TL;DR TL;DR tls_private_key generates a key pair in Terraform itself. algorithm accepts RSA, ECDSA or ED25519; rsa_bits defaults to 2048 and ecdsa_curve defaults to P224. The private key is stored unencrypted in the state file. The provider documentation says so in a security notice, and I confirmed it: the marker …

TL;DR A committed .env file never goes away. After git rm the password is still readable with git show <commit>:.env and git log -p. The only real fix is to rotate the secret. gitleaks finds it in milliseconds. In my run it scanned 105 bytes in 24 ms and reported 2 leaks (a Stripe-style key and a generic …

TL;DR What you build: an Application Load Balancer in front of 2 EC2 app servers in 2 availability zones, talking to a private RDS PostgreSQL 16 database. 30 AWS resources inside a VPC that Terraform creates for you, from one terraform apply. How I run it: by hand, one tagged Ansible command at a time (--tags …

TL;DR Every "my cluster has no IPs left" ticket is one of four address pools filling up: the node subnet, the pod addresses, the service CIDR, or the load-balancer pool. Which pool fills first depends on the platform: on EKS pods take VPC addresses (an m5.2xlarge holds 60), on GKE every node reserves a Pod …

TL;DR git rebase --exec "<cmd>" <upstream> (short form -x) appends an exec <cmd> line after every pick in the rebase instruction list, so the command runs in the working tree of each replayed commit. A non-zero exit stops the rebase on that commit with exit code 1. When it stops, fix the …

TL;DR helm template <release> <chart> renders the chart into plain Kubernetes YAML on your machine. No cluster, no kubeconfig, no release record. On my laptop a local chart renders in 0.19 seconds, and the 767-line ingress-nginx chart renders straight from its repository in 0.67 seconds. Values precedence: …

TL;DR Certifications are not bad; chasing them is. A badge proves you reached the passing mark on one exam on one day. It does not prove you have run the service in production, and the terms attached to every badge say so. The four reasons from the video: certification overload (AWS, Azure, GCP, Kubernetes, AI, …

TL;DR Question 1, migrate web, batch and legacy apps with scalability and security: legacy and web tiers on EC2 in an Auto Scaling group across multiple Availability Zones, network ACLs plus security groups for defence in layers, and AWS Batch for the batch jobs, because it provisions and releases the compute per job. …

TL;DR Six skills, none of them cloud-specific, all of them used every day: 1) one programming language you can read the documentation of, plus Git and an editor; 2) scripting in bash first and Python second; 3) a CI/CD tool, Jenkins, GitHub Actions or GitLab; 4) automation with Ansible, with bash as the fallback; 5) …

TL;DR A Google Cloud external HTTP load balancer is five objects in a chain: global forwarding rule (one anycast IP on Premium Tier) → target HTTP proxy → URL map → backend service with a health check → instance group of VMs. In the console the wizard creates all of them as "frontend, routing rules, backend"; …