https://durrellgemuh.com/blog/ DevOps, cloud, and platform engineering articles. en https://durrellgemuh.com/blog/progressive-delivery-on-kubernetes-with-argo-rollouts/ https://durrellgemuh.com/blog/progressive-delivery-on-kubernetes-with-argo-rollouts/ Thu, 06 Aug 2026 00:00:00 GMT Move beyond rolling updates, use Argo Rollouts for canary and blue-green deployments on Kubernetes, with automated analysis and rollback based on real metrics. https://durrellgemuh.com/blog/why-i-moved-from-devto-to-my-own-website/ https://durrellgemuh.com/blog/why-i-moved-from-devto-to-my-own-website/ Tue, 04 Aug 2026 00:00:00 GMT The full breakdown of building my own blog instead of relying on dev.to: the stack, the cost ($0/month), the tools, and why owning your content matters more than platform reach. Plus the cross-posting strategy that keeps dev.to as distribution. https://durrellgemuh.com/blog/a-devops-roadmap-for-engineers-in-cameroon-and-africa/ https://durrellgemuh.com/blog/a-devops-roadmap-for-engineers-in-cameroon-and-africa/ Mon, 03 Aug 2026 00:00:00 GMT A practical, no-fluff DevOps roadmap for engineers in Cameroon and Africa, the exact order to learn Linux, Docker, cloud, IaC, and Kubernetes, and how to turn it into remote work. https://durrellgemuh.com/blog/cloudsentry-zero-cost-aws-security-watchdog/ https://durrellgemuh.com/blog/cloudsentry-zero-cost-aws-security-watchdog/ Sun, 02 Aug 2026 00:00:00 GMT How I built an open-source serverless tool that automates weekly AWS account audits, scores infrastructure 0-100, and delivers prioritized fix commands for $0.21/month. https://durrellgemuh.com/blog/aws-security-done-right-services-and-habits/ https://durrellgemuh.com/blog/aws-security-done-right-services-and-habits/ Sun, 02 Aug 2026 00:00:00 GMT The AWS services and habits that reduce risk the most, Secrets Manager with rotation, SSM (no SSH keys), least-privilege IAM, CodeConnections, KMS, comprehensive logging (CloudTrail + VPC Flow Logs + S3 access logs), and the guardrails, with runnable Terraform. https://durrellgemuh.com/blog/what-an-internal-developer-platform-actually-looks-like/ https://durrellgemuh.com/blog/what-an-internal-developer-platform-actually-looks-like/ Thu, 30 Jul 2026 00:00:00 GMT Beyond the buzzword, a working reference for an Internal Developer Platform: Backstage service catalog, golden-path scaffolder, and the paved-road defaults that tie GitOps, observability, and CI/CD together. https://durrellgemuh.com/blog/setting-up-aws-organizations-with-scps-and-centralized-logging/ https://durrellgemuh.com/blog/setting-up-aws-organizations-with-scps-and-centralized-logging/ Thu, 30 Jul 2026 00:00:00 GMT How to build a multi-account AWS foundation with Terraform, Organizations, OUs, account vending, preventative SCPs, and a tamper-proof centralized CloudTrail. https://durrellgemuh.com/blog/secrets-management-vault-vs-secrets-manager-vs-external-secrets/ https://durrellgemuh.com/blog/secrets-management-vault-vs-secrets-manager-vs-external-secrets/ Thu, 30 Jul 2026 00:00:00 GMT A practical comparison of HashiCorp Vault, AWS Secrets Manager, and the External Secrets Operator, how to choose, and how they work together on Kubernetes. https://durrellgemuh.com/blog/gcp-landing-zone-from-scratch-with-terraform/ https://durrellgemuh.com/blog/gcp-landing-zone-from-scratch-with-terraform/ Thu, 30 Jul 2026 00:00:00 GMT Building a production-grade Google Cloud foundation, resource