DevOps Engineer
376 articles published
Evicted pods are the kubelet telling you a node ran out of something. Here's how to read the signal, stop the bleeding, and keep it from happening again.
A field guide to the OSS observability stack in 2026, sorted by pillar, with honest notes on where self-hosting pays off and where the ops burden bites.
Your push bounces because the remote moved on without you. Here is how to catch up cleanly, when to rebase versus merge, and when a force-push is actually safe.
We ran the same test suite on both platforms for a year. Here's where CircleCI earns its price, where GitHub Actions wins on simplicity, and what the bill actually looks like.
Prompt injection is not a prompt bug, it is an architecture problem. Here is how we design LLM apps so a poisoned document cannot hijack them.
The metrics stack you self-host is free software plus a real ops bill. Datadog hands you everything and mails you the invoice. Here's how we pick.
AWS gives you four ways to pay for compute and three of them cut the bill. Here is how to pick, and how to stack them without painting yourself into a corner.
Exit 137 usually means the kernel shot your container for eating too much memory. Here's how to confirm the OOM kill and stop it happening again.
How pods can talk to AWS, GCP, and Azure with no static keys — using audience-bound projected ServiceAccount tokens and the cluster OIDC issuer.
One vendor sends the invoice, the other sends the ops work. Here's how we pick between Datadog and the Grafana stack without regretting it later.
We ripped every client secret out of our CI pipelines by pointing Azure federated credentials at GitHub's OIDC issuer. Here's the exact setup and the claims that trip people up.
A Pending pod means the scheduler couldn't place it or the node couldn't start it. Here's how to read the events and clear the eight causes we hit most.