Tag: #devops
Writing on GPUs, LLMs, MLOps, Kubernetes — and mindset · 193 posts
From Docker to Podman — the Complete Guide to Switching to a Daemonless Container Engine
Podman differs from Docker at the level of architectural philosophy: daemonless (fork-exec) operation and rootless by default. Internals (conmon, crun), config file locations and meanings, CDI setup for GPUs, the two way
2026-07-08 · 8 min read #docker#podman#containers#devops#linuxMastering the NVIDIA GPU Operator — From Install and Deployment to MIG Partitioning
The era of hand-configuring GPU nodes on Kubernetes is over. How the NVIDIA GPU Operator manages everything from the driver to the device plugin and monitoring via the operator pattern, with Helm install and verification
2026-07-07 · 8 min read #kubernetes#gpu#nvidia#mig#devopsBuilding Updatable Solutions: From Installer Wizards to Safe Auto-Updates
From the UX of a multi-step installer wizard to semantic versioning and update channels, delta updates, atomic swap and rollback, integrity and security via code signing, signature verification, and TUF, and finally data
2026-07-03 · 12 min read #auto-update#installer#wizard#code-signing#devopsOpinionated Tools — The Philosophy of Code Formatters and Linters
Why code formatters end debates and preserve consistency. Comparing gofmt and gofumpt, prettier, black, and ruff, this piece lays out the philosophy of strictness versus flexibility, the difference from linters, CI enfor
2026-06-29 · 22 min read #devops#formatter#linter#developer-tools#toolingThe Rise of AI Code Review Tools — How Automated Review Changes Teams
AI code review tools are pouring out as open source and reshaping developer workflows. From Git diff analysis, defect detection, and convention enforcement to the division of labor with human reviewers, false-positive ma
2026-06-29 · 20 min read #devops#ai#code-review#ci-cd#developer-toolsThe Rise of AI Code Review Tools — What to Delegate and What Humans Should Still See
AI code review tools are spreading fast. We separate the defects AI catches well from the areas humans must still own, and cover CI integration, an adoption checklist, and a critical perspective.
2026-06-25 · 16 min read #devops#code-review#ai-tools#developer-experience#ci-cdHunting Bugs with AI — The Era of Automated Security Research
Cases of AI automatically probing APIs at scale to uncover vulnerabilities are on the rise. From how fuzzing, differential analysis, and LLM-assisted triage work, to the asymmetry of attackers also using AI, the implicat
2026-06-25 · 20 min read #devops#security#ai#bug-bounty#fuzzingAutomating Database Migrations — Treating Schema as Code with CI/CD and GitOps
The era of applying schema changes by hand is over. This guide lays out the full picture of integrating migrations into your pipeline: linting and dry-running in PRs, applying per-environment automatically, detecting dri
2026-06-16 · 13 min read #database#migration#cicd#gitops#flywayAn Introduction to Database Migration Strategy — Schema, Data, and Zero Downtime
A systematic overview of database migration types and risks, versioned migrations, and zero-downtime deployment principles. It covers transactional DDL, backups and dry runs, environment promotion, team process, and an i
2026-06-16 · 16 min read #database#migration#schema#devops#reliabilityOnline Schema Changes on Large Tables — gh-ost, pt-online-schema-change, and Native Online DDL
Run an ALTER against a table with hundreds of millions of rows and your service can grind to a halt. This post walks through the limits of MySQL native Online DDL, how trigger-based pt-online-schema-change and binlog-bas
2026-06-16 · 21 min read #database#mysql#postgresql#migration#gh-ostTraefik vs ingress-nginx — What to Choose and When
A deep comparison of the two leading Kubernetes ingress controllers, Traefik and ingress-nginx, across design philosophy, configuration style, automatic TLS, performance, observability, and ecosystem. It reflects the 202
2026-06-14 · 20 min read #traefik#ingress-nginx#kubernetes#networking#devopsMigrating Between Ingress Controllers — A Zero-Downtime Strategy
When replacing an Ingress Controller due to ingress-nginx maintenance issues and more, this guide covers building an inventory, mapping annotations, coexisting via IngressClass separation, weighted DNS cutover, and stage
2026-06-14 · 9 min read #ingress#kubernetes#nginx#networking#devopsIngressClass Deep Dive — Running Multiple Ingress Controllers in One Cluster
Starts from the IngressClass resource and the default-class concept, then covers multi-controller scenarios like internal/external, per-team, and migration. Explains the difference between the annotation and spec.ingress
2026-06-14 · 8 min read #ingress#ingressclass#kubernetes#networking#devopsIngress Troubleshooting Playbook — From 502/504/404 to TLS
A practical playbook organizing the common Ingress symptoms (404, 502, 503, 504, TLS errors, redirect loops, 413) into symptom-based diagnostic trees. Each symptom comes with kubectl/curl/log inspection commands and fixe
2026-06-14 · 11 min read #ingress#kubernetes#nginx#troubleshooting#networkingingress-nginx Production Tuning — Performance, Timeouts, Connections, keepalive
A practitioner tuning guide for running ingress-nginx reliably in production: workers and connections, upstream keepalive, the three timeouts, buffering, compression, rate limiting, HPA scaling, graceful reload, and a 50
2026-06-14 · 14 min read #ingress#kubernetes#nginx#performance#devopsManaging Ingress as Code — Helm, Kustomize, and GitOps
How to put Ingress and controller configuration under version control. Deploy controllers per environment with Helm values, overlay manifests with Kustomize patches, automate delivery and drift detection with Argo CD and
2026-06-14 · 8 min read #ingress#kubernetes#helm#kustomize#gitopsUnderstanding Ingress Controllers Completely — From the Ingress Resource to How Controllers Actually Work
Clearly separates the Ingress API from the Ingress Controller, then walks through the control loop from API watch to config generation and reload with an ASCII diagram. Covers the Ingress resource spec, IngressClass, TLS
2026-06-14 · 13 min read #ingress#kubernetes#nginx#networking#devopsIngress Traffic Splitting — Canary and Blue-Green Deployments in Practice
A practical walkthrough of ingress-nginx canary annotations, Argo Rollouts integration, per-controller traffic splitting comparisons, blue-green patterns, and metric-based automated promotion. It also covers the 2026 shi
2026-06-14 · 16 min read #ingress#kubernetes#canary#argo-rollouts#deploymentTraefik Advanced — Middleware Design, TLS Options, Multi-Provider
A production-focused deep dive into Traefik middleware chains, forwardAuth-based SSO, TLSOption and mTLS, weighted routing and mirroring, multi-provider composition, and Yaegi plugins. We also cover canary deployments, o
2026-06-14 · 15 min read #traefik#middleware#tls#kubernetes#networkingKong Ingress Controller Guide — API Gateway-Style Ingress Through Its Plugin Ecosystem
A deep dive into Kong Ingress Controller (KIC) from an API Gateway perspective. We cover the architecture of Kong Gateway and KIC, DB-less versus DB mode, CRDs such as KongPlugin, KongIngress, and KongConsumer, the core
2026-06-14 · 20 min read #kong#ingress#kubernetes#api-gateway#networking