Blog
GenAI, MLOps, Cloud & Platform Engineering
91 posts on cloud, platform engineering and AI tooling. Product write-ups (cloud audits, Irish tax calculators) live on the GenOps blog.
Databricks & MLflow Concepts Run on GCP: Delta Lake, Dataproc and Cloud Run
2.46M taxi trips through bronze, silver and gold on Delta Lake, then an 8-model sweep tracked in MLflow on Cloud Run. Mapped to Databricks concepts, with the failures.
Cloud Run Rightsizer: Simulating Real Traffic to Cut Cost
A request-level simulator of Cloud Run autoscaling and billing finds the cheapest config meeting your SLO, validated against a real service with out-of-sample runs.
Deploy Risk Scorer on Google Cloud: History Model & Rollout Gates
A model trained on real commit history ranks changes, flags catch the catastrophic ones, and the result becomes canary percentage, bake time and reviewers.
Multi-Agent Terraform Plan Review: Rules Decide, Models Explain
Security, cost, reliability and compliance agents review a plan in parallel; a critic drops hallucinations and code alone sets approve, needs_changes or block.
Terraform Drift Triage on Google Cloud: Adopt, Revert or Investigate
For every drifted resource: a rule-based decision, the principal who changed it from real audit logs, and the exact command or code edit. Models only explain.
IAM Blast Radius on Google Cloud: Escalation Paths & Verified Fixes
Follows impersonation chains, scores each principal 0-100, and only shows a least-privilege fix after re-simulating the policy to prove it narrows access.
Secrets Sprawl Detector on Google Cloud: Env Vars, Logs & Buckets
Credentials leak outside Git: env vars, Terraform state, logs, VM metadata. This scanner ranks findings by who can read the place and never sends a secret to a model.
Data Residency & PII Auditor for BigQuery and Cloud Storage
Validated detectors (Luhn, IBAN mod 97, SSN rules) find PII in BigQuery and GCS, then check region, access and encryption against your policy. Raw values never leave.
MCP Injection Firewall on Cloud Run: Tool Poisoning & Rug-Pull Defense
A proxy between an agent and its MCP tools that blocks hidden instructions, pins tool definitions, and stops secrets leaving. Includes an honest negative result.
MCP Gateway on GKE: agentgateway, Keycloak & Per-Tool Authorization
Agents get a 5-minute Keycloak token and call one URL; the gateway hides tools a role may not use and calls each server with its own Google identity.
Agent Regression Harness on Google Cloud: Statistical Diffs for LLM Agents
Same suite against a baseline and a candidate, assertions over every tool trace, Fisher exact tests per case. A careless prompt that refunds a 45-day-old order gets caught.
Multi-Agent Incident Response on Google Cloud: ADK, A2A & Human Approval
An ADK analyst reads real error logs through MCP and proposes a rollback; code validates it against live state, a human approves, production recovers.
SRE Reliability Lab: SLOs, Burn-Rate Alerts & Chaos Drills
A real chaos drill that watched a multi-window burn-rate alert actually fire and resolve, then drafted its own postmortem from real telemetry.
Hardened MCP Servers on Cloud Run
Every MCP call verified twice, scoped per caller, rate-limited in Firestore, and audited to BigQuery without ever logging argument values.
Keyless CI/CD to Cloud Run: Workload Identity, Sigstore & SLSA
GitHub Actions reaches Cloud Run with zero stored credentials — pinned to one workflow file, keyless signing, and drills that prove a rogue image gets refused.
Cloud Security Posture Scanner on Google Cloud
Cloud Asset Inventory and Checkov feed 16 CIS-mapped Rego rules into one BigQuery finding schema with an open/resolved/reopened lifecycle.
Agent Cost & Observability Platform for LLM Agents
Every Gemini call logged with token counts and cost, guardrails that block prompt injection before it spends a cent, quality scored by an LLM judge.
Secure Delivery to Cloud Run: Binary Auth & Canary
Nothing reaches production unless it was built by this pipeline and passed a vulnerability gate — two signed attestations, one bad release caught and rolled back.