hierarchy, shared VPC with Cloud NAT, a project factory, and org-policy guardrails. All Terraform, CI-validated. https://durrellgemuh.com/blog/devsecops-in-30-minutes-drop-in-security-for-any-repo/ https://durrellgemuh.com/blog/devsecops-in-30-minutes-drop-in-security-for-any-repo/ Thu, 30 Jul 2026 00:00:00 GMT A copy-paste DevSecOps toolkit, pre-commit hooks, gitleaks, Trivy, tfsec, checkov, and hadolint wired into one CI pipeline. Security from the first commit, not bolted on after an audit. https://durrellgemuh.com/blog/building-ai-agents-for-cloud-operations-with-aws-bedrock/ https://durrellgemuh.com/blog/building-ai-agents-for-cloud-operations-with-aws-bedrock/ Thu, 30 Jul 2026 00:00:00 GMT How I built 5 production-grade AI agents, DevOps, Cost, Security, Incident, and IaC Review, on AWS Bedrock with guardrails, audit trails, and human-approval gates for write operations. https://durrellgemuh.com/blog/build-a-serverless-rest-api-on-aws-in-15-minutes-with-terraform/ https://durrellgemuh.com/blog/build-a-serverless-rest-api-on-aws-in-15-minutes-with-terraform/ Thu, 30 Jul 2026 00:00:00 GMT A step-by-step guide to deploying a production-ready serverless API, Lambda + API Gateway + DynamoDB, with least-privilege IAM, unit tests, and CI. All Terraform, zero console clicking. https://durrellgemuh.com/blog/aws-security-baseline-in-one-terraform-apply/ https://durrellgemuh.com/blog/aws-security-baseline-in-one-terraform-apply/ Thu, 30 Jul 2026 00:00:00 GMT Five Terraform patterns that set up AWS the right way from day one, Secrets Manager, least-privilege IAM, CodeConnections, KMS, and a full security baseline (GuardDuty, Security Hub, Config, Access Analyzer, CloudTrail). https://durrellgemuh.com/blog/best-devops-certifications-for-african-engineers/ https://durrellgemuh.com/blog/best-devops-certifications-for-african-engineers/ Tue, 28 Jul 2026 00:00:00 GMT Which DevOps certifications are actually worth it for engineers in Africa, the order to take them, and how to weigh certs against real projects when money is tight. https://durrellgemuh.com/blog/event-driven-architecture-with-eventbridge-and-step-functions/ https://durrellgemuh.com/blog/event-driven-architecture-with-eventbridge-and-step-functions/ Thu, 23 Jul 2026 00:00:00 GMT How to build decoupled, resilient systems on AWS using EventBridge for routing and Step Functions for orchestration, when to use each, and the patterns that keep them maintainable. https://durrellgemuh.com/blog/dynamodb-data-modeling-for-devops-engineers/ https://durrellgemuh.com/blog/dynamodb-data-modeling-for-devops-engineers/ Thu, 16 Jul 2026 00:00:00 GMT A practical introduction to DynamoDB data modeling, partition keys, single-table design, access patterns, and the mistakes that cause hot partitions and runaway cost. https://durrellgemuh.com/blog/devops-freelancing-from-africa-finding-international-clients/ https://durrellgemuh.com/blog/devops-freelancing-from-africa-finding-international-clients/ Tue, 14 Jul 2026 00:00:00 GMT How to build a DevOps freelancing career from Africa, finding international clients, pricing your work, scoping engagements, and keeping clients coming back. https://durrellgemuh.com/blog/building-wefoundit-lost-and-found-platform/ https://durrellgemuh.com/blog/building-wefoundit-lost-and-found-platform/ Sun, 12 Jul 2026 00:00:00 GMT How I designed, built, and launched a production lost-and-found platform from