Skip to main content

Practical DevOps, Cloud, AI & Linux engineering guides

Featured Article

15 SRE Interview Questions With Answers, From SLOs to On-Call

SRE interviews test numbers and judgment. Fifteen questions on SLIs, error budgets, incident command, toil, capacity, on-call and postmortems, plus a systems-design scenario, each with the answer that scores and the one that loses the room.

KU
Kiril UrbonasAI Engineer
|Oct 31, 2026
15 SRE Interview Questions With Answers, From SLOs to On-Call

Topics

Latest Articles

View All →
One workflow that builds, signs keylessly with GitHub OIDC, attaches an SBOM and SLSA provenance, plus the Kyverno policy that refuses anything unsigned. Copy it, change three names, ship it.
••22 hours ago

Sign Container Images With Cosign: Keyless GitHub Actions Workflow, SBOM and In-Cluster Checks

One workflow that builds, signs keylessly with GitHub OIDC, attaches an SBOM and SLSA provenance, plus the Kyverno policy that refuses anything unsigned. Copy it, change three names, ship it.

KU
Kiril Urbonas·7 min read
Read article
When Prometheus runs out of memory, one label is almost always to blame. Six commands to find it, the relabel rules that drop it, and the scrape limits that stop it coming back.
••22 hours ago

Fix Prometheus High Cardinality: 6 Commands to Find and Drop Bad Series

When Prometheus runs out of memory, one label is almost always to blame. Six commands to find it, the relabel rules that drop it, and the scrape limits that stop it coming back.

KU
Kiril Urbonas·8 min read
Read article
Run a DaemonSet agent on every node and a small gateway Deployment behind it. Two Helm values files, the processor order that keeps the Collector alive, and the errors you will hit first.
••22 hours ago

OpenTelemetry Collector on Kubernetes: Agent vs Gateway, With Configs That Work

Run a DaemonSet agent on every node and a small gateway Deployment behind it. Two Helm values files, the processor order that keeps the Collector alive, and the errors you will hit first.

KU
Kiril Urbonas·7 min read
Read article
MLflow, Kubeflow, Weights & Biases, SageMaker, Vertex AI, ZenML and Metaflow compared on tracking, registry, pipelines, serving, self-hosting and pricing, with a default stack for each team size.
••22 hours ago

MLOps Tools in 2026: 7 Platforms Compared, and the Stack We'd Pick

MLflow, Kubeflow, Weights & Biases, SageMaker, Vertex AI, ZenML and Metaflow compared on tracking, registry, pipelines, serving, self-hosting and pricing, with a default stack for each team size.

KU
Kiril Urbonas·8 min read
Read article
Three kinds of drift, two tests that catch most of it, one Prometheus exporter, and the alert rules that do not page you every Monday morning.
••22 hours ago

Monitoring ML Models in Production: Data, Concept and Prediction Drift, With Code

Three kinds of drift, two tests that catch most of it, one Prometheus exporter, and the alert rules that do not page you every Monday morning.

KU
Kiril Urbonas·8 min read
Read article
A golden path is a template plus the defaults that make the right way the easy way. How to build the first one, service template, CI, deploy and observability, how to measure whether anyone uses it, and the two ways platform teams kill their own paths.
••22 hours ago

Platform Engineering Golden Paths: Build Your First One in 6 Steps

A golden path is a template plus the defaults that make the right way the easy way. How to build the first one, service template, CI, deploy and observability, how to measure whether anyone uses it, and the two ways platform teams kill their own paths.

KU
Kiril Urbonas·7 min read
Read article
Hugging Face TGI is archived and read-only, so the real 2026 choice is vLLM, SGLang or TensorRT-LLM. A feature table, a launch command for each, and the one we default to.
••22 hours ago

vLLM vs SGLang vs TGI vs TensorRT-LLM: Which LLM Server in 2026

Hugging Face TGI is archived and read-only, so the real 2026 choice is vLLM, SGLang or TensorRT-LLM. A feature table, a launch command for each, and the one we default to.

KU
Kiril Urbonas·7 min read
Read article
A use-after-free in the IPv4 TCP handshake, present since Linux 4.4, now has a working exploit against MPTCP listeners, and every Go 1.24+ server is one by default. Which kernels are fixed and how to roll them through EKS, GKE and AKS.
••22 hours ago

CVE-2026-98432: The CVSS 9.8 Linux TCP Bug Now Has an Exploit. Patched Node Images

A use-after-free in the IPv4 TCP handshake, present since Linux 4.4, now has a working exploit against MPTCP listeners, and every Go 1.24+ server is one by default. Which kernels are fixed and how to roll them through EKS, GKE and AKS.

KU
Kiril Urbonas·8 min read
Read article
Kyverno 1.19 deprecated ClusterPolicy and went all in on CEL, Gatekeeper still speaks Rego, and Kubernetes now ships validating and mutating policies natively. How to pick, with the same policy written three ways.
••22 hours ago

Kyverno vs OPA Gatekeeper in 2026: CEL, Rego, or Native Admission Policy

Kyverno 1.19 deprecated ClusterPolicy and went all in on CEL, Gatekeeper still speaks Rego, and Kubernetes now ships validating and mutating policies natively. How to pick, with the same policy written three ways.

KU
Kiril Urbonas·7 min read
Read article
Kubernetes interviews in 2026 are scenario-led. Eighteen questions grouped junior, mid and senior, each with the answer, the first command, and what separates a strong answer from a memorized one.
••22 hours ago

18 Kubernetes Interview Questions With Answers, by Level

Kubernetes interviews in 2026 are scenario-led. Eighteen questions grouped junior, mid and senior, each with the answer, the first command, and what separates a strong answer from a memorized one.

KU
Kiril Urbonas·8 min read
Read article
The kubectl commands we actually type, grouped by the job in front of you, from switching contexts to rolling back a bad deploy. Copy-paste blocks, real output fields, and the errors that mean you are pointed at the wrong cluster.
••22 hours ago

kubectl Cheat Sheet 2026: 60 Commands Grouped by Task

The kubectl commands we actually type, grouped by the job in front of you, from switching contexts to rolling back a bad deploy. Copy-paste blocks, real output fields, and the errors that mean you are pointed at the wrong cluster.

KU
Kiril Urbonas·8 min read
Read article
On October 20, 2026, europe-west2-b lost power when its generators never started. Cross-zone control-plane timeouts then degraded the whole London region. What happened and the gcloud audit to run now.
••22 hours ago

Google Cloud's europe-west2 Outage: One Zone Lost Power and the Region Stalled for 6 Hours

On October 20, 2026, europe-west2-b lost power when its generators never started. Cross-zone control-plane timeouts then degraded the whole London region. What happened and the gcloud audit to run now.

KU
Kiril Urbonas·8 min read
Read article
Page 1 of 49 · 585 posts
of 49