https://1shubham7.blog/tags/devops/ Recent content in DevOps on Shubham Singh Hugo -- gohugo.io en-us Wed, 16 Aug 2023 11:12:44 +0530 https://1shubham7.blog/helm-features-for-sres/ Mon, 01 Jan 0001 00:00:00 +0000 https://1shubham7.blog/helm-features-for-sres/ Twenty-five Helm flags, template functions, chart features and tools that most daily users never touch, each with the operational problem it solves. Written after two years of writing and managing Helm packages in production. https://1shubham7.blog/spec-driven-multi-agent-workflow/ Mon, 01 Jan 0001 00:00:00 +0000 https://1shubham7.blog/spec-driven-multi-agent-workflow/ A spec-driven workflow for Claude Code agents: a numbered spec that gets attacked before any code, checks set up before features, three roles with walls between them, a PreToolUse hook that enforces the rules, and injected bugs to grade the tests. Written after running it once and logging every confident mistake. https://1shubham7.blog/agent-harness/ Mon, 01 Jan 0001 00:00:00 +0000 https://1shubham7.blog/agent-harness/ What an agent harness actually is, where the word comes from, and the dozen or so primitives hiding inside the term. A companion to the loop engineering post. https://1shubham7.blog/ebpf/ Mon, 01 Jan 0001 00:00:00 +0000 https://1shubham7.blog/ebpf/ What eBPF actually is, why the verifier means it can't crash your kernel, hooks and maps in plain words, two runnable examples with bpftrace and libbpf, and how Cilium turns all of it into a CNI. https://1shubham7.blog/helm-hooks/ Mon, 01 Jan 0001 00:00:00 +0000 https://1shubham7.blog/helm-hooks/ What Helm does with a hook step by step, the three things hooks do not do that everyone assumes they do, a migration Job that survives a rollback, and when an initContainer or an Argo CD sync wave is the better tool. Written after two years of writing and managing Helm packages in production. https://1shubham7.blog/log-collection-and-labels/ Mon, 01 Jan 0001 00:00:00 +0000 https://1shubham7.blog/log-collection-and-labels/ A container log line on disk contains no idea which pod wrote it. Everything you filter by later is constructed by the collector at collection time. What the file actually looks like, how collectors find it, where every label comes from, and why that design decides the health of your logging stack. https://1shubham7.blog/rust-for-sres/ Mon, 01 Jan 0001 00:00:00 +0000 https://1shubham7.blog/rust-for-sres/ I learned enough Rust in a weekend to read, review and debug the CLIs, API clients and daemons that show up in infra work. This is the subset that mattered, the compiler errors you will actually hit, and the parts of the language I deliberately skipped. https://1shubham7.blog/claude-code-loops/ Mon, 01 Jan 0001 00:00:00 +0000 https://1shubham7.blog/claude-code-loops/ What loop engineering actually means, where the term came from, and how /loop and /goal turn Claude Code into something that babysits deployments and works until the tests pass. https://1shubham7.blog/linux-concepts/ Mon, 01 Jan 0001 00:00:00 +0000 https://1shubham7.blog/linux-concepts/ Processes and signals, namespaces and cgroups, memory, storage, networking, and identity: the mechanism behind each, the two or three ways it breaks under a pod, and the one check that confirms it. Written from on-call across 100+ production Kubernetes clusters. https://1shubham7.blog/cnp-antipatterns/ Mon, 01 Jan 0001 00:00:00 +0000 https://1shubham7.blog/cnp-antipatterns/ Lessons from writing CiliumNetworkPolicies for the KubeAid-addons chart - toServices port traps, labels Cilium ignores, toFQDNs without a DNS rule, default-deny surprises, and why every namespace needs exactly one default-deny. https://1shubham7.blog/loki-production-checklist/ Mon, 01 Jan 0001 00:00:00 +0000 https://1shubham7.blog/loki-production-checklist/ Deployment mode, object storage, label cardinality, multi-tenancy and auth, cross-cluster shipping, and the failures that are silent rather than loud. Written after moving a Loki install twice and debugging an object store that corrupted everything it was given. https://1shubham7.blog/marp/ Mon, 01 Jan 0001 00:00:00 +0000 https://1shubham7.blog/marp/ What Marp is, where it came from, how Marpit turns a Markdown file into a deck, rendering to PDF and PPTX with the CLI, and how to keep a theme shared across every deck instead of copy-pasting CSS. https://1shubham7.blog/daemonsets-rollouts/ Mon, 01 Jan 0001 00:00:00 +0000 https://1shubham7.blog/daemonsets-rollouts/ A breakdown of why DaemonSets using hostPort can get stuck in Pending during rolling updates, and why the default maxSurge/maxUnavailable settings aren't always right for them. https://1shubham7.blog/mcp-servers/ Mon, 01 Jan 0001 00:00:00 +0000 https://1shubham7.blog/mcp-servers/ A breakdown of the Model Context Protocol - the problem it solves, its architecture, and how a tool call actually works under the hood. https://1shubham7.blog/pdb/ Mon, 01 Jan 0001 00:00:00 +0000 https://1shubham7.blog/pdb/ What a PodDisruptionBudget actually does, the difference between voluntary and involuntary disruptions, how the eviction API respects it, and the mistakes that quietly break node drains and cluster upgrades. https://1shubham7.blog/audit-logging/ Mon, 01 Jan 0001 00:00:00 +0000 