Writing · page 18 of 28

Older posts.

Oct 31, 2026

Anomaly Detection for DevOps Metrics (2026): Thresholds vs Baselines vs ML

Static thresholds, seasonal PromQL baselines, Datadog Watchdog, Grafana ML and Prophet compared for DevOps metrics in 2026, with the false-positive arithmetic, history each method needs, and why SLO burn-rate alerts should still do the paging.

11 min
Oct 31, 2026

Amazon S3 Explained (2026): Storage Classes, Real Prices and Egress

Amazon S3 in 2026 explained for engineers: every storage class with current us-east-1 prices, request and egress costs, Intelligent-Tiering break-even, Express One Zone, S3 Tables, Vectors and Files, security defaults, and how S3 compares with Cloudflare R2 and Google Cloud Storage.

13 min
Oct 31, 2026

K8sGPT vs HolmesGPT vs kubectl-ai: AI Kubernetes Troubleshooting in 2026

AI Kubernetes troubleshooting in 2026 compared: K8sGPT 0.4.41 analyzers, HolmesGPT 0.45 (CNCF sandbox since October 2025) scoring 68 to 100% on its own 22-eval benchmark at $0.04 to $0.20 per scenario, kubectl-ai, Kubernetes MCP servers, EKS, GKE and AKS, and how to keep write access safe.

12 min
Oct 20, 2026

Workload Identity Federation Explained (2026): OIDC Instead of Cloud Keys

Workload identity federation explained: why long-lived cloud keys keep leaking (29M secrets on GitHub in 2025), how OIDC token exchange works on AWS, Google Cloud and Azure, Kubernetes projected tokens, SPIFFE, and GitHub's July 2026 immutable subject change.

13 min
Oct 20, 2026

Platform Engineering vs DevOps vs SRE in 2026: 90% Now Have a Platform

Platform engineering vs DevOps vs SRE explained for 2026: what each one is, how Team Topologies and the CNCF define platforms, what DORA 2024 and 2025 measured (90% platform adoption, 76% with platform teams), and when a platform team is premature.

13 min
Oct 20, 2026

MLOps vs LLMOps vs AgentOps in 2026: What Carries Over, What's New

MLOps vs LLMOps vs AgentOps explained for 2026: how the lifecycle shifts from trained models to prompts to tool-using agents, what carries over (versioning, registries, CI gates, monitoring), what is genuinely new (evals, traces, tool permissions), and a current tool map.

13 min
Oct 20, 2026

What Is MCP (Model Context Protocol)? A Plain-English Guide for 2026

What the Model Context Protocol is and how it works in 2026: hosts, clients and servers, tools, resources and prompts, stdio and Streamable HTTP, every spec version up to the stateless 2026-07-28 release, Linux Foundation governance, adoption, and the real risks.

12 min
Oct 20, 2026

What Is DevSecOps in 2026? 87% Run Exploitable Code, 4% Pin Actions

DevSecOps explained for 2026: shift-left vs shift-everywhere, what SAST, DAST, SCA, secrets and IaC scanning each catch, SLSA 1.2's new Source Track, and what Datadog, GitGuardian, GitLab, Sonatype and Veracode data say about AI-generated code.

11 min
Oct 20, 2026

What Is AIOps? A Plain-English Explainer for 2026

What AIOps means in 2026: Gartner coined it in 2016 and renamed the market Event Intelligence Solutions in 2025. How event correlation, anomaly detection and LLM agents for root cause analysis work, the vendors, and where each layer succeeds or fails.

13 min
Oct 20, 2026

What Are AI Agents? Workflows, ReAct and Real Success Rates (2026)

AI agents explained for engineers in 2026: Anthropic's workflows vs agents split, the ReAct loop, tool calling, planning, memory and multi-agent designs, measured success rates from OSWorld (66.3%) to TheAgentCompany (30%), and when not to build one.

13 min
Oct 20, 2026

Vulnerability Management in 2026: 48,185 CVEs, a Triaged NVD, EPSS v5

Vulnerability management in 2026 explained: 48,185 CVEs in 2025, 67,000+ by September 2026, an NVD that now enriches only KEV and critical software, the CVE funding scare, EPSS v5, CISA KEV at 1,748 entries, VEX and reachability, and a prioritisation order that works.

12 min
Oct 20, 2026

Vector Databases in 2026: Do You Need One, or Is pgvector Enough?

An engineer's guide to vector databases in 2026: pgvector 0.8.7, Pinecone, Qdrant, Milvus 3.0, Weaviate, turbopuffer, Amazon S3 Vectors and Elasticsearch compared on price and architecture, why the benchmarks mislead, and when Postgres is enough.

13 min
Oct 20, 2026

TLS Certificate Lifetimes in 2026: 200 Days Now, 47 Days by 2029

CA/Browser Forum ballot SC-081 cut public TLS certificates to 200 days on 15 March 2026, then 100 days in 2027 and 47 days in 2029. What changed, what Let's Encrypt did (no OCSP, 6-day certs, ACME profiles, 45 days), and how ARI keeps renewals safe.

11 min
Oct 20, 2026

How to Test Terraform: terraform test, TFLint and Checkov (2026)

A step-by-step Terraform testing setup tested on Terraform 1.16.6: unit tests with terraform test and mock providers, integration tests, TFLint, Checkov and Trivy scans, Terratest v2, pre-commit-terraform and a SHA-pinned GitHub Actions pipeline, with real output and fixes for common errors.

13 min
Oct 20, 2026

How to Fix Terraform 'Error acquiring the state lock' (2026)

Fix Terraform's Error acquiring the state lock safely: read the Lock Info, wait with -lock-timeout, force-unlock, clear stale S3 .tflock and DynamoDB locks, then repair state with moved and removed blocks, refresh-only plans and S3 version restores.

13 min