Skip to main content

Reading List About

Featured Article

Handling Vulnerabilities in Production — What We Actually Do

You always have known vulnerabilities. The question is how you triage, patch, and respond. The discipline we run after a few real incidents and a lot of routine work.

DevOps Security Vulnerabilities Cve

A

AdminDevOps Engineer

|May 16, 2026

Handling Vulnerabilities in Production — What We Actually Do

Topics

Terraform185 Monitoring171 AWS143 Kubernetes96 CI/CD83 LLM83 Python81 Linux73 GPT70 Ansible65

Latest Articles

Backstage Adoption: From Demo to 80% Service Coverage in 6 Months

••last month

Backstage Adoption: From Demo to 80% Service Coverage in 6 Months

We launched Backstage in October. Six months in, 80% of services are catalogued, on-boarding takes a third of the time, and we mostly know what owns what.

Kiril urbonas·9 min read

Cloudflare Workers vs Vercel Edge: A Latency-Cost Comparison

••last month

Cloudflare Workers vs Vercel Edge: A Latency-Cost Comparison

We deployed the same edge function on both platforms and measured for a quarter. Where each wins, where each loses, and the surprises along the way.

Kiril urbonas·8 min read

Page 4 of 36 · 424 posts

1...3 4 5...36

DevOpsNess

Practical AI, DevOps, Cloud, and Linux guidance for engineering teams

Weekly deep dives, implementation patterns, and reliability-focused playbooks.

Join Newsletter Browse Posts

A practical blog covering AI, cloud, DevOps, and modern technology for engineering teams.

Explore

Latest Articles
Archive
Reading List

Resources

About
RSS Feed
Newsletter

Legal

eBPF for SREs: Three Real Diagnoses That Saved Hours

••last month

eBPF for SREs: Three Real Diagnoses That Saved Hours

We started using eBPF tooling for ad-hoc production debugging six months ago. Three real incidents where it cut investigation time from hours to minutes.

Kiril urbonas·7 min read

LLM Output Validation: Schema-First Prompt Engineering Patterns

••last month

LLM Output Validation: Schema-First Prompt Engineering Patterns

We invalidate ~6% of LLM outputs before they reach a downstream system. Here's how we structure prompts and validators to catch malformed responses early.

Kiril urbonas·7 min read

Argo Rollouts: Canary Deployments That Caught a $40k Bug

••last month

Argo Rollouts: Canary Deployments That Caught a $40k Bug

A two-line config change to an Argo Rollouts analysis template caught a regression that would have cost ~$40k in API spend before we noticed. Here's the pattern.

Kiril urbonas·7 min read

Pulumi vs Terraform: What 18 Months of Production Taught Us

••last month

Pulumi vs Terraform: What 18 Months of Production Taught Us

We ran Pulumi in TypeScript and Terraform in HCL side by side across 60+ services. Each won different categories of work. Here's the breakdown.

Kiril urbonas·7 min read

GCP Workload Identity Federation: Replacing Service Account Keys

••last month

GCP Workload Identity Federation: Replacing Service Account Keys

We deleted every static GCP service account key in our org over six weeks. Here's the migration plan, the gotchas, and the policies we now enforce.

Kiril urbonas·7 min read

Linux Memory Management: When OOM Killer Strikes Your K8s Pods

••last month

Linux Memory Management: When OOM Killer Strikes Your K8s Pods

Three production OOM incidents that taught us how kubelet, containerd, and the kernel actually decide which process dies. With debugging commands you'll wish you had earlier.

Kiril urbonas·7 min read

GitHub Actions Self-Hosted Runners: Why We Switched and What Broke

••last month

GitHub Actions Self-Hosted Runners: Why We Switched and What Broke

Bills hit $3,400/mo for runner minutes. We moved to self-hosted on EKS spot. The savings were real; the surprises were too.

Kiril urbonas·5 min read

Vector Database Selection: Pinecone, pgvector, Qdrant After 6 Months in Production

••last month

Vector Database Selection: Pinecone, pgvector, Qdrant After 6 Months in Production

We ran the same RAG workload across three vector stores for a quarter each. Here's what we learned about latency, cost, and operational overhead.

Kiril urbonas·6 min read

Pre-Commit Hooks That Saved Our Repo: 7 Real Examples

••last month

Pre-Commit Hooks That Saved Our Repo: 7 Real Examples

Every hook on this list caught a bug or a security issue in the last twelve months. The configs are short. The savings have been considerable.

Kiril urbonas·7 min read

EKS Auto Mode: What Worked, What Broke in Our Migration

••last month

EKS Auto Mode: What Worked, What Broke in Our Migration

We moved a 60-node production EKS cluster to Auto Mode. Some pain points evaporated, others got harder. The cost picture is more nuanced than the marketing suggests.

Kiril urbonas·8 min read

Privacy
Terms

© 2026 DevOpsNess. By Kiril Urbonas.

RSS Privacy Terms