DevOps on Sagar Panda | DevOps & Cloud Infra Engineer

Seeing Inside Amazon EKS with OpenTelemetry 🔍

Sat, 20 Jun 2026 07:45:10 +0530

Why This Setup?

Before getting into the architecture, a few quick notes. Telemetry goes to both New Relic and Honeycomb to test OpenTelemetry’s backend-independence promise and compare the two. New Relic wins on day-to-day usability — dashboards, APM, and alerts work intuitively. Honeycomb takes more getting used to, but its MCP server is where it genuinely shines: connected to Claude, you can ask plain-English questions against live telemetry — no NRQL or PromQL required. That’s the part worth jumping to 👇 first if you’re short on time.

Hands-On OpenTelemetry: Prometheus, Jaeger, Grafana and the OTel Demo

Mon, 08 Jun 2026 09:10:10 +0530

Preface

In the previous article, we covered the core observability concepts theoretically. The next step is exploring them practically using the OpenTelemetry Demo application.

The goal here is not to memorize PromQL syntax, but to understand how telemetry actually appears inside a real observability platform. So, let’s get started.

Observability 101: Understanding Metrics, Traces and Logs

Tue, 02 Jun 2026 19:30:10 +0530

Introduction

Most engineers encounter observability only after something breaks.

You are deep in the zone on a new feature when an urgent incident gets escalated. The report from customer support is notoriously vague:

 
 TEXT
 
"The website is slow."
"Checkout is failing."
"The API is timing out."
"The website is slow."
"Checkout is failing."
"The API is timing out."

The challenge in modern systems is rarely fixing the bug once you find it. The real headache is finding where the problem lives in the first place.

Turn Your GitHub Repository into a Self-Managing Workflow

Sun, 24 May 2026 12:45:10 +0530

Introduction

In my previous article, I wrote the fundamentals of GitHub Actions and how they can simplify CI/CD pipelines. But modern repositories need much more than just automated builds and deployments.

As projects grow, maintaining pull requests, managing issues, handling releases, updating dependencies, and reviewing security manually becomes repetitive and time-consuming.

Beyond Objects — Using Amazon S3 Files as a Native File System on EC2

Wed, 22 Apr 2026 12:30:10 +0530

Introduction

For over a decade, we’ve been known S3 is not a file system. We used hacks like s3fs-fuse or accepted the limited semantics of Mountpoint for S3. That has changed on April 2026.

Cache Me If You Can - AWS CloudFront in Action 🌏

Sun, 19 Apr 2026 10:15:10 +0530

Intro

AWS CloudFront is a service that makes websites and apps load faster for users around the world. It stores copies of our application content (like images, videos, and web pages) in different data centers across the globe, called edge locations.

Terraform Modules - Simplify, Organise and Reuse Your IAC

Sun, 22 Dec 2024 19:26:10 +0530

A Terraform module is a container/template for multiple resources that are used together. Modules are a way to organize and reuse code in Terraform, making infrastructure management more efficient and maintainable.

We first define the resource templates, and then we call the templates from outside of the module structures and we can even modify them as per our needs.

Set Up mTLS in NGINX for Robust Web Security.

Mon, 09 Dec 2024 19:26:10 +0530

What is mTLS:

mTLS, or mutual TLS, is a security protocol that ensures both the client and the server authenticate each other when they communicate over a network. It’s like a handshake where both sides check each other’s identity, making sure that both are who they say they are.

Fortify Your Security with CrowdSec — A Quick Start Guide

Mon, 30 Sep 2024 19:26:10 +0530

What is CrowdSec:

CrowdSec is an open-source security tool designed to help protect servers and applications from cyberattacks. It works by analyzing logs from your systems to detect suspicious activity, such as brute-force attempts, and then takes action to block or prevent those threats.

AWS WAF with Load Balancer - Beginner’s Guide

Tue, 20 Aug 2024 19:26:10 +0530

Setup:

First we need to have the web app ready. You can have multiple instances of your app as we are going to use ALB.

The Essential Role of Exit Codes in Bash Scripting

Wed, 26 Jun 2024 19:26:10 +0530

What are exit codes in linux

In Linux and Unix-like systems, an exit code is a numeric value returned by a command or a script after completion. It indicates the success or failure of the command or script execution.

Monitoring Kubernetes Cluster with Prometheus and Grafana

Mon, 10 Jun 2024 19:26:10 +0530

Introduction:

Keeping an eye on your Kubernetes cluster can feel like a daunting task, but with the right tools, it doesn’t have to be. Prometheus and Grafana – two fantastic open-source tools that make monitoring and visualizing your cluster easy.

Kubernetes Security — Role Based Access Control (RBAC)

Mon, 20 May 2024 19:26:10 +0530

Introduction

Role-Based Access Control (RBAC) is a method used in computer security to manage access to resources within a system.

