Infrastructure testing — why your Terraform plan is not a test
Terraform plan tells you what will change. It doesn't tell you if the change is correct. Real infrastructure testing requires real assertions.
Azure DevOps Pipelines — the parts they don't document
The official docs cover the happy path. Here's what I learned from the edge cases: conditional stages, variable group scoping, and service connection gotchas.
The CI/CD pipeline nobody maintains — why pipeline-as-code needs ownership
Pipeline YAML is code. It has bugs, tech debt, and dependencies. But nobody owns it, so it rots in place until something breaks at 2 AM.
Your cluster is not as secure as you think — common K8s security gaps
Default Kubernetes is designed for convenience, not security. Most clusters have the same five gaps, and most teams don't know until something breaks.
When AI-generated YAML breaks production — lessons from real failures
AI-generated infrastructure code looks correct. It passes linting. Then it breaks in ways you didn't think to test for. Three failures I learned from.
Prompt engineering for infrastructure — what works and what doesn't
Most prompt engineering advice assumes you're writing marketing copy. Infrastructure prompts have different failure modes, and the patterns that work are counterintuitive.
The platform engineer's job is to delete toil, not build portals
Platform engineering got hijacked by portal builders. The actual job is making repetitive work disappear, not putting a UI on top of it.
GitOps is not about Git
Most teams adopt GitOps and end up with git-flavored CI/CD. The part that actually matters is the reconciliation loop, not the repo.
AI won't replace your pipeline — it will replace your patience
Senior DevOps engineers spend most of their time reviewing YAML, not writing it. AI is starting to change that, and the shift matters more than the hype suggests.
Your homelab is your best interview
Running production-grade infrastructure at home taught me more about DevOps than any certification prep course. Here's why I think every engineer should try it.
Zero secrets in pipelines — and why most teams still get this wrong
Stored credentials in CI/CD pipelines are a liability. How Azure Workload Identity federation eliminates the most common secret management failure.