<![CDATA[Devops & AI Hub - Medium]]> https://medium.com/devops-ai-decoded?source=rss----67e07970923e---4 https://cdn-images-1.medium.com/proxy/1*TGH72Nnw24QL3iV9IOm4VA.png Devops &amp; AI Hub - Medium https://medium.com/devops-ai-decoded?source=rss----67e07970923e---4 Medium Fri, 06 Nov 2026 01:29:19 GMT <![CDATA[How to Rotate Kubernetes Secrets Without Downtime Using ESO and Vault]]>

Kubernetes Secrets are base64-encoded strings stored in etcd. They are not encrypted by default. Every developer and operator with kubectl…

Continue reading on Devops & AI Hub »

]]> https://medium.com/devops-ai-decoded/how-to-rotate-kubernetes-secrets-without-downtime-using-eso-and-vault-d582bfe63ff4?source=rss----67e07970923e---4 https://medium.com/p/d582bfe63ff4 Tue, 03 Nov 2026 04:31:04 GMT 2026-11-03T04:31:04.011Z <![CDATA[CIS Kubernetes Benchmark: What It Is and How to Pass It]]>

The CIS Kubernetes Benchmark is a consensus-developed set of configuration recommendations published by the Center for Internet Security…

Continue reading on Devops & AI Hub »

]]> https://medium.com/devops-ai-decoded/cis-kubernetes-benchmark-what-it-is-and-how-to-pass-it-7f632707b15f?source=rss----67e07970923e---4 https://medium.com/p/7f632707b15f Tue, 03 Nov 2026 04:31:04 GMT 2026-11-03T04:31:03.968Z <![CDATA[Kubernetes RBAC Explained: Roles, RoleBindings and Best Practices]]>

Kubernetes Role-Based Access Control (RBAC) determines what actions every entity in your cluster is allowed to take: which users can…

Continue reading on Devops & AI Hub »

]]> https://medium.com/devops-ai-decoded/kubernetes-rbac-explained-roles-rolebindings-and-best-practices-a7bd767b3ec0?source=rss----67e07970923e---4 https://medium.com/p/a7bd767b3ec0 Mon, 02 Nov 2026 04:31:03 GMT 2026-11-02T04:31:02.868Z <![CDATA[How to Scan Docker Images for CVEs with Trivy: Complete Guide]]>

Trivy, developed by Aqua Security and donated to the CNCF, is the most widely adopted open-source container vulnerability scanner in 2026…

Continue reading on Devops & AI Hub »

]]> https://medium.com/devops-ai-decoded/how-to-scan-docker-images-for-cves-with-trivy-complete-guide-07b0b209a063?source=rss----67e07970923e---4 https://medium.com/p/07b0b209a063 Sun, 01 Nov 2026 04:31:02 GMT 2026-11-01T04:31:02.842Z <![CDATA[Loki vs Elasticsearch for Log Aggregation: Real Cost Comparison]]>

Centralised log aggregation is one of the first observability investments a team makes, and the tool choice has long-term cost and…

Continue reading on Devops & AI Hub »

]]> https://medium.com/devops-ai-decoded/loki-vs-elasticsearch-for-log-aggregation-real-cost-comparison-c7387a23d2b2?source=rss----67e07970923e---4 https://medium.com/p/c7387a23d2b2 Sat, 31 Oct 2026 04:31:03 GMT 2026-10-31T04:31:03.327Z <![CDATA[Distributed Tracing With OpenTelemetry: A Practical Setup Guide]]>

Distributed tracing is the observability capability that answers the question: for this specific user request that failed, which service…

Continue reading on Devops & AI Hub »

]]> https://medium.com/devops-ai-decoded/distributed-tracing-with-opentelemetry-a-practical-setup-guide-ba0d4f8666df?source=rss----67e07970923e---4 https://medium.com/p/ba0d4f8666df Fri, 30 Oct 2026 04:31:02 GMT 2026-10-30T04:31:02.571Z <![CDATA[How to Write Effective Prometheus Alerts That Don’t Page Noise]]>

A Prometheus alert that fires correctly — when a real user-impacting problem exists and needs a human response — is one of the most…

Continue reading on Devops & AI Hub »

]]> https://medium.com/devops-ai-decoded/how-to-write-effective-prometheus-alerts-that-dont-page-noise-396c8e427a1e?source=rss----67e07970923e---4 https://medium.com/p/396c8e427a1e Thu, 29 Oct 2026 04:31:04 GMT 2026-10-29T04:31:03.813Z <![CDATA[S3 Lifecycle Policies: Automatically Archive and Delete Old Data]]>

S3 Lifecycle policies are rules that automatically move objects between storage classes — or delete them entirely — based on age. Without…

Continue reading on Devops & AI Hub »

]]> https://medium.com/devops-ai-decoded/s3-lifecycle-policies-automatically-archive-and-delete-old-data-bc378f17a54e?source=rss----67e07970923e---4 https://medium.com/p/bc378f17a54e Wed, 28 Oct 2026 04:31:03 GMT 2026-10-28T04:31:03.901Z <![CDATA[How to Use AWS Systems Manager Instead of SSH Bastion Hosts]]>

A bastion host (also called a jump box) is an EC2 instance in a public subnet that you SSH into first, then SSH again from there to your…

Continue reading on Devops & AI Hub »

]]> https://medium.com/devops-ai-decoded/how-to-use-aws-systems-manager-instead-of-ssh-bastion-hosts-2df1cab2d6f8?source=rss----67e07970923e---4 https://medium.com/p/2df1cab2d6f8 Tue, 27 Oct 2026 09:59:44 GMT 2026-10-27T09:59:44.550Z <![CDATA[How to Set Up Prometheus and Grafana on Kubernetes in 30 Minutes]]>

Prometheus and Grafana are the de facto monitoring stack for Kubernetes in 2026. Prometheus scrapes metrics from your pods and cluster…

Continue reading on Devops & AI Hub »

]]> https://medium.com/devops-ai-decoded/how-to-set-up-prometheus-and-grafana-on-kubernetes-in-30-minutes-edd18878e675?source=rss----67e07970923e---4 https://medium.com/p/edd18878e675 Mon, 26 Oct 2026 04:46:49 GMT 2026-10-26T04:46:49.078Z