Tag: #devops
Writing on GPUs, LLMs, MLOps, Kubernetes — and mindset · 196 posts
Advanced OAuth Flows — When You Need CIBA, Device Flow, and DPoP
A guide to advanced OAuth mechanisms for authentication scenarios that the standard redirect flow cannot solve. Covers the Device Authorization Grant (RFC 8628), CIBA with its poll/ping/push modes, the DPoP (RFC 9449) pr
2026-06-12 · 15 min read #oauth2#oidc#keycloak#ciba#dpopKeycloak HA on Kubernetes — Infinispan Clustering and Zero-Downtime Deployments
A hands-on guide to running Keycloak with high availability on Kubernetes. We compare the Operator and Helm, walk through Infinispan caches and JGroups DNSPING, persistent user sessions, the 26.6 zero-downtime rolling pa
2026-06-12 · 13 min read #keycloak#kubernetes#infinispan#ha#devopsMastering JWT Security — Signature Verification, Key Rotation, and Common Vulnerabilities
We dissect the structure of JWT, JWS, and JWE and cover real-world vulnerabilities such as alg confusion attacks and kid injection, along with their defenses. From JWKS-based key rotation and algorithm selection includin
2026-06-12 · 16 min read #jwt#security#oidc#keycloak#cryptographyKeycloak Authorization Services — Fine-Grained Access Control with UMA 2.0
A deep dive into Keycloak Authorization Services that goes beyond the limits of RBAC. Covers the resource/scope/policy/permission model, the UMA 2.0 grant flow, policy enforcer configuration, decision strategies, and how
2026-06-12 · 16 min read #keycloak#authorization#uma#oauth2#securityHow to Review AI-Written Code — Redesigning Code Review
The surge of AI-generated code has made code review the biggest bottleneck in the development pipeline. This post covers how defect patterns differ between human and AI code, redesigning review strategy around spec compa
2026-06-12 · 18 min read #ai#code-review#ai-agent#engineering-culture#open-sourceLoop Engineering — Design the System That Prompts Your Agent
The era of manually prompting an agent every turn is ending. This post covers plan-act-verify-self-correct loop design, verification loops that wire tests and linters into agent feedback, how to design repo-level guide f
2026-06-12 · 16 min read #ai#loop-engineering#ai-agent#claude-code#devopsWhere Developer Tokens Leak — The VSCode 1-Click Token Theft and Secret Hygiene
Dissecting the June 2026 case of one-click GitHub token theft through a VSCode bug, this post traces the paths along which tokens leak in developer environments. It covers PAT permission design, token rotation, secret sc
2026-06-12 · 15 min read #security#github#tokens#devops#secretsPlatform Engineering & IDPs 2026 Complete Guide — Backstage, Port, Cortex, Humanitec, Crossplane, ArgoCD, Pulumi, Terraform, OpenTofu Deep Dive ♪ Listenable
In 2026 platform engineering is no longer the vague slogan of "DevOps 2.0." Team Topologies has become canonical, "Platform Team" is now a real box on the org chart, Backstage has matured past 1.40 GA, Port, Cortex, OpsL
2026-05-16 · 24 min read #platform-engineering#idp#backstage#port#cortexKubernetes Certifications & Kubestronaut 2026 - The Complete Deep Dive Into CKA, CKAD, CKS, KCNA, KCSA, and the CNCF Roadmap ♪ Listenable
A full 2026 map of CNCF certifications - exam formats and domains for KCNA, KCSA, CKA, CKAD, and CKS, the Kubestronaut and Golden Kubestronaut requirements, recommended study path, killer.sh and KodeKloud usage, cost/ren
2026-05-16 · 22 min read #english#kubernetes#cncf#cka#ckadDevOps PaaS Platforms 2026 — Vercel / Fly.io / Render / Railway / Coolify / Dokploy / Kamal Deep Dive ♪ Listenable
The 2026 PaaS market split into three lanes. Managed (Vercel, Fly, Render, Railway, Cloudflare, Netlify), open-source self-hosted (Coolify, Dokploy, Caprover, Easypanel), and roll-your-own on a VPS (Kamal 2). This piece
2026-05-16 · 20 min read #paas#devops#vercel#fly-io#renderDevOps Secrets Management 2026 Deep Dive - Doppler, Infisical, HashiCorp Vault, AWS Secrets Manager, 1Password CLI, Bitwarden Secrets, SOPS, age ♪ Listenable
