TL;DR: JavaScript fingerprinting is a powerful tool for identifying users and securing web applications, but it comes with significant security and privacy challenges. This article explores how to implement a production-ready fingerprinting… Read article
Category: DevOps
DevOps on orthogonal.info covers the tools, workflows, and architectural patterns that bridge development and operations — from container orchestration and GitOps to CI/CD pipelines and infrastructure as code. This category is built on the conviction that great DevOps is not about adopting every trending tool, but about building reliable, observable, and repeatable systems. Every guide reflects real production experience, not sandbox demos.
With 16 detailed posts spanning Kubernetes, Docker, ArgoCD, and beyond, DevOps is a core pillar of the site’s mission to deliver practical DevSecOps knowledge.
Key Topics Covered
Kubernetes operations — Cluster setup, namespace strategies, resource management, Helm chart authoring, and day-two operations like upgrades, backup, and disaster recovery with k3s, kubeadm, and managed clusters.
GitOps and continuous delivery — Implementing declarative deployments with ArgoCD and Flux, managing Kustomize overlays, and structuring Git repositories for multi-environment promotion.
CI/CD pipelines — Building efficient pipelines with GitHub Actions, GitLab CI, and Gitea Actions, including matrix builds, caching strategies, and secure artifact publishing.
Docker and container engineering — Multi-stage Dockerfiles, image optimization, layer caching, and container runtime configuration for both development and production workloads.
Infrastructure as code (IaC) — Provisioning and managing infrastructure with Terraform, Pulumi, and Ansible, including state management, module design, and drift detection.
Observability and monitoring — Setting up Prometheus, Grafana, Loki, and OpenTelemetry for metrics, logs, and distributed tracing across containerized services.
Networking and service mesh — Configuring ingress controllers (Traefik, NGINX), cert-manager for automated TLS, and service mesh fundamentals with Istio and Linkerd.
Who This Content Is For
The DevOps category is written for platform engineers, site reliability engineers (SREs), backend developers managing their own deployments, and system administrators transitioning to cloud-native workflows. Whether you are running a single-node k3s cluster at home or managing production Kubernetes across multiple clouds, the content scales to your context. Articles assume familiarity with Linux and containers but explain orchestration and IaC concepts from first principles when needed.
What You Will Learn
Through the DevOps guides on orthogonal.info, you will learn how to design and implement modern deployment pipelines that are reproducible, auditable, and secure. You will gain hands-on experience with GitOps workflows, understand how to structure Kubernetes manifests for multi-environment promotion, build CI/CD pipelines that catch failures early, and set up observability stacks that give you real visibility into your systems. Each article includes tested manifests, pipeline configurations, and architecture diagrams you can adapt to your own infrastructure.
Browse the posts below to level up your DevOps practice.
-
Debugging & Optimizing JavaScript Fingerprinting
TL;DR: JavaScript fingerprinting is a powerful tool for identifying users and securing web applications, but it comes with significant security and privacy challenges. This article explores how to implement fingerprinting securely, integrate… Read article
-
Securing JavaScript Fingerprinting in Kubernetes
TL;DR: JavaScript fingerprinting can be a powerful tool for user tracking, fraud prevention, and analytics, but it comes with significant security and privacy risks. In Kubernetes environments, securing fingerprinting involves managing secrets,… Read article
-
CI/CD Pipeline in DevOps: Secure & Scalable Guide
TL;DR: A well-designed CI/CD pipeline is critical for modern DevOps workflows. By integrating security checks at every stage, leveraging Kubernetes for scalability, and adopting tools like Jenkins, GitLab CI/CD, and ArgoCD, you… Read article
-
Setup Wazuh Agent: Security-First Kubernetes Guide
TL;DR: Learn how to deploy the Wazuh agent in Kubernetes environments with a security-first approach. This guide covers prerequisites, installation steps, hardening techniques, troubleshooting tips, and advanced integrations to ensure production-grade security.… Read article
-
Kubernetes Security: RBAC, Pod Standards & Monitoring
TL;DR: Kubernetes security is critical for protecting your workloads and data. This article explores advanced security techniques covering common pitfalls, troubleshooting strategies, and future trends. Learn how to implement RBAC, Pod Security… Read article
-
Linux Server Hardening: Advanced Tips & Techniques
TL;DR: Hardening your Linux servers is critical to defending against modern threats. Start with baseline security practices like patching, disabling unnecessary services, and securing SSH. Move to advanced techniques like SELinux, kernel… Read article
-
Full Stack Monitoring: Grafana, Prometheus & Loki Setup
TL;DR: Full stack monitoring is essential for modern architectures, encompassing infrastructure, applications, and user experience. A security-first approach ensures that monitoring not only detects performance issues but also safeguards against threats. By… Read article
-
Kubernetes Security Best Practices by Ian Lewis
TL;DR: Kubernetes is powerful but inherently complex, and securing it requires a proactive, layered approach. From RBAC to Pod Security Standards, and tools like Falco and Prometheus, this guide covers production-tested strategies… Read article
-
GitOps vs GitHub Actions: Security-First in Production
Migrating from GitHub Actions-only deployments to a hybrid GitOps setup with ArgoCD changes your security posture fundamentally—but the tradeoffs aren't obvious until you've lived with both in production. The shift affects secret… Read article