Последние новости DevOps от Tech News
Облако часто воспринимается как гарантия доступности инфраструктуры. Но что произойдёт, если целиком откажет зона доступности, перестанет отвечать A…
Two tools, two clocks. Terraform provisions the cluster, the node groups, the networking, the IAM. It changes rarely and under heavy approval. ArgoC…
Introduction Terraform is powerful, but writing and maintaining it for every deployment takes time. If you're a developer who wants to ship apps on…
My original infrastructure is three bare-metal Proxmox machines clustered together. The clustering just makes administration a bit easier. Those run…
I once kept a shell script called pre-destroy.sh in a repo for far longer than I'd like to admit. It took a final backup, poked an external inventor…
tf-nag is an offline Python CLI that checks Terraform plan or state JSON against the tf-nag AWS Solutions rules. It does not contact AWS. Rule IDs a…
In May I merged a pull request that moved our tagging into a shared locals block. Twelve files, no resources added or removed, a plan reviewed by tw…
Every time I showed people the thing I built — a chat that spins up Oracle Cloud sandboxes and deletes them when their time is up — the reply was th…
Chunk 3 is complete — and this one pushed me the furthest outside my comfort zone. Infrastructure as Code, remote state management, and a fully auto…
Почти у каждой команды есть «накликанная» инфраструктура. Кто-то когда-то создал VPC в консоли, кто-то вручную настроил бакет, DNS-зоны живут отдель…
What if you could build an entire Azure server environment without opening the Azure Portal and clicking your way through dozens of configuration sc…
Most disaster recovery write-ups stop at the diagram. You get two boxes, an arrow labelled "replicate", and an RTO that was never measured. I wanted…
I kept running into the same problem with AWS. The alert usually isn’t the hard part. The investigation is. An IAM policy changes, a security group…
NOTE: This is my blog post for the Cloud Resume Challenge for my website . The Cloud Resume Challenge is a project comprised of a list of requiremen…
Originally published on kuryzhev.cloud The scenario Someone opened the AWS console during an incident and added an inbound rule to a security group…
In my previous AWS projects, I worked with services such as DynamoDB, Lambda, API Gateway, S3, IAM, and Terraform. This time, I wanted to build some…
We had an incident at 19:20, fixed it at 19:35, wrote it up, and went home. The same incident started again at 02:07 the next morning with nobody aw…
After a decade in insurance operations, I decided to make my pivot into cloud engineering official by doing the Cloud Resume Challenge ! I wanted to…
If you've ever spent an afternoon clicking through the AWS console to wire up a VPC, subnets, an ALB, TLS certificates, and a CloudFront distributio…
В Kubernetes-кластере рано или поздно встаёт вопрос: где собирать Docker image приложений? Вариант «на своей машине разработчика» не мас…
A guardrail you haven't tried to violate is just documentation with better formatting. That's the premise behind aws-boundary: an AWS multi-account…
Karpenter replaces the old "guess an instance type, set a min/max, wait for Cluster Autoscaler" model with something simpler: watch for pods that ca…
So now that you have a basic understanding of how Terraform works , before you start running any terraform command against a real AWS account, two t…
Приветствуем, Хабр. У нас вышла долгожданная новинка, посвящённая методологии «SRE» — Site Reliability Engineering. Книга называется « SRE. Новый по…
Обычный вечер понедельника. Я уже собирался уходить домой после работы, как вдруг зацепился за разговор коллег о неком Gemini Notebook. Стало интере…
Меня зовут Амиран Гургенадзе, я работаю в технической поддержке Cloud.ru . До этого я был системным администратором, а в облака пришел с готовностью…
The cloud industry is changing fast. A few years ago, knowing how to launch a virtual machine was enough to get started with cloud computing. Today,…
If you've provisioned a VPC from a Terraform module without fully internalising what each piece is doing, that's fine — right up until something bre…
One of the easiest and most helpful features of Cursor is Cloud Agents. With often 1 click you can have an agent in an ephemeral environment that yo…
Introduction In my previous article , I tested using ALB CRDs to offload JWT validation for OIDC-based authentication to the Amazon EKS Kubernetes A…