scratch, FastAPI, Flutter, React, AWS, mobile money, solving a real problem in Cameroon. https://durrellgemuh.com/blog/eks-vs-ecs-vs-fargate-choosing-aws-container-compute/ https://durrellgemuh.com/blog/eks-vs-ecs-vs-fargate-choosing-aws-container-compute/ Thu, 09 Jul 2026 00:00:00 GMT A decision guide for running containers on AWS, when to pick ECS, EKS, or Fargate, the real trade-offs on control, cost, and operational burden, and how to avoid over-engineering. https://durrellgemuh.com/blog/aws-vpc-networking-explained-for-devops-engineers/ https://durrellgemuh.com/blog/aws-vpc-networking-explained-for-devops-engineers/ Thu, 02 Jul 2026 00:00:00 GMT A clear, practical mental model of AWS VPC networking, subnets, route tables, gateways, NAT, security groups vs NACLs, and VPC endpoints, without the jargon overload. https://durrellgemuh.com/blog/aws-iam-least-privilege-without-losing-your-mind/ https://durrellgemuh.com/blog/aws-iam-least-privilege-without-losing-your-mind/ Thu, 25 Jun 2026 00:00:00 GMT A practical, repeatable approach to least-privilege IAM on AWS, start-deny, use Access Analyzer, scope with conditions, and avoid the wildcard traps that quietly grant too much. https://durrellgemuh.com/blog/terraform-module-testing-with-terratest/ https://durrellgemuh.com/blog/terraform-module-testing-with-terratest/ Thu, 18 Jun 2026 00:00:00 GMT How to actually test your Terraform, from free static checks (validate, tflint, tfsec) to real integration tests with Terratest, so your modules don't break production. https://durrellgemuh.com/blog/github-actions-security-hardening-oidc-and-pinned-actions/ https://durrellgemuh.com/blog/github-actions-security-hardening-oidc-and-pinned-actions/ Thu, 11 Jun 2026 00:00:00 GMT A practical guide to securing your GitHub Actions pipelines, replace long-lived cloud keys with OIDC, pin actions to SHAs, scope permissions, and stop supply-chain attacks before they start. https://durrellgemuh.com/blog/building-logsentry-detecting-secrets-in-application-logs/ https://durrellgemuh.com/blog/building-logsentry-detecting-secrets-in-application-logs/ Mon, 08 Jun 2026 00:00:00 GMT How I built a serverless pipeline on AWS that auto-monitors all CloudWatch log groups, scans for leaked credentials in real-time, sends rate-limited alerts, and provides a dashboard for triage, zero config after deploy. https://durrellgemuh.com/blog/why-cloud-run-cloudflare-beats-vms-for-multi-tenant-hosting/ https://durrellgemuh.com/blog/why-cloud-run-cloudflare-beats-vms-for-multi-tenant-hosting/ Thu, 04 Jun 2026 00:00:00 GMT A practical breakdown of why serverless Cloud Run behind Cloudflare outperforms always-on VMs for hosting many sites, on cost, scaling, security, and operations, with the trade-offs spelled out. https://durrellgemuh.com/blog/case-study-scaling-5000-sites-cloud-run-cloudflare/ https://durrellgemuh.com/blog/case-study-scaling-5000-sites-cloud-run-cloudflare/ Thu, 04 Jun 2026 00:00:00 GMT How I designed and operated a multi-tenant hosting platform on Google Cloud Run, fronted by Cloudflare, that serves 5,000+ sites globally, fast, secure, auto-scaling, and load-tested to grow well beyond that. https://durrellgemuh.com/blog/why-african-engineering-talent-is-a-competitive-advantage/ https://durrellgemuh.com/blog/why-african-engineering-talent-is-a-competitive-advantage/ Wed, 03 Jun 2026 00:00:00 GMT From building DevOps infrastructure for global teams from Cameroon, why