RBAC in k8s is based on the principle. There are various terminologies such as users, service account, role, role binding and etc.

Dynamic Data fetching — Data Sources in Terraform/OpenTofu

Sun, 12 May 2024 10:26:10 +0530

I have migrated of OpenTofu.

If you wish to migrate, the process is pretty simple.

Steps to migrate existing terraform infra:

Install opentofu
Initialize opentofu just as you do with terraform.

Helm — Your Compass in the Kubernetes Universe

Wed, 01 May 2024 19:26:10 +0530

What is Helm:

Helm, the package manager for k8s similar to package manager for linux such as apt (Debian/Ubuntu based) yum/dnf (Red Hat or Fedora family of linux) , which helps us with packaging and deploying application.

Ingress in K8s - Name based Routing with TLS

Sun, 07 Apr 2024 19:26:10 +0530

Preface:

In the previous article we saw how to use nginx ingress for routing. Today we will experiment with adding domain to our app and will also use TLS cert for the domain.

If Statement - Conditional in Bash Scripting

Fri, 22 Mar 2024 19:26:10 +0530

Intro:

So, what’s the deal with ‘if’ statements? Think of them as the script’s way of making decisions. It’s like having a little script buddy that can say, “Hey, if this thing happens, do this. Otherwise, try something else!”

Variables and Math Functions in Bash

Sun, 10 Mar 2024 19:26:10 +0530

What is a variable:

A variable is a container where we can store some value which have possibility to change.

Just like any other programming language, bash also has variables, in fact we saw one default variable in the 1st chapter which is $SHELL. There are many other default variables such as $HOME, $PWD, $PATH, $USER etc.

Introduction to Shell Scripting for Beginners

Thu, 29 Feb 2024 19:26:10 +0530

What’s Shell:

In simple terms shell is a program that takes input as commands and passes the operating system (OS) to perform the desired task.

ArgoCD GitOps for Kubernetes - From Code to Cluster

Sat, 10 Feb 2024 19:26:10 +0530

What is GitOps:

Gitops is a practice in devops where managing applications using git is considered as a single source of truth. This is generally used in the Kubernetes world.

This means we define our application for kubernetes using declarative objects in our git repo and no manul modifications are allowed to do in the k8s cluster.

Let’s Encrypt SSL Configuration using Certbot

Mon, 06 Nov 2023 19:26:10 +0530

What is SSL/TLS:

SSL or Secure Sockets Layer is a security protocol used to establish an encrypted connection between your web browser and a web server.

A Beginner’s Introduction to GitHub Actions

Sat, 21 Oct 2023 19:26:10 +0530

Intro: GitHub action is a CI/CD platform to create build, test and deployment pipeline for our application. This is a yaml based configuration.

In this tutorial, we are going to see the basics of github action and then proceed to integrate SonarQube SAST with it in the next post.

Prerequisite:

GitHub ac

Set Up

First create a repository on github and add a simple program that prints just hello world.

Visualize Your Website Metrics — Blackbox Exporter and Grafana

Mon, 25 Sep 2023 19:30:10 +0530

In the previous post we discussed sending email alerts with alertmanager, in this post we’ll configure the Prometheus Blackbox Exporter.

You can find the repository on Github .

Setup

BlackBox exporter is a monitoring tool that allows querying of endpoints over HTTP, HTTPS, DNS, etc.

How to Send Email Alerts using Prometheus AlertManager

Fri, 08 Sep 2023 19:30:10 +0530

This is the 2nd article, to setup Prometheus with Node exporter and Grafana refer this article, Setup Monitoring — Prometheus and Grafana.

You can find the repository on Github .

The Prometheus Alertmanager is a tool for sending alerts via emails, slack and various other mediums.

Setup Monitoring with Prometheus and Grafana.

Sat, 26 Aug 2023 19:30:10 +0530

Introduction:

Prometheus is a open-source platform for monitoring hardware and services. It collects metrics from the system of any other services that we configured.

It has a querying language called PromQL to analyse the metrics. We can also configure mail alerts for situation like hight resources usage, SSL expiration etc.

Terraform on AWS — Outputs, Indexing and Variables

Sun, 09 Jul 2023 10:26:10 +0530

In the previous article, we setup tf and got familiar with it with basic example. Now lets proceed further.

All configs can be found on GitHub .

Displaying Output in TF:

For every action we create we can generate output also to be shown on the terminal.

Infrastructure as Code (IAC) - Automation using Terraform 101

Sun, 02 Jul 2023 10:26:10 +0530

What is Terraform:

Terraform is an open-source infrastructure as code (IAC) tool that helps us to safely and predictably provision and manage infrastructure in any cloud and on-prem resources in human-readable configuration files that you can version, reuse, and share.

