DevOps Foundations
Pure DevOps and frontend engineering: edge deployment, release engineering, production observability.
- 2026-09-10Python ops: CloudWatch alarm census with boto3 for DOP readiness
- 2026-09-09EKS NetworkPolicy: VPC CNI, namespace isolation, and least-permissive ingress
- 2026-09-08Terraform check blocks: preconditions and postconditions on AWS resources
- 2026-09-07Python ops: Interface VPC Endpoint census with boto3
- 2026-09-06EKS IRSA: OIDC provider, ServiceAccount annotations, and IAM role trust
- 2026-09-05Terraform remote_state data source across AWS network and app stacks
- 2026-09-04Python Azure Storage Redundancy Census — the Copy That Is Not a Backup
- 2026-09-03Kubernetes Ingress on AKS — Application Gateway, and the Path That Is Not a Service · Hedronite Lesson
- 2026-09-02Terraform Azure App Service, Key Vault, and the Replace That Is Not a Diff · Hedronite Lesson
- 2026-09-01Python BigQuery Partition Census — the Scan That Is Not the Table · Hedronite Lesson
- 2026-08-31Kubernetes System Hardening on GKE — COS, Shielded Nodes, AppArmor, and the Host That Is Not the Cluster · Hedronite Lesson
- 2026-08-30Terraform GCP Private Google Access, and the Access That Is Not a Public IP · Hedronite Lesson
- 2026-08-29Python EventBridge Bus, Rule, and Target — the Schedule That Is Not a Crontab · Hedronite Lesson
- 2026-08-28Kubernetes Rolling Updates on EKS — maxSurge, maxUnavailable, and the Surge That Is Not a Second Cluster · Hedronite Lesson
- 2026-08-27Terraform AWS Assume Role, and the Role That Is Not a Key · Hedronite Lesson
- 2026-08-26Python Route 53 Health Checks — the Failover That Is Not a Replica · Hedronite Lesson
- 2026-08-25Kubernetes Cluster Hardening on AKS — Authorized IP Ranges, Disable Local Accounts, Azure RBAC, and the API That Still Answers · Hedronite Lesson
- 2026-08-24Terraform GCP Cloud SQL Settings, and the Nest the Provider Still Has to Answer · Hedronite Lesson
- 2026-08-23Python DefaultAzureCredential and Azure Key Vault — the Credential That Is Not a Key · Hedronite Lesson
- 2026-08-22Kubernetes Storage on GKE — PD CSI, Reclaim Retain, and the Volume That Survived the Claim · Hedronite Lesson
- 2026-08-21Terraform Azure Storage Public Access, and the Output That Is Still the Last Apply · Hedronite Lesson
- 2026-08-20Python Ops and GCP MIGs — list_managed_instances and the Instance That Is Not a Name · Hedronite Lesson
- 2026-08-19EKS Secrets Encryption, KMS, and the Secret That Is Still Plaintext · Hedronite Lesson
- 2026-08-18Terraform S3 Backend, DynamoDB Lock, and the Lock You Did Not Hold · Hedronite Lesson
- 2026-08-17Python CloudFormation Custom Resources — the ResponseURL POST and the Signal That Must Still Fire · Hedronite Lesson
- 2026-08-16Kubernetes Scheduling on AKS — Node Pools, Taints, the System Pool, and the Pending That Is Not Storage · Hedronite Lesson
- 2026-08-15Terraform GKE Workload Identity — the GSA/KSA Binding That Is Computed, Not Declared · Hedronite Lesson
- 2026-08-14Python Ops — Subprocess and SIGTERM · Hedronite Lesson
- 2026-08-13Kubernetes Runtime Isolation on GKE — GKE Sandbox, gVisor RuntimeClass, and the Host-Kernel Boundary · Hedronite Lesson
- 2026-08-12Terraform's Resource Lifecycle on AWS · Hedronite Lesson
- 2026-08-11Bounded Concurrency for Python Ops Tools · Hedronite Lesson
- 2026-08-10Kubernetes Storage on EKS — the EBS CSI Driver, StorageClass and volumeBindingMode · Hedronite Lesson
- 2026-08-09Policy as Code for Terraform on Azure · Hedronite Lesson
- 2026-08-08Resilient Python Ops Clients · Hedronite Ops Synthesis Lesson
- 2026-08-07Kubernetes Supply Chain Security on AKS · Hedronite Ops Synthesis Lesson
- 2026-08-05Configuration and Secrets for Python Ops Tools · Hedronite Ops Synthesis Lesson
- 2026-08-04Kubernetes Identity and Authorization on GKE · Hedronite Ops Synthesis Lesson
- 2026-08-03Terraform in the Deployment Pipeline · Hedronite Ops Synthesis Lesson
- 2026-08-02Observable Python Automation · Hedronite Ops Synthesis Lesson
- 2026-08-01Kubernetes NetworkPolicy on EKS · Hedronite Ops Synthesis Lesson
- 2026-07-31Terraform Workspaces and Environment Isolation on GCP · Hedronite Ops Synthesis Lesson
- 2026-07-30Python Modules and Packages for Ops Fleets · Hedronite Ops Synthesis Lesson
- 2026-07-29Kubernetes Services and Networking · Hedronite Ops Synthesis Lesson
- 2026-07-28Terraform Providers · Hedronite Ops Synthesis Lesson
- 2026-07-27Concurrent Fleet Automation in Python · Hedronite Ops Synthesis Lesson
- 2026-07-26The Kubernetes Admission Chain · Hedronite Ops Synthesis Lesson
- 2026-07-25Terraform Modules
- 2026-07-24Resilient Python Automation · Hedronite Ops Synthesis Lesson
- 2026-07-23The Kubernetes Reconciliation Loop
- 2026-07-22Terraform State
- 2026-07-12Rate Limiting at the Edge
- 2026-07-05Real-Time Data Delivery to Web UIs
- 2026-06-28The API Contract for Data-Driven Web UIs
- 2026-06-21Zero-Downtime Deploys for Long-Running Services
- 2026-06-14Frontend Performance Budgets and the Rendering-Cost Discipline
- 2026-06-11Promotion Gates as Release Engineering — The Candidate Never Ships Itself, and the Evidence-Graded Rollout
- 2026-06-07Frontend Production Observability and the Degradation Ladder
- 2026-05-31Frontend Release Engineering Beyond Build-and-Deploy: Atomic Rollouts, Canary Slicing, and the Rollback Surface for Real-Time Market UIs
- 2026-05-24Edge-Deployed Frontend Discipline for Real-Time Market Data