hiring African cloud and DevOps engineers is a strategic advantage, not a compromise, and how to do it well. https://durrellgemuh.com/blog/running-kubernetes-on-a-budget/ https://durrellgemuh.com/blog/running-kubernetes-on-a-budget/ Wed, 03 Jun 2026 00:00:00 GMT Practical ways to run Kubernetes without burning money, right-sizing, autoscaling to zero, spot nodes, and the cost-aware habits I learned engineering from a constrained environment. https://durrellgemuh.com/blog/case-study-enterprise-kubernetes-platform/ https://durrellgemuh.com/blog/case-study-enterprise-kubernetes-platform/ Wed, 03 Jun 2026 00:00:00 GMT A detailed engineering case study, how I designed and operated a production EKS platform serving 50+ microservices and 1M+ requests/day, cutting infrastructure cost 40% and recovery time from 2 hours to 15 minutes. https://durrellgemuh.com/blog/the-reality-of-working-as-a-devops-engineer-in-cameroon/ https://durrellgemuh.com/blog/the-reality-of-working-as-a-devops-engineer-in-cameroon/ Tue, 02 Jun 2026 00:00:00 GMT An honest, first-person account of building a DevOps career from Buea, Cameroon, the power cuts, internet bottlenecks, timezone gymnastics, payment hurdles, and the workarounds that actually let me ship for global teams. https://durrellgemuh.com/blog/cutting-aws-and-gcp-cloud-costs-a-practical-guide/ https://durrellgemuh.com/blog/cutting-aws-and-gcp-cloud-costs-a-practical-guide/ Tue, 02 Jun 2026 00:00:00 GMT Real, implementable strategies to reduce your AWS and GCP bills by 30-70%, right-sizing, autoscaling, spot/preemptible instances, storage tiering, and the FinOps habits that keep costs down for good. https://durrellgemuh.com/blog/building-an-interlinked-devops-project-ecosystem/ https://durrellgemuh.com/blog/building-an-interlinked-devops-project-ecosystem/ Mon, 01 Jun 2026 00:00:00 GMT Most DevOps portfolios are a pile of disconnected demos. Here's how I built six open-source projects that compose into one enterprise-grade platform, and why that matters more than any single repo. https://durrellgemuh.com/blog/becoming-a-devops-engineer-in-cameroon/ https://durrellgemuh.com/blog/becoming-a-devops-engineer-in-cameroon/ Mon, 01 Jun 2026 00:00:00 GMT How to become a DevOps engineer in Cameroon and work remotely for global teams, the real skills, tools, and path I used to go from local IT to multi-cloud DevOps across six countries. https://durrellgemuh.com/blog/deploy-your-portfolio-website-github-pages-cloudflare-custom-domain/ https://durrellgemuh.com/blog/deploy-your-portfolio-website-github-pages-cloudflare-custom-domain/ Mon, 11 May 2026 00:00:00 GMT Talent Forge Program · Project 1 | Beginner → Intermediate The exact project that proves you can... https://durrellgemuh.com/blog/gke-gateway-api-full-setup-troubleshooting-runbook/ https://durrellgemuh.com/blog/gke-gateway-api-full-setup-troubleshooting-runbook/ Mon, 27 Apr 2026 00:00:00 GMT I recently went through the full process of setting up GKE Gateway API on a production-grade cluster... https://durrellgemuh.com/blog/getting-started-with-amazon-cloudwatch/ https://durrellgemuh.com/blog/getting-started-with-amazon-cloudwatch/ Sun, 12 Apr 2026 00:00:00 GMT Monitoring is one of the most overlooked parts of building systems. Until something breaks. Then... https://durrellgemuh.com/blog/what-does-it-really-cost-to-become-a-devops-engineer-getting-started-i/ https://durrellgemuh.com/blog/what-does-it-really-cost-to-become-a-devops-engineer-getting-started-i/ Sun, 05 Apr 2026 00:00:00 GMT Let's be real, when most people Google "how to become a DevOps engineer," they land on listicles... https://durrellgemuh.com/blog/aws-service-spotlight-aws-systems-manager-ssm/ https://durrellgemuh.com/blog/aws-service-spotlight-aws-systems-manager-ssm/ Thu, 26 Mar 2026 00:00:00 GMT Welcome to my AWS Service Spotlight series, where I break down AWS services, how they work, when to... https://durrellgemuh.com/blog/terraform-best-practices-chaos-to-predictable-infrastructure/ https://durrellgemuh.com/blog/terraform-best-practices-chaos-to-predictable-infrastructure/ Fri, 20 Mar 2026 00:00:00 GMT How to structure Terraform code for teams of 5-50 engineers, with real patterns that scale and prevent disasters. https://durrellgemuh.com/blog/aws-cost-optimization-15-strategies-that-work/ https://durrellgemuh.com/blog/aws-cost-optimization-15-strategies-that-work/ Thu, 19 Mar 2026 00:00:00 GMT Practical AWS cost optimization techniques that saved my clients 40-70% on their cloud bills, with real examples and implementation guides. https://durrellgemuh.com/blog/kubernetes-service-mesh-comparison-istio-linkerd-consul/ https://durrellgemuh.com/blog/kubernetes-service-mesh-comparison-istio-linkerd-consul/ Wed, 18 Mar 2026 00:00:00 GMT A practical comparison of the three most popular service mesh solutions for Kubernetes, with real-world deployment considerations and performance benchmarks. https://durrellgemuh.com/blog/building-a-complete-monitoring-stack-with-prometheus-and-grafana-using/ https://durrellgemuh.com/blog/building-a-complete-monitoring-stack-with-prometheus-and-grafana-using/ Wed, 18 Mar 2026 00:00:00 GMT Monitoring your infrastructure shouldn't be complicated. In this guide, I'll show you how to spin up... https://durrellgemuh.com/blog/aws-service-spotlight-amazon-s3/ https://durrellgemuh.com/blog/aws-service-spotlight-amazon-s3/ Wed, 18 Mar 2026 00:00:00 GMT Welcome to my AWS Service Spotlight series, where I break down AWS services, how they work, when to... https://durrellgemuh.com/blog/how-to-update-an-elasticsearch-kibana-license-using-kibana-dev-tools/ https://durrellgemuh.com/blog/how-to-update-an-elasticsearch-kibana-license-using-kibana-dev-tools/ Tue, 17 Mar 2026 00:00:00 GMT Overview Licensing in the Elastic Stack (Elasticsearch + Kibana) controls access to... https://durrellgemuh.com/blog/setting-up-argocd-on-kubernetes-cluster/ https://durrellgemuh.com/blog/setting-up-argocd-on-kubernetes-cluster/ Mon, 16 Mar 2026 00:00:00 GMT Prerequisites Before starting, make sure you have these installed: Docker... https://durrellgemuh.com/blog/pecos-data-extraction-pipeline-devops-documentation/ https://durrellgemuh.com/blog/pecos-data-extraction-pipeline-devops-documentation/ Fri, 13 Mar 2026 00:00:00 GMT Overview The PECOS Data Extraction Pipeline is an enterprise-grade ETL workflow that... https://durrellgemuh.com/blog/localtunnel-server-setup-documentation/ https://durrellgemuh.com/blog/localtunnel-server-setup-documentation/ Fri, 05 Dec 2025 00:00:00 GMT LocalTunnel Server Setup Documentation 1. Files 1.1... https://durrellgemuh.com/blog/integrating-bitbucket-with-argocd/ https://durrellgemuh.com/blog/integrating-bitbucket-with-argocd/ Wed, 15 Oct 2025 00:00:00 GMT Overview This guide explains how to set up and connect Bitbucket repositories with