Delving into the World of Deployments in Kubernetes

Sat, 24 Jun 2023 19:26:10 +0530

In the previous article, we saw ReplicaSet, Services and touched base on deployment. In this article, we will explore deployments in more detail.

As we already created deployments using the cmd line, here we’ll use yaml. We’ll combine replicaset and service config with the deployment config.

Note: kctl is an shell alias for kubectl

 
 

 

 YAML
 

 
 
 
apiVersion: apps/v1
kind: Deployment
metadata:
 name: mywebapp
 annotations:
 kubernetes.io/change-cause: "initial deployment"
spec:
 replicas: 3
 selector:
 matchLabels:
 app: data
 template:
 metadata:
 labels:
 app: data
 spec:
 containers:
 - name: prodapp
 image: quay.io/gauravkumar9130/production:v1
apiVersion: apps/v1
kind: Deployment
metadata:
 name: mywebapp
 annotations:
 kubernetes.io/change-cause: "initial deployment"
spec:
 replicas: 3
 selector:
 matchLabels:
 app: data
 template:
 metadata:
 labels:
 app: data
 spec:
 containers:
 - name: prodapp
 image: quay.io/gauravkumar9130/production:v1

 
 

Apply the deployment and expose the service with the load balancer type. (using the cmd line, for now, will merge later).

Container Orchestration: Kubernetes 101

Thu, 22 Jun 2023 19:26:10 +0530

Introduction:

Kubernetes , also known as K8s, is an open-source platform to automate deployment, scaling, and management of containerized applications or containers.

Ansible — Error Handling, Roles and Valult

Sun, 18 Jun 2023 19:26:10 +0530

In the earlier posts, we saw how to Setup Ansible, simple playbooks with groups, variables, conditionals and loop

In this article we’ll discuss about using Notify Handler, Roles, Error Handling and Vault in Ansible.

Notify and Handler

Handler is a special task that executes when called by notifykeyword. The notify keyword is applied to a task and accepts a list of handler names that are notified on a task change.

For example, when we are operating on any webserver, instead of restarting the service every time we can specify the time when its required using notify and handler.

Ansible - Groups, Vars and Loop

Mon, 29 May 2023 19:26:10 +0530

In the previous article, we saw how to install Ansible, ping a server and a simple playbook.

In this article we’ll discuss about using groups , use of variables and loops in a playbook.

This setup includes 3 machines. The controller node is a local machine where the managed nodes are two ec2 instances.

Inventory Groups

Ansible allows you to organize hosts into groups within the inventory file. Grouping hosts enables you to target specific subsets of hosts and apply different configurations or tasks based on their roles or characteristics.

Getting started with Ansible - Configuration Managament

Sun, 21 May 2023 19:26:10 +0530

Introduction:

Ansible is an open source configuration management utility. It can automate and standardize the configuration of remote hosts and virtual machines. We can perform application installation, system update and many such operations.

Why use Ansible:

Ansible is very handy when it comes to installation of software on large numbers of machines. But why ansible when we can use Chef or Puppet.

SonarQube Setup with Jenkins

Mon, 01 May 2023 19:26:10 +0530

Introduction:

SonarQube is an open-source platform used to perform continuous review and verification of code quality to detect bugs, vulnerabilities and code smells in the application.

Load Balancing Magic — Unleashing the Potential of NGINX.

Sat, 22 Apr 2023 19:26:10 +0530

Introduction

What is NGINX:

Nginx (pronounced engine x /ˌɛndʒɪnˈɛks/ EN-jin-EKS) is an open source HTTP web and reverse proxy server.

Docker - Build and Push operations.

Sun, 16 Apr 2023 19:26:10 +0530

Introduction:

In the previous article, we saw how to install docker, in this chapter we’ll go through building our own docker image and publish it to the docker hub.

Lets Get Started:

To build a docker image, we need to have all the code, libraries and its dependencies to be available.

Docker: Containerization for beginners.

Sun, 16 Apr 2023 19:26:10 +0530

Introduction

Docker is a software platform that allows you to build, test, and deploy applications by packaging everything the application needs to run including libraries, code, and runtime.

When we package the application and all its dependencies to a single unit, its called an image and when the image is used to run the application its called a container.

Apache HTTP Server Configurations

Mon, 27 Mar 2023 19:26:10 +0530

In the previous post, we saw how to install and setup Apache web server. In this article we’ll see how to configure a basic web application, enable SSL/TLS and few more basic configuration in regards to security enhancements.

Prerequiste:

Install Apache

How to install Apache HTTP web server on Linux.

Wed, 25 Jan 2023 19:26:10 +0530

Introduction:

If you ever worked with web application then you must have came across the term “Apache”. The Apache HTTP server is an open source web server.

In this article we’ll take a look on how to install and configure Apache on various popular Linux distributions (Debian/Ubuntu, RHEL/Rocky Linux/Alma Linux).