- bash ((count++)) kills your set -e script
- Deterministic naming means your teardown has a cache invalidation checklist
- Silent exit 0 is worse than a crash — when scripts succeed with wrong inputs
kubectl auth can-iis the fastest RBAC smoke test I was missing- Code blocks are operational UX, not decoration
- Kubeflow version is a matrix, so snapshot runtime plus reconciler inputs
- Owner chain explains lineage. Reconciler chain explains behavior.
- ‘cope’ traveled from incel forums to a welded cage on a Russian tank
- ‘deadline’ is a line in the dirt where they shot you
- TIL: three layers between headscale and a private EKS endpoint
- TIL: docker login silently fails when credsStore is set
- GitHub Actions silently injects org secrets as empty strings on the free plan
- terraform show -json hides resources in child modules from naive jq queries
- Kubernetes ResourceQuota needs 2x headroom for rolling updates, not 1x
- Route53 requires one record set per name+type — your Terraform module needs to aggregate
- Terraform ignore_changes can target a single annotation key, not just the whole map
- Cloudflare zone imports orange-cloud your DKIM CNAMEs and silently break email signing
- cloudflare_zone_dns_settings drifts on every plan — ignore_changes = all is the fix
- Wildcard MX records enable Fastmail subdomain addressing without per-subdomain config
- aws-error-utils gives you specific AWS exceptions instead of catch-all error swallowing
- ElastiCache RBAC key-prefix ACLs give you per-tenant Redis isolation on one cluster
- GitHub Actions PR comments — stop flooding, start updating
- ACM wildcard and apex certs share the same validation CNAME
- Cloudflare Registrar locks your nameservers (and how to escape with multi-provider DNS)
- Hugo clean URLs on S3 need a CloudFront Function
- Hugo title-cases your tags everywhere (and how to stop it)
- Kopf’s @on.create handler fires on every kubectl apply, not just creation
- Terraform S3 backend has native state locking now (no DynamoDB)
- EKS private endpoints need a security group rule for Headscale
- Claude Code /resume loses sessions — rebuild the index to get them back
- Claude Code safety hooks can be bypassed with chained commands
#acm
#aws
#bash
#ci-cd
#claude-code
#cloudflare
#cloudfront
#debugging
#developer-experience
#dns
#docker
#docs
#ecr
#eks
#elasticache
#email
#etymology
#fastmail
#github-actions
#headscale
#hugo
#internet-culture
#jq
#kopf
#kubectl
#kubeflow
#kubernetes
#metacontroller
#multi-tenant
#networking
#operations
#operators
#platform-engineering
#python
#rbac
#redis
#reliability
#route53
#s3
#security
#seo
#shell
#ssm
#terraform
#til