FinOps Cost-Anomaly Detector on Google Cloud
A z-score baseline over daily cost per service, SKU and GKE namespace — catching every injected anomaly with zero false positives.
Serverless Orders Platform: Cloud Run, Workflows Saga & Firestore
An order-processing platform with no servers to run — a saga that retries transient failures, compensates business failures, and never oversells stock.
Streaming Data Platform: Pub/Sub to BigQuery with Dead Letters
An event pipeline you can trust — enforced schema, a replayable raw landing zone, dead-lettering, and PII-masked authorized views for analysts.
Hub-and-Spoke Network Landing Zone on Google Cloud
Three VPCs joined by Network Connectivity Center in star topology, so prod and dev reach shared services but never each other — proven three ways.
Enterprise RAG Platform: Access Control, DLP & Cost
A governed GenAI knowledge platform where forbidden chunks are never retrieved — enforced in SQL, proven with real distinct identities.
GKE Platform Engineering: Binary Authorization & Canary
An internal developer platform on GKE Autopilot: signed images, GitOps, canary releases with automatic rollback, a WAF-protected Gateway.
KEDA and Karpenter on GKE: Event-Driven Autoscaling
Scale pods on Pub/Sub queue depth with KEDA and provision right-sized nodes with Karpenter on GKE Standard, both dropping to zero when idle.
I Built a Runbook Search Tool That Cites Sources
It’s 2:47 AM, PagerDuty just fired, and you know you wrote a runbook for this exact situation months ago — you just can’t remember where.
Optimizing Cursor for Consumption Pricing
If you log into Cursor soon, you are going to notice a massive shift under the hood.
Ultimate Guide to Model Context Protocol (MCP)
The AI landscape shifted dramatically with the introduction of the Model Context Protocol (MCP) , open-sourced by Anthropic.
Free Network Troubleshooting Tool That Runs Entirely in Your Browser
When something breaks at 2am, the last thing you want is six tabs open trying to figure out whether it's DNS, SSL, or the site just being down.
Running Ollama Locally: LLMs on Your Laptop
Run ChatGPT-level AI locally using Ollama. No subscriptions, no data leaks, no internet required.
Mastering Claude Code: Basics to Agentic Flows
Anthropic’s Claude Code stands out for one reason: it lives in your terminal and behaves like a real engineering partner.
DevOps learnings from The Phoenix and Unicorn Project
Ever feel like your AI/ML projects are a mythical beast — part unicorn dream, part phoenix inferno?
AI Document Pipeline with AWS ECS & Bedrock
In today’s data-driven world, processing and extracting insights from documents at scale is a common challenge.
Building an End-to-End MLOps Pipeline on AWS SageMaker
An open-source pipeline that automates training on SageMaker end to end — Terraform for infra, Docker for a custom PyTorch model.
Exploring Cursor CLI: An AI-Powered Terminal
If you’ve spent way too many hours glued to the terminal, you know how clunky it feels to switch contexts for AI help on your code.
Advanced Tips and Tricks for Cursor IDE
I’ve been using Terraform, Python, Bash, Kubernetes, and Jenkins for years — lately, Cursor IDE has become my go-to for boosting productivity.
Simplifying Kubernetes with ArgoCD: Your Go-To GitOps Solution
Managing Kubernetes deployments across multiple environments can feel like herding cats.
AI-Powered IDEs: Cursor vs Windsurf vs Kiro
As a developer, I can tell you: AI-powered IDEs are a godsend.
Managing AWS Infra with Crossplane vs Terraform
For years, I’ve used Terraform to manage cloud infrastructure. It’s powerful and battle-tested — but I always felt there was a gap.
AI Document Processing System: MCP, ECS & S3
How I built a serverless architecture that lets AI models intelligently fetch and summarize documents from S3 using the Model Context Protocol
Building Large Language Models (LLMs) in Machine Learning
Large Language Models (LLMs) have revolutionized natural language processing, enabling text generation, summarization, and code completion.
