Daily DevOps & .NET - Where Code Meets Culture

AKS at Scale: Hard-Won Lessons from 1000+ Node Clusters

Published on 4/1/26 5:00 pm by Jendrik Brack

Running AKS at 1,000+ nodes exposes hard limits in etcd, networking, observability, and cost that never appear in vendor documentation. This article shares operational lessons from mega-cluster deployments: where the scaling cliffs are and how to plan around them before production outages force your hand.

Why Your Azure Portal Clicks Will Fail the Next Audit

Published on 3/31/26 5:00 pm by Martin Stühmer

Manual portal configuration creates audit nightmares. When auditors ask “Show me your change control process,” clicking through Azure Activity Logs won’t save you. Here’s how Bicep turns infrastructure into auditable code—where Git history becomes your compliance evidence and pull requests become your approval workflow.

Stop Deploying Garbage to Production

Published on 3/26/26 5:00 pm by Martin Stühmer

I’ve watched “senior engineers” deploy code with failing tests because “we need to ship.” I’ve seen secrets hardcoded in workflows, vulnerabilities ignored with || true, and production deployments without a single approval gate.

Then the same teams act surprised when they get breached. Or fail an audit. Or both.

Security gates aren’t process overhead—they’re the bare minimum that separates professional engineering from reckless gambling with customer data. Here’s exactly how to build GitHub Actions pipelines that actually protect your systems.

Hybrid AKS: Bridging Cloud and On-Prem with Azure Arc

Published on 3/25/26 5:00 pm by Jendrik Brack

Most organizations run Kubernetes across cloud and on-prem simultaneously. This article covers practical patterns for hybrid AKS: ExpressRoute and VPN connectivity, Azure Arc for unified management, consistent policy enforcement, DNS resolution, and identity federation without duplicating systems.

Privacy Health Checks: Beyond Database Connectivity

Published on 3/24/26 5:00 pm by Martin Stühmer

Your health checks verify database connectivity every 30 seconds. Great. But do they know that 15% of your users have expired consents? Privacy compliance isn’t a documentation exercise—it’s an operational discipline. Same IHealthCheck interface, different questions. Two queries, one ratio, three possible outcomes. Here’s how to build privacy health checks that turn audit questions into dashboard demos.