From the engineering room
Practical notes on DevOps, platform engineering, Kubernetes, GitOps, and the infrastructure work we ship every week.
A three-tier application with Docker Compose and Flyway
Build a three-tier application with Dockerfiles, two isolated Docker Compose networks, PostgreSQL, health checks, and versioned Flyway migrations.
Read article →
How we added an AI concierge to a static site
A lead-capturing AI concierge on a static site: a Cloudflare Worker proxies Claude, a self-contained widget rides every page, and captured leads land in the same mailbox as our forms — no server, free tier.
Read article →
When engineers break production: blame, safety, and resilient systems
What psychology and organizational research say about production mistakes—and why reliable teams combine psychological safety with engineering controls and accountability.
Read article →
SSM Parameter Store vs Terraform state for shared values
Terraform state is convenient for Terraform-to-Terraform dependencies, but SSM Parameter Store is the better contract for shared infrastructure values consumed by many tools.
Read article →
Closing the loop: a self-improving AI bot for network access automation
How we built an AI coding agent that handles the full lifecycle of network access requests — from ticket to firewall rule to CI pipeline monitoring — and rewrites its own instructions after every failure.
Read article →
The AI agent arms race: why Pi might not be the king
The intersection of LLMs, autonomous agents, and complex tool use. Exploring the frontiers of what's possible in the era of AI-driven software engineering.
Read article →
A Lambda-less config API on AWS
API Gateway → DynamoDB direct integration with per-method response caching, per-item TTL, and a stage-variable kill switch. The rationale, the Terraform, and the operational knobs — no Lambda in the path.
Read article →
How we maintain infraheads.com
Prompt → PR → S3 sync → selective Cloudflare purge → IndexNow submission. The CI flow that ships infraheads.com in under two minutes, with code snippets from the actual GitHub Actions workflows.
Read article →
DevOps as a Service - Buyer's guide
IntroductionDevOps is a relatively new approach to software development and infrastructure management. It helps make the development process predictable and efficient. However, few organizations can implement DevOps effe
Read article →
Speeding up Terraform using resource hash sums
Introduction:All IaC engineers working on relatively large infrastructures with Terraform know that a growing number of resources defined in the same Terraform module slows down the "apply" and "plan" operations. Terrafo
Read article →
Dependency management with lock files
IntroductionIn the complex world of software development, the conversation often turns to the nuances of dependency management, a critical aspect that separates seasoned engineers from novices. This article is dedicated
Read article →
Kubernetes with ArgoCD done right
In typical Software Development Life Cycle (SDLC) setups, it’s common to have development, testing, and production clusters. However, a recurring issue we’ve observed involves the deployment strategy for management tools
Read article →
Conventional commits
Achieving and maintaining code quality is crucial in the complex landscape of software development. Our recent exploration reveals the effectiveness of combining Semantic Versioning (SemVer 2.0.0) with Conventional Commi
Read article →
Essentials of a production-ready Kubernetes cluster
When setting up infrastructure from scratch, particularly with Kubernetes, it’s crucial to immediately prioritize three often overlooked components. This article highlights these components and explains why incorporating
Read article →
Secret management
In the evolving landscape of software development, the transition from monolithic architectures to microservices necessitates a reevaluation of authentication strategies, particularly the secure storage of credentials. S
Read article →
Triggering CI Pipelines: When and Why
In this article, we will walk through the CI pipeline that builds a docker image for an API service that has some dependencies and services dependent on it. Let's count all the cases when an event should trigger the CI p
Read article →
A GitOps KISS
When designing a CI or a CD workflow, you must decide how users will specify service configuration values for the microservices deployed on Kubernetes and identify who these users are.Assume you are building a self-servi
Read article →
Software testing from DevOps engineer's perspective
At Infraheads, we have worked with the QA engineers the most. Failing CI pipelines we implement mainly fail because of the flaky tests. In most cases, the CI pipeline users are not prepared to reflect on error messages s
Read article →
Immutable tags
In GitOps, the CD on Kubernetes is ensured with the deployment operator that monitors the CR or the Git repository containing the service helm charts or manifests. When the Git repository changes, the manifests are reapp
Read article →
IaC versus Web Console changes
In the ever-evolving landscape of cloud computing, managing changes in cloud platform accounts is not just a matter of operational hygiene — it’s a critical pillar supporting the foundation of companies that leverage clo
Read article →
Cloud cost management
Do you know that the cloud providers practice oversubscription? They sell you the hardware that they still need to provision. They do so because they know you will not use the resources you pay for. It may not be about y
Read article →
AI in Azure
In this article, we will walk through the stages of AI adoption for Azure shops that have the data necessary to start training/serving models.Surprisingly, the statistics show that many companies spend around a year from
Read article →
Immutable Infrastructure tools
The debate between mutable and immutable paradigms continues to stir discussions in infrastructure management. While many articles have trodden the path of comparing tools head-on, this piece seeks to illuminate the adva
Read article →
turnk8s — turnkey k8s deployment solution
Turnk8s is a turnkey Kubernetes deployment solution that adheres to the Talos Linux philosophy. It inherits all the great features of Talos Linux and builds a complete end-to-end deployment solution for on-premise enviro
Read article →