Recent posts tagged devops

🤖 From Writing the Spec to Approving It: What AI-DLC Looks Like on a Real Build > TL;DR > - AI-DLC is public and open source: awslabs/aidlc-workflowshttps://github.com/awslabs/aidlc-workflows. The method comes from this AWS DevOps blog posthttps://...

Most teams think of Flyway only when they need to manage ongoing database schema changes. But what if your project already has a complete, stable schema and you’re only now introducing version control? Or what if you want to incorporate your schema i...

A 64M scratch tmpfs, a worker process holding its log open on file descriptor 3, and the usual reflex when space runs low: rm the log. du on the directory dropped from 48M to 0. df stayed at 48M used. The next 32M write failed with No space left on d...

Timing tests look wonderfully objective. Start a stopwatch, call the component, stop the watch, and compare the result with a budget. The number is precise. The experiment may not be. That distinction matters in continuous integration, where many t...

🌐 Organization-Wide EC2 DNS Automation with EventBridge and AWS Config Aggregator: One Rule Per Account > TL;DR > - Detecting EC2 launches and terminations across a whole AWS Organization for DNS is not the five-minute single-account job it looks l...

Context and Problem An AWS EKS Cluster was attacked, and its secrets were compromised. The Kubernetes Secrets were not encrypted, anyone who works with Kubernetes know they are only base64-encoded by defaulthttps://kubernetes.io/docs/concepts/confi...

On 1 September at 10:57 UTC the monthly ingest ran. It opened issue number 3 of the magazine, picked the vertical from the source registry, wrote 19 candidate sources into Postgres with stage = 'discovery', and opened a GitHub issue telling me it was...

Four test files in my site's repo import TypeScript directly. faq.test.mjs pulls in src/lib/faq.ts, and three others do the same with their own modules. There is no build step and no loader in between: the script is node --test "test/.test.mjs", and ...

Most "the filter looks right but the script misbehaves" bugs come down to three silent failure modes. First, a missing -r. jq outputs JSON by default, so a string arrives with its quotes attached — your variable holds "web-01", quotes included, and ...

!My 24/7 AI DevOps Coding Agent Setuphttps://raw.githubusercontent.com/Amiri83/hermis/main/docs/images/247aidevopsagentsetup.png Hermes + Claude Code + Telegram on a cheap always-on thin client. Hi, I'm Amir I'm a DevOps engineer, and a surprisin...

Changing a mainframe is slow for a reason. One middleware upgrade can touch dozens of applications. And the knowledge of how everything connects often lives in the heads of a few senior engineers, many of whom are close to retirement. IBM is going a...

Mantenho todos os meus repositórios em uma única pasta — cerca de 150, entre trabalho para clientes, templates e experimentos. Cada um deles é uma pequena armadilha: um nodemodules dentro de app/ e um .terraform dentro de infra/terraform/. Nenhum dos...

In February 2020 the safe holding the internet's root signing key would not open. IANA's published, hand-initialed ceremony scans show the custody behind the cryptography: a repair script written before anyone drilled, and a signing that took four mi...

title: "You patched PHP. The old image is still in your cluster's future." published: false description: "PHP2Shell CVE-2026-109618, CVE-2026-109619 as seen from a Kubernetes cluster: how fast the scanners caught up, where they stay blind, and why r...

title: "SOC 2, CRA, NIS2: they all ask your cluster the same five questions" published: true description: "A working engineer's read of SOC 2 and the EU instruments that landed alongside it, and why the hard part is not the controls but the evidence...

Pub/Sub is a messaging pattern. Event-Driven Architecture is an architectural discipline. Every EDA implementation may use Pub/Sub, but not every Pub/Sub implementation is truly Event-Driven Architecture. For many years, I would have agreed with the...