Deploying a Text-Gen AI App with AWS EKS & GitOps
A real-world implementation of a text generation AI app powered by a Generative AI API — OpenAI, AWS Bedrock, or Hugging Face.
Building and Deploying LLMs: A Real-World Guide
Large Language Models (LLMs) like GPT, LLaMA, and Falcon have revolutionized AI-powered applications, enabling chatbots, content generation, and more.
Troubleshooting Kubernetes Deployments
Kubernetes is a powerful container orchestration platform, but managing and troubleshooting deployments can be challenging.
Crossplane Automation for Cloud-Native Apps
As cloud-native applications continue to evolve, managing multi-cloud and hybrid environments efficiently becomes critical.
Azure DevOps CI/CD pipeline with Terraform
An end-to-end Azure DevOps CI/CD pipeline with Terraform for a sample e-commerce application, using advanced patterns.
Cloud Security Engineer Job Responsibilities: A Comprehensive Guide
With the rise of cloud computing, security has become a top concern for organizations.
Immutable Infrastructure with Blue-Green Deployments using Terraform
Immutable Infrastructure ensures deployed instances remain unchanged after deployment, reducing configuration drift and improving stability.
Mastering MySQL: Basics, Advanced Commands, and Best Practices
MySQL is one of the most widely used relational database management systems (RDBMS) in the world.
Automated SSL Certificate Rotation Using Certbot on Ubuntu
SSL certificates are crucial for encrypting web traffic and ensuring secure communication between clients and servers.
Open Policy Agent (OPA): A Security Guide
Security, compliance, and policy enforcement are crucial aspects of managing cloud and containerized environments.
AWS Databases: Types & Best Practices
AWS offers a wide range of database solutions for different workloads — from relational databases to NoSQL and in-memory databases.
Kubernetes Pods Failing: Advanced Troubleshooting
Kubernetes (K8s) is a powerful container orchestration tool, but even experienced DevOps engineers encounter failing pods.
Kubernetes Management: A Comprehensive Guide with Real-World Examples
Managing a Kubernetes environment requires expertise in handling Pods, Clusters, Services, Monitoring, Namespaces, Deployments, Configurations, and Secrets.
Generative AI Skills Roadmap for DevOps Engineers
Generative AI is reshaping industries, and DevOps/Cloud Engineers are no exception.
Deploying a Sample App with AWS EKS & Terraform
In modern DevOps workflows, Infrastructure as Code (IaC) and CI/CD pipelines play a crucial role in ensuring scalable, repeatable, and automated deployments.
Deploying an App with AWS EKS, Terraform & ArgoCD
In modern DevOps workflows, Infrastructure as Code (IaC) and GitOps practices streamline software delivery.
Setting Up AWS SageMaker Studio & Training
AWS SageMaker is a fully managed service that allows developers and data scientists to build, train, and deploy machine learning (ML) models at scale.
Mastering HTTP Proxy Servers: Apache vs. Nginx
In modern web architectures, HTTP proxy servers play a crucial role in load balancing, caching, security, and request routing.
Azure DevOps: The Ultimate Guide
Azure DevOps has become a go-to platform for managing CI/CD, infrastructure automation, and agile workflows.
AWS CDK: The Future of Infrastructure as Code
AWS Cloud Development Kit (CDK) is revolutionizing how developers define cloud infrastructure.
Argo CD: The Ultimate GitOps Continuous Deployment Tool
In the modern DevOps landscape, GitOps has emerged as a revolutionary approach to continuous delivery.
Azure Automation & DevOps Pipeline Optimization
In today’s cloud-driven world, automating operational tasks and optimizing CI/CD pipelines is crucial for efficient DevOps practices.
Flux CD: A GitOps Continuous Deployment Tool for Kubernetes
In the cloud-native era, GitOps has become the de facto standard for managing Kubernetes deployments.
Docker Containers: A Complete Guide
Docker has revolutionized the way we develop, deploy, and manage applications by providing a lightweight, portable, and efficient containerization platform.
Advanced Docker Commands: Mastering Containers Like a Pro
Docker is an essential tool for modern DevOps, enabling seamless containerization of applications.
