vps – Page 4 – Türker Yıldırım

A deploy that can be undone in ninety seconds

Deep diveDecember 23, 202110 min read

The rollback plan was “redeploy the previous tag” and it took nineteen minutes. Rolling back is a build, and a build is not fast.

OIDC to the cloud, so the pipeline holds no long-lived key

Deep diveNovember 30, 202110 min read

A deploy key valid since 2018, in a settings page, with no expiry and no audit trail. A token exchange replaces it, if the trust is scoped narrowly.

A module with too many variables is a copy

NoteOctober 25, 20212 min read

A module exposing every attribute of the resources it wraps has not abstracted anything — it is the same configuration with an extra indirection. The test is whether…

The certificate that expired on a root nobody controlled

Deep diveSeptember 7, 20219 min read

30 September, and a certificate chain that was valid on every browser we tested. The API works and three integrations do not.

Image optimisation is a build step, not a plugin

Deep diveSeptember 6, 202110 min read

A 4.2 MB hero image, uploaded by somebody doing their job correctly. LCP at 6.1 seconds, and a plugin that only runs on upload.

Terraform 1.0 is a promise about the next five years

Deep diveJune 2, 202110 min read

A version number that is a compatibility statement rather than a feature list. Three environments described by hand, and the import that is most of the work.

Compose v2 is a plugin, and the hyphen finally goes

Deep diveMay 19, 20219 min read

The same command, spelled two ways, on eight machines. A Python program became a Go plugin, and the container names changed underneath every script.

terraform fmt in CI, so the diff is about intent

NoteMay 4, 20212 min read

Infrastructure code accumulates whitespace disagreements faster than application code, because it is edited rarely and by different people each time. -check makes it a gate rather than a…

A self-hosted runner is a machine on your network

NoteApril 28, 20212 min read

A self-hosted runner solves the problem of reaching a private network by putting a machine that executes arbitrary workflow files inside it. The ephemeral mode is what makes…

The staging environment that was lying

Deep diveApril 8, 202110 min read

It passed on staging four times and failed in production four times. The same code, a different outcome, and five differences nobody had enumerated.