Free SRE & Developer Diagnostics: Test your stack live with our DMARC Record Checker, Generator & SPF/DKIM Validator, Free Website Speed & Core Web Vitals Checker, or explore all 9 Free Webmaster & Cloud Engineering Tools. Master enterprise Terraform state locking with S3 and DynamoDB,…
This post was contributed by Ant Group, a large-scale digital payment platform. Jianfeng and Yong are engineers at Ant Group working on infrastructure systems, and contributors to gVisor. At Ant Group, we are committed to keep online transactions safe and…
In modern software engineering, manual infrastructure management—often called "ClickOps"—is a major liability. When engineers manually create servers by clicking around cloud provider dashboards, human error is inevitable. A developer might forget to open port 8080 or misconfigure a database…
Argo CD 3.5 is the line to run, and OpenShift GitOps 1.22 moved to it. A kind cluster, a Git repository and about 90 minutes get ArgoCD managing a Kustomize app with automated sync and self-heal, project-level access control, ordered rollouts, three environments…
The state file the agent was now working from described production, so the destroy planned the deletion of production. Grigorev lists what went: • The VPC that held the whole environment. • The ECS cluster running the application. • The load balancers in…
Kubernetes 1.34 reached upstream end of life on October 27, 2026. The final patch on that branch was 1.34.12, released September 15, according to Devopsness’s tracker of the 1.34 deadlines. Clusters still running it no longer receive upstream security fixes or bug fixes, and for Amazon…
The question of OpenTofu or Terraform tends to arrive on a quiet Tuesday. A repo with 200 resources, a remote state in S3 and a CI pipeline pinned to terraform works fine, until someone asks whether the next upgrade should be to…
Short answer: do not treat this as a version bump in a manifest. Back up the Argo CD state, read the upgrade notes for every minor between your version and 3.5, rehearse on a non-production instance with a pinned 3.5.x manifest,…
Fetch the complete documentation index at: /llms.txt Give Semgrep read access to a private Maven repository in AWS CodeArtifact by creating an IAM role that Semgrep assumes. The AWS CodeArtifact (IAM role) option doesn't appear The External ID field…
Part 1 ended with a pipeline that turns HL7 v2 into FHIR R4 and runs on a laptop with make demo. This part is about the distance between that and something a trust could run, and about the checks that tell you whether you…
Terraform/Pulumi, Ansible, drift detection, and declarative delivery.
An article joins this feed when it matches these terms. Each one is also a search of its own.