AI is transforming DevOps practices through agentic AI systems that go beyond simple chatbots. These coding agents combine large language models with tools, memory, and planning capabilities to autonomously handle complex Platform Engineering and SRE tasks. By integrating with MCPs (Model Context Protocol), skills, and spec-driven development workflows, agents can create observability systems, build infrastructure APIs, and manage systems with minimal human intervention.
If you have been doing DevOps long enough, you remember the shift from artisanal deploys to pipeline-as-code. The next shift will feel familiar in shape even if the ingredients look alien: we are still wiring stages, gates, and blast radius—but some stages will call models and tools, not only make and kubectl.
Implementing group-based authorization at the ingress level ensures that sensitive applications are only accessible to authorized user groups. This post covers implementing zero-trust ingress with Traefik + Authorino where different ingress routes are only visible to specific user groups.
This final post brings together everything from the egress gateway series with a comprehensive comparison of all 8 solutions, decision matrices for different scenarios, cost analysis, and practical migration strategies.
Cloud providers offer managed NAT services that provide egress control for Kubernetes clusters without the operational overhead of self-managed solutions. This post covers native cloud NAT options from AWS, GCP, and Azure with practical configuration examples.
Squid is a mature, full-featured HTTP proxy and caching server that can be deployed on Kubernetes for egress control. This post explores using traditional proxy technology for modern Kubernetes egress requirements with access control, caching, and comprehensive logging.
Deploying a custom Envoy proxy as an egress gateway provides maximum flexibility and control over outbound traffic. This post explores building a self-hosted egress solution using Envoy’s advanced features without the complexity of a full service mesh.
Monzo’s Egress Operator is an open-source Kubernetes operator that automates the provisioning and management of AWS NAT Gateways for Kubernetes egress traffic. This post explores a cloud-native approach to egress gateway management with Kubernetes-native CRDs.