Skip to main content
DevOps Insightsguides & answers

Articles

All Articles

34 articles found

Diagram: a Deployment owns a ReplicaSet that keeps three Pods running on nodes, with a Service selecting them by label.
Featured

Kubernetes 101: The One Idea, Then the Nouns

Kubernetes explained through the control loop under Pods, Deployments and Services, so you can predict what the cluster will do, not just name its parts. Most introductions stop at the nouns.

Neeraj Jha·7 min read
Diagram of An anonymous request for one object: 1. Anything public?, 2. ACLs switched off?, 3. Account settings, 4. Bucket settings, 5. Encryption, 6. Allowed.
4 min
Cloud ComputingBeginnerNew

Your S3 Bucket Is Not Public. That Is the Feature

You added a public bucket policy and still get 403. Block Public Access has four switches at two levels, two of which only refuse new grants. How they combine, why encryption can block the internet too, and the safer way to publish files.

#AWS

Neeraj Jha

Diagram of What a stop and start does to one instance: 1. Stop pressed, 2. Charges pause, 3. Host released, 4. Public IP released, 5. Start pressed, 6. New public IP.
4 min
Cloud ComputingBeginnerNew

Stop, Start, Surprise: What Your EC2 Instance Forgets

What rebooting, stopping, hibernating and terminating an EC2 instance each keep and lose, from AWS's own comparison. Four actions that sound similar and are not, including the public IP that changes and the disk that vanishes.

#AWS#Linux

Neeraj Jha

Diagram of How AWS decides, for a request inside one account: 1. Any explicit Deny?, 2. Resource control policies, 3. Service control policies, 4. The resource's own policy, 5. Your IAM policies, 6. Permissions boundary.
4 min
Cloud ComputingBeginnerNew

AWS Said Access Denied. Here Is How to Find the Policy That Did It

When AWS says AccessDenied, the error names only one of the several policy types it checks in a fixed order: how to find the policy that actually said no. The two phrases that tell you where to look, and the one command to run first.

#AWS

Neeraj Jha

Updated

Diagram: a flaky test branching into three outcomes: fix, quarantine with an owner and deadline, or delete.
7 min
CI/CDIntermediate

Flaky Tests: Fix, Quarantine, or Delete

The question is not how to eliminate flakiness. It is what to do with each flaky test — and there are exactly three answers, one of which people resist and should not.

#CI/CD#SRE

Neeraj Jha

199

Stay ahead in DevOps

Get tutorials, guides, and insights delivered to your inbox. No spam.

Get new posts by email

Subscribe to get an email when a new blog post is published. Skip anytime.

No spam, unsubscribe anytime.

A CycloneDX SBOM excerpt beside what an SBOM answers and the questions it does not.
8 min
SecurityIntermediate

SBOMs: What They Answer, and What They Do Not

Most teams generate an SBOM and never read one. The single question it answers well, the four things it does not, and the difference between a compliance artifact and an operational one.

#CI/CD#Docker

Neeraj Jha

215
Diagram: an AI agent's actions passing through a policy boundary before reaching production, with destructive actions denied.
9 min
DevOpsAdvanced

Giving an AI Agent Production Access

Autonomy is not one decision. The four levels, the three properties that make an action safe to automate, and why the guardrail cannot live in the prompt.

#SRE#AIOps

Neeraj Jha

212
Diagram: an annotated Deployment manifest showing its kind, replica count, pinned image and missing resource requests.
10 min
ContainersBeginner

Reading a Kubernetes YAML You Did Not Write

How to get oriented in a Kubernetes YAML file you did not write: four hundred lines, in production, by somebody who left. An order that works, and why the file may not be what is running.

#Kubernetes#Helm

Neeraj Jha

Updated

221
Funnel narrowing 312 scanner findings down to four fixes.
10 min
SecurityIntermediate

From DevOps to DevSecOps: Turning 312 Findings Into Four

Security scanners produce findings, and findings are not work until somebody can act on them: how a DevSecOps team turns 312 of them into four. The triage, the gate decision, and why false positives destroy the whole programme.

#CI/CD#SRE

Neeraj Jha

189
Diagram: a developer's paved road to production beside the slower route around it.
10 min
DevOpsIntermediate

Platform Engineering: Why Developers Route Around Your Platform

What actually changes moving from DevOps to platform engineering: your work stops being mandatory and starts being optional, and every design decision is now a negotiation with somebody's convenience.

#SRE#CI/CD#Kubernetes

Neeraj Jha

188