A complete map of the DevOps secrets management ecosystem as of May 2026. Covers cloud-native SaaS (Doppler, Infisical, HCP Vault Secrets), enterprise vaults (HashiCorp Vault after the IBM acquisition, CyberArk Conjur, A
2026-05-16 · 28 min read #secrets-management#doppler#infisical#hashicorp-vault#aws-secrets-managerCI/CD Systems 2026 — Deep Dive into GitHub Actions, Buildkite, CircleCI, GitLab, Jenkins, Argo, Tekton, Earthly, and Dagger ♪ Listenable
A complete look at the CI/CD market as of May 2026. GitHub Actions (reusable workflows, OIDC federation, large runners, ARC), Buildkite, CircleCI, GitLab CI/CD, Jenkins (Pipeline + JCasC), TeamCity, Bamboo, Bitrise, Code
2026-05-16 · 22 min read #ci-cd#github-actions#buildkite#circleci#gitlab-ciCI/CD Platforms 2026 Deep Dive — GitHub Actions, GitLab CI, CircleCI, Buildkite, Dagger, Earthly, Drone, Argo CD, Flux ♪ Listenable
A complete map of CI/CD platforms in 2026 — the SaaS Big Four (GitHub Actions, GitLab CI 17.x, CircleCI, Buildkite), the container-native new wave (Dagger, Earthly, Drone, Harness CI), the GitOps layer (Argo CD, Flux, Fl
2026-05-16 · 21 min read #ci-cd#github-actions#gitlab-ci#circleci#buildkiteAI Coding Agents & Assistants 2026 Deep Dive - Cursor, Claude Code, Aider, Cline, Continue, Cody, Copilot Workspace, Windsurf, Zed ♪ Listenable
In 2026, AI coding tools have evolved from autocomplete to agent-edits to autonomous SWE-bench solvers. This deep dive covers Cursor, Claude Code, Aider, Cline, Continue.dev, Sourcegraph Cody, GitHub Copilot Workspace, W
2026-05-16 · 20 min read #ai-coding-agent#cursor#claude-code#aider#clineThe Complete Golden Kubestronaut Roadmap — Conquering All 16 CNCF Certifications (With Per-Cert Study Content, 2026)
Kubestronaut means all 5 Kubernetes certifications; Golden Kubestronaut means all 15 CNCF certifications plus LFCS. This post breaks down all 16 exams one by one — the difference between the two tiers, the two exam forma
2026-05-14 · 14 min read #kubernetes#cncf#certification#kubestronaut#golden-kubestronautFrom Issue to Deploy — Building an Automation Pipeline Where AI Reviews and CI/CD Verifies and Ships (2025) ♪ Listenable
If the previous post was about the 'parts' of AI development automation, this one assembles those parts. You file an Issue; AI opens a PR, another AI reviews it, CI verifies it, a human gates only the core decisions, CD
2026-05-14 · 26 min read #ai-automation#ci-cd#github-actions#ai-code-review#autonomous-pipelineThe Complete LLMOps Guide: Three-Axis Versioning of Model, Prompt, and Eval Set, Canary, Cost Control, and the Platform Team (2025)
Building an LLM product fast has become easy. Running it sustainably is the hard part. Three-axis versioning across model, prompt, and eval set; Shadow/Canary/Blue-Green deployment; cost control through tokens, caching,
2026-04-15 · 11 min read #llmops#mlops#devops#canary#cost-controlPlatform Engineering Complete Guide 2025: Internal Developer Platform, Backstage, Golden Path ♪ Listenable
Everything about Platform Engineering! Building Internal Developer Platforms (IDP), Backstage (Service Catalog/Templates/TechDocs), Golden Paths, Self-service Infrastructure, Developer Experience Metrics, Platform as a P
2026-04-13 · 20 min read #platform-engineering#idp#backstage#golden-path#developer-experienceThe Complete Guide to Flyway -- Automating Database Migrations
A comprehensive guide to automating database migrations with Flyway. Covers installation, configuration, version control, CI/CD integration, and team collaboration strategies.
2026-04-12 · 14 min read #database#flyway#migration#sql#devopsTerraform & IaC Complete Guide — Everything About Managing Infrastructure as Code
Everything about Infrastructure as Code: Terraform fundamentals, HCL syntax, state management, modules, Terragrunt, and real-world AWS examples.
2026-04-12 · 18 min read #devops#terraform#iac#infrastructure#aws