Advanced Docker: A Deep Dive with Real-World Examples
Docker has revolutionized the way we develop, package, and deploy applications.
Mastering Observability: Prometheus to CloudWatch
Observability is a key aspect of modern cloud-native applications. It helps organizations monitor performance, detect anomalies, and troubleshoot effectively.
Scaling Jenkins Pipelines for Hundreds of Apps
Jenkins is a powerful automation server that enables CI/CD for applications.
ELK Stack: A Complete Guide with Real-World Use Cases
Modern applications generate vast amounts of logs, making log aggregation, analysis, and visualization critical for operational efficiency and security.
DORA Metrics: Measuring DevOps Performance
DORA (DevOps Research and Assessment) metrics provide a data-driven approach to measuring software delivery and operational performance.
CI/CD Pipelines with SonarQube & Artifactory
Modern DevOps practices require seamless integration of CI/CD pipelines with SonarQube, container registries, and artifact registries.
Kubernetes Common Errors & How to Fix Them
Kubernetes is a powerful but complex system, and errors are inevitable.
Proactive Resilience: Preventing Failures Before They Happen
In the world of cloud computing and distributed systems, resilience is critical.
Observability in Kubernetes: Prometheus & Grafana
Observability is a key aspect of modern infrastructure. Prometheus and Grafana are widely used for monitoring and visualization in Kubernetes environments.
Chaos Engineering: Breaking Things to Build Resilience
Chaos Engineering is the practice of deliberately introducing failures in a system to test its resilience and recovery mechanisms.
Cloud Engineer vs DevOps vs SRE vs MLOps: Roles
In the evolving tech landscape, roles such as Cloud Engineer, DevOps, Site Reliability Engineer (SRE), DevSecOps, and MLOps have gained prominence.
Mastering K9s: The Ultimate Kubernetes CLI Tool for Efficiency
Managing Kubernetes clusters via the command line can be complex and time-consuming.
Amazon DevOps Guru: A Deep Dive with Real-World Examples
Amazon DevOps Guru is an AI-powered operations service that helps identify and fix issues in applications running on AWS.
Mastering Kubernetes Package Management with Helm
Kubernetes simplifies container orchestration, but managing applications at scale can be challenging.
Mastering Ansible: Advanced Techniques and Best Practices
Ansible has become an indispensable tool for DevOps professionals, enabling efficient automation of complex infrastructure tasks.
Setting Up Kubernetes with kubeadm: A Complete Guide
kubeadm is a powerful tool that simplifies Kubernetes cluster setup. It is ideal for production-grade clusters as well as local testing.
Mastering Kubernetes with Kind: Cluster Setup
Kubernetes is the go-to platform for container orchestration, but setting up a full-fledged cluster can be complex.
Ansible: A Comprehensive Guide
Ansible is a powerful automation tool that simplifies complex tasks, from configuration management to application deployment.
Helm in Kubernetes: A Complete Guide
Helm is the package manager for Kubernetes, making it easier to define, install, and manage Kubernetes applications.
Mastering Minikube: A Complete Guide with Practical Examples
Minikube is a lightweight Kubernetes implementation that lets you run a cluster locally for development and testing.
Advanced Terraform Commands & Data Sources
Terraform is a powerful Infrastructure as Code (IaC) tool that enables automation and scalability.
Mastering Advanced kubectl Commands: Efficient Kubernetes Management
Kubernetes is a powerful orchestration platform, and kubectl is its command-line interface (CLI).
Kubernetes for Beginners: Local Setup to AWS
Kubernetes (K8s) is the industry-standard container orchestration platform, widely used for managing containerized applications at scale.
Mastering Terraform: Install, Config & Workspaces
Terraform is a powerful tool for Infrastructure as Code (IaC) that allows you to build, change, and version your infrastructure safely and efficiently.
Mastering Terragrunt: Advanced Terraform Management
Terragrunt simplifies and enhances Terraform usage with better code reusability, DRY configurations, and easier multi-environment deployments.
No posts match. Try clearing a filter.