I test what ships and publish what I find, failures included: 100+ public repositories, every restore script run by CI, every finding on the ledger with its rule.
One of fewer than 250 Docker Captains worldwide, a CNCF Ambassador, and Technical Editor of "Docker and Kubernetes Security."
Production-tested. Partner links.
🛸 Proton VPN – Encrypted tunnel
🔐 Proton Pass – Zero-knowledge vault
🦑 GitKraken Pro – Visual Git client
🐧 Linux Foundation – Code: VALDEMAR
📚 ExpertEdge – Code: VALDEMAR
14 posts tagged
Mutation testing for infrastructure code, done by hand across fifteen repositories. 153 planted bugs, and four green tests that could never have failed.
EU AI Act Article 12 wants a per-event record. Enforcement Tracking evidences thresholds on a schedule. What that gap costs, and the join key that closes it.
HashiCorp's Terraform MCP server is GA and IBM Bob can write production IaC. ENABLE_TF_OPERATIONS separates a safe assistant from autonomous apply.
A practical guide to Platform Engineering — build internal developer platforms, golden paths, GitOps workflows, and scalable cloud foundations.
Ace your Terraform interview with 10 real questions, expert answers, and best practices on state, drift, modules, and security.
Build a production-grade GitOps pipeline on AWS with EKS, Argo CD, Terraform, Vault, and GitHub Actions. Real architecture — systems that scale.
Explore the top 10 DevOps tools for 2025 to optimize workflows, enhance security, and streamline CI/CD, GitOps, and Kubernetes.
Tag every resource once with default_tags, combine tags with merge(), ignore tags other tools change, and keep one scheme across teams, with tools that check it.
contains() checks list membership, strcontains() checks substrings. Where each fits in validation and conditionals, the type mismatches that bite, and examples.
What null_resource is for, how triggers re-run provisioners, where it earns its place, and when terraform_data (Terraform 1.4+) is the cleaner replacement.
What ignore_changes does, when it is right, where it hides real drift, and real examples of attributes you should and should not ignore.
Why Terraform locks state, how to find the lock ID in the error, the force-unlock command, the Azure Blob lease case, and habits that keep you from needing it.
Learn how to install Terraform on macOS using Homebrew. Step-by-step guide includes setup, version check, and usage tips for managing infrastructure as code.
Puppet Server and a Puppet agent on Ubuntu, from hostnames and NTP to certificate signing and a first manifest, with every command in order.
