Writing on infrastructure,
DevOps & craft.
Technical articles on CI/CD automation, cloud infrastructure, Docker, security, and production engineering. Written for practitioners who ship real systems.
16 Articles published
- 01CI/CD
Build a Mobile Release Pipeline with GitHub Actions and EAS
A step-by-step guide to automating React Native (Expo) releases: build on EAS, submit to the app store on every GitHub Release, with tag-driven versioning, security, and the gotchas to avoid.
Aug 5, 20256 min read - 02Principles
Eight Things I've Learned Building Systems
Convictions from production incidents, tight deadlines, and hard trade-offs. Things that matter when you're keeping services running.
Jul 15, 20252 min read - 03Security
When a .map File Leaks Your Entire Codebase
Lessons from the Claude Code source map incident. How default build settings can silently ship debug artifacts to production.
Jun 22, 20256 min read - 04Infrastructure
Troubleshooting Terraform: Patterns Worth Knowing
Apply failures, cycle errors, and state drift: the three categories of Terraform problems that surface in production, and how to fix them.
Jun 10, 20254 min read - 05AI
Using LLMs for Incident Response: What Works and What Doesn't
After integrating AI into an on-call workflow, here's what actually reduced MTTR and what turned out to be expensive noise.
May 28, 20255 min read - 06AI
Automating Code Review with AI: What Worked and What Didn't
I integrated AI into our PR workflow three months ago. Here's the setup, the results, and the things that surprised me.
May 12, 20256 min read - 07Kubernetes
Kubernetes Debugging Patterns for Production
CrashLoopBackOff, OOMKilled, stuck deployments, and networking mysteries: a field guide to debugging K8s when things go wrong.
Apr 25, 20255 min read - 08CI/CD
Feature Flags and the Case for Progressive Delivery
How feature flags decouple deployment from release, reduce blast radius, and why every team shipping to production should use them.
Apr 5, 20255 min read - 09GitOps
GitOps with ArgoCD: Things I Wish I Knew Before Starting
Setting up GitOps in production taught me a lot. Here are the gotchas, the patterns that work, and the stuff nobody tells you upfront.
Mar 8, 20255 min read - 10Docker
Setting Up a Private Docker Registry You Can Actually Trust
Running your own registry with Nginx, TLS, and authentication. Why relying solely on Docker Hub for production images falls short.
Feb 14, 20255 min read - 11CI/CD
GitHub Actions: Reusable Workflows That Actually Scale
How to eliminate duplicated CI/CD configs across 30+ repos with reusable workflows, composite actions, and a central workflow registry.
Jan 18, 20255 min read - 12Security
The Cloud Shared Responsibility Model Is Not Optional
What you own, what your cloud provider owns, and the gray areas in between. Real breach examples that prove why this matters.
Dec 12, 20245 min read - 13Platform Engineering
Platform Engineering: Building an Internal Developer Portal That Gets Used
Most internal platforms fail because they solve infrastructure problems, not developer problems. Here is how to build one that developers actually adopt.
Nov 5, 20245 min read - 14Cloud Native
Container Security Scanning in CI/CD: Beyond the Basics
Image scanning alone isn't enough. This post walks through a multi-layer container security pipeline that catches vulnerabilities before they reach production.
Oct 10, 20245 min read - 15Security
Zero Trust Networking: A Practical Implementation Guide
A practical approach to implementing zero trust across services, users, and infrastructure without boiling the ocean.
Sep 22, 20245 min read - 16Observability
Structured Logging That Actually Scales
Why replacing text logs with structured JSON, shipping them to a central stack, and adopting consistent query patterns cuts incident response time in half.
Aug 15, 20245 min read