Kiril UrbonasAI Engineer
|Oct 4, 2026
GitLab's New Rate Limits: What to Fix Before Oct 19

Most read

  1. 01
  2. 02
  3. 03
  4. 04
  5. 05

Topics

Latest Articles

View All →
Handing an agent kubectl is a five-minute job. Proving the fix worked and did no harm is the real work, and it belongs in the wrapper, not the prompt.
••2 weeks ago

AI Agents and Kubernetes Remediation: Write Access Is the Easy Part

Handing an agent kubectl is a five-minute job. Proving the fix worked and did no harm is the real work, and it belongs in the wrapper, not the prompt.

KU
Kiril Urbonas·2 min read·8
Read article
A green readiness probe means the probe endpoint answered, nothing more. The gaps that cause 502s during rollouts, and the Deployment settings that close them.
••2 weeks ago

Kubernetes Readiness Probes Lie During Rolling Updates

A green readiness probe means the probe endpoint answered, nothing more. The gaps that cause 502s during rollouts, and the Deployment settings that close them.

KU
Kiril Urbonas·2 min read·11
Read article
A DPRK-linked group is mailing DevOps candidates Terraform take-home repos whose lock file points at a fake registry. terraform init then runs the attacker's provider.
••2 weeks ago

The Terraform Lock File Is Code: Review It Before You Init

A DPRK-linked group is mailing DevOps candidates Terraform take-home repos whose lock file points at a fake registry. terraform init then runs the attacker's provider.

KU
Kiril Urbonas·2 min read·6
Read article
Kubernetes is promoting KYAML, a strict subset of YAML that any parser accepts. It kills type coercion and indentation bugs without a migration.
••2 weeks ago

KYAML: Kubernetes YAML Without the Norway Problem

Kubernetes is promoting KYAML, a strict subset of YAML that any parser accepts. It kills type coercion and indentation bugs without a migration.

KU
Kiril Urbonas·2 min read·10
Read article
Since 11 September 2026 the 24-hour clock for actively exploited vulnerabilities is live. The owner, the decision path, the SBOM lookup, and the runbook you need this month.
••2 weeks ago

EU CRA Article 14: What DevOps Teams Should Wire In Now

Since 11 September 2026 the 24-hour clock for actively exploited vulnerabilities is live. The owner, the decision path, the SBOM lookup, and the runbook you need this month.

KU
Kiril Urbonas·2 min read·9
Read article
A SHA pin that nobody checks is a label, not a control. Plugin4Shell showed that four major coding agents never checked.
••2 weeks ago

Plugin4Shell: A Pinned Plugin Is Not a Verified Plugin

A SHA pin that nobody checks is a label, not a control. Plugin4Shell showed that four major coding agents never checked.

KU
Kiril Urbonas·2 min read·7
Read article
AWS says it cannot restore data held only in Bahrain (me-south-1) or in one UAE zone. Multi-AZ gave availability, not recovery, and only cross-region copies survived.
••3 weeks ago

AWS Lost a Region for Good: Multi-AZ Is Not Disaster Recovery

AWS says it cannot restore data held only in Bahrain (me-south-1) or in one UAE zone. Multi-AZ gave availability, not recovery, and only cross-region copies survived.

KU
Kiril Urbonas·2 min read·17
Read article
The June to August promotion ended on September 1. Included Copilot credits fell 37% on Business and 44% on Enterprise while seat prices stayed flat. Here is the arithmetic and the controls.
••3 weeks ago

Copilot's September Bill Cliff: Included AI Credits Just Dropped

The June to August promotion ended on September 1. Included Copilot credits fell 37% on Business and 44% on Enterprise while seat prices stayed flat. Here is the arithmetic and the controls.

KU
Kiril Urbonas·2 min read·21
Read article
A background cleanup job saturated the database behind GitHub's permission checks, and the safeguard pacing it watched only replica lag. Throttle on more than one signal.
••3 weeks ago

GitHub's September 13 Outage: One Cleanup Job, 28 Services

A background cleanup job saturated the database behind GitHub's permission checks, and the safeguard pacing it watched only replica lag. Throttle on more than one signal.

KU
Kiril Urbonas·2 min read·13
Read article
Running a coding agent on a laptop is a preference. Running one in a pipeline is an architecture decision about credentials, sandboxing, and non-interactive failure.
••3 weeks ago

AI CLI Agents in CI: Claude Code vs Codex CLI vs Gemini CLI

Running a coding agent on a laptop is a preference. Running one in a pipeline is an architecture decision about credentials, sandboxing, and non-interactive failure.

KU
Kiril Urbonas·2 min read·23
Read article
Most teams shipping retrieval do not need a dedicated vector database. Here is where Postgres runs out, and which specialist actually helps when it does.
••3 weeks ago

Best Vector Databases in 2026: Do You Even Need One?

Most teams shipping retrieval do not need a dedicated vector database. Here is where Postgres runs out, and which specialist actually helps when it does.

KU
Kiril Urbonas·2 min read·20
Read article
Cutting a log bill is not a procurement exercise. It is four decisions about what you drop at the agent, what you index, how long you keep it, and what you never send at all.
••3 weeks ago

The Cheapest Way to Centralize Logs at Scale

Cutting a log bill is not a procurement exercise. It is four decisions about what you drop at the agent, what you index, how long you keep it, and what you never send at all.

KU
Kiril Urbonas·2 min read·10
Read article
Page 2 of 47 · 559 posts