https://1shubham7.blog/audit-logging/ A breakdown of how kube-apiserver audit events actually work - request stages, audit levels, writing policies, and how SREs tune them differently for prod vs dev clusters. https://1shubham7.blog/ciso-assisstant/ Mon, 01 Jan 0001 00:00:00 +0000 https://1shubham7.blog/ciso-assisstant/ Deploying CISO Assistant via Helm, creating your first superuser, adding users, and how evidence storage actually works. https://1shubham7.blog/redis-backup-restore/ Mon, 01 Jan 0001 00:00:00 +0000 https://1shubham7.blog/redis-backup-restore/ How to backup and restore Redis on Kubernetes using RDB snapshots - and why just copying dump.rdb is not enough. https://1shubham7.blog/pv-shift/ Mon, 01 Jan 0001 00:00:00 +0000 https://1shubham7.blog/pv-shift/ Why your pod is stuck in Pending, why it lands on the wrong node, and how WaitForFirstConsumer fixes local storage scheduling for good. https://1shubham7.blog/grafana-dashboards/ Mon, 01 Jan 0001 00:00:00 +0000 https://1shubham7.blog/grafana-dashboards/ Two Grafana dashboards, same node, same timestamp - one shows 62 GB used, other shows 10 GB. Both are correct. Here's the full story of how Linux memory actually works and which number you should actually be watching. https://1shubham7.blog/experience/gfg/ Mon, 01 Jan 0001 00:00:00 +0000 https://1shubham7.blog/experience/gfg/ Outline Worked as a Technical Writing at GeeksforGeeks, creating educational content focused on DevOps, Kubernetes, Docker, and web technologies. Contributed consistently to learner-facing material and simplifying complex technical concepts for students and early-career engineers. My work reached more than 180,000 learners globally. Wrote more than 200 tutorials and articles as part of my work that reached more than 180,000 learners. These tutorials and articles were mainly focused on DevOps, Kubernetes, Docker, and Web design. https://1shubham7.blog/air-gapped-oncal/ Mon, 01 Jan 0001 00:00:00 +0000 https://1shubham7.blog/air-gapped-oncal/ A step-by-step guide to running Grafana OnCall without any egress to grafana.com — using OCI artifacts, init containers, and Kubernetes secrets to deliver plugins in restricted environments. https://1shubham7.blog/experience/cncf-zero-to-merge/ Wed, 16 Aug 2023 11:12:44 +0530 https://1shubham7.blog/experience/cncf-zero-to-merge/ CNCF Zero to merge is an Incubator program that help you work with CNCF projects, understand large and complex codebases and contribute to them. https://1shubham7.blog/statefulsets/ Mon, 01 Jan 0001 00:00:00 +0000 https://1shubham7.blog/statefulsets/ In simplest terms StatefulSets are Kubernetes component that is used specifically for stateful applications. These are workload API object used to manage stateful applications. They manage the deployment and scaling of a set of Pods (Creating more replicas or deleting them), and StatefulSets are also responsible for the ordering and uniqueness of these Pods. StatefulSet was released in the Kubernetes 1.9 release, let see K8s Statefulsets in this article... https://1shubham7.blog/namespaces/ Mon, 01 Jan 0001 00:00:00 +0000 https://1shubham7.blog/namespaces/ Namespaces are Kubernetes Objects used to divide a Cluster into smaller organized sub clusters as per different needs. Namespaces enables users to isolate group of resources within a cluster, this is useful when multiple teams are working on a shared cluster and each team is independent of others. In this article, we will discuss how to change or switch namespaces in a Kubernetes cluster, but before that let’s start with the basics. https://1shubham7.blog/k8s-depl-stratigies/ Mon, 01 Jan 0001 00:00:00 +0000 https://1shubham7.blog/k8s-depl-stratigies/ Kubernetes, or K8s, is an open-source container orchestration technology used to automate the manual processes of deploying, managing, and scaling applications with the help of containers. Originally developed by engineers at Google, Kubernetes was donated to the CNCF (Cloud Native Computing Foundation) in 2015... https://1shubham7.blog/artifacts/ Mon, 01 Jan 0001 00:00:00 +0000 https://1shubham7.blog/artifacts/ Artifacts - from beginner to advanced. · What are artifacts? In the broadest sense, artifacts are objects or items created or modified by humans that... https://1shubham7.blog/yaml/ Mon, 01 Jan 0001 00:00:00 +0000 https://1shubham7.blog/yaml/ explaining YAML from basics to advanced · What is YAML? YAML (which stands for 'YAML Ain't Markup Language') is a human-readable data serialization... https://1shubham7.blog/database/ Mon, 01 Jan 0001 00:00:00 +0000 https://1shubham7.blog/database/ Databases in the simplest yet most powerful way ever. Keeping in mind placements and development. · Databases: just a digital tool that stores and... https://1shubham7.blog/python_datatypes/ Mon, 01 Jan 0001 00:00:00 +0000 https://1shubham7.blog/python_datatypes/ Datatypes in Python in simplest yet most effective way. · Python includes 6 types of built-in datatypes - Numeric datatype Boolean datatype Sequence... https://1shubham7.blog/vagrant/ Mon, 01 Jan 0001 00:00:00 +0000 https://1shubham7.blog/vagrant/ Vagrant explained for absolute beginner. · So recently, I was setting up locally an open-source software, so to contribute to it (BTW it is called Zulip,...