DevOps. Self-hosted. Security.
RSS FeedNotes on DevOps, infrastructure, self-hosting and cybersecurity — practical guides from real-world operations.
Read the posts below or head over to the About page.
Recent Posts
DORA 2026: AI amplifies what you already have — an unstable pipeline gets worse, not better
DORA 2026's main finding: the payoff from AI is moderated by platform quality. Why unstable pipelines degrade with AI, what to fix before subscribing, and how to compute the four keys from GitHub Actions logs in one evening.
Velero: cluster backups to S3 and a restore rehearsal — DR you've actually rehearsed
Velero at its minimum: object and volume backups to S3 on a Schedule with TTL, CSI snapshots, and a monthly restore rehearsal into a clean namespace with a silence-based alert.
Keycloak in Kubernetes: one OIDC provider for kubectl, Argo CD and Grafana — self-hosted SSO
kubectl — client certificates, Argo CD — a local admin, Grafana — its own user database. Setting up Keycloak 26.8 in Kubernetes as the single OIDC provider: Postgres on CloudNativePG, kube-apiserver flags, kubelogin, groups from realm roles, realm-as-code, and an honest bill for the JVM.
VictoriaMetrics instead of Prometheus+Thanos: one binary instead of three — when it's honest savings
Long-term metric storage on Prometheus means Thanos: sidecar, store gateway, compactor and query on top of S3. Where VictoriaMetrics single-binary covers the same with one process: active-time-series thresholds, the vmagent/vmalert/vmbackup ecosystem, two migration paths, and RAM/disk numbers.