ArgoCD... https://durrellgemuh.com/blog/configure-argocd-ingress-on-gcp-with-custom-domain-and-auto-tls-via-ce/ https://durrellgemuh.com/blog/configure-argocd-ingress-on-gcp-with-custom-domain-and-auto-tls-via-ce/ Tue, 14 Oct 2025 00:00:00 GMT Managing secure access to ArgoCD's web UI on Google Cloud Platform (GCP) can be streamlined with... https://durrellgemuh.com/blog/how-to-host-a-static-website-on-aws-s3-with-github-and-configure-cloud/ https://durrellgemuh.com/blog/how-to-host-a-static-website-on-aws-s3-with-github-and-configure-cloud/ Wed, 01 Oct 2025 00:00:00 GMT This guide will walk you through hosting a static website on AWS S3 using your code from GitHub(my... https://durrellgemuh.com/blog/automate-cloudwatch-agent-setup-on-ec2-with-terraform-and-aws-ssm/ https://durrellgemuh.com/blog/automate-cloudwatch-agent-setup-on-ec2-with-terraform-and-aws-ssm/ Thu, 18 Sep 2025 00:00:00 GMT Automate CloudWatch Agent Setup on EC2 with Terraform and AWS SSM Managing monitoring... https://durrellgemuh.com/blog/deploying-and-managing-hashicorp-vault-in-kubernetes-with-ha-and-raft/ https://durrellgemuh.com/blog/deploying-and-managing-hashicorp-vault-in-kubernetes-with-ha-and-raft/ Sat, 13 Sep 2025 00:00:00 GMT Vault is a powerful secrets management tool. Running Vault on Kubernetes in HA mode with Raft backend... https://durrellgemuh.com/blog/accessing-hashicorp-vault-ui-in-kubernetes-with-loadbalancer-service/ https://durrellgemuh.com/blog/accessing-hashicorp-vault-ui-in-kubernetes-with-loadbalancer-service/ Sat, 13 Sep 2025 00:00:00 GMT After successfully deploying Vault in Kubernetes with High Availability (HA) and Raft storage,... https://durrellgemuh.com/blog/master-your-workflow-with-gitflow-a-branching-strategy-for-seamless-de/ https://durrellgemuh.com/blog/master-your-workflow-with-gitflow-a-branching-strategy-for-seamless-de/ Tue, 09 Sep 2025 00:00:00 GMT A complete guide to the GitFlow branching strategy, main, develop, feature, release, and hotfix branches, the git-flow commands, naming conventions, and when to use it. https://durrellgemuh.com/blog/deploying-agents-on-windows-linux-without-ssh-using-aws-ssm-and-parame/ https://durrellgemuh.com/blog/deploying-agents-on-windows-linux-without-ssh-using-aws-ssm-and-parame/ Thu, 04 Sep 2025 00:00:00 GMT Accessing servers via SSH or RDP just to install or configure monitoring agents isn’t scalable or... https://durrellgemuh.com/blog/node-red-kubernetes-deployment-password-management-guide/ https://durrellgemuh.com/blog/node-red-kubernetes-deployment-password-management-guide/ Wed, 03 Sep 2025 00:00:00 GMT Deploying Node-RED on Kubernetes is a powerful way to run your low-code workflows at scale. In this... https://durrellgemuh.com/blog/launch-aws-ec2-instances-with-terraform-using-custom-user-data-scripts/ https://durrellgemuh.com/blog/launch-aws-ec2-instances-with-terraform-using-custom-user-data-scripts/ Mon, 01 Sep 2025 00:00:00 GMT Automating AWS EC2 instance launches with Terraform is powerful, but adding custom user data scripts... https://durrellgemuh.com/blog/easily-deploy-datadog-aws-integration-with-terraform-and-cloudformatio/ https://durrellgemuh.com/blog/easily-deploy-datadog-aws-integration-with-terraform-and-cloudformatio/ Fri, 29 Aug 2025 00:00:00 GMT I just published a GitHub repository that simplifies deploying the Datadog AWS integration using... https://durrellgemuh.com/blog/assigning-a-domain-name-to-your-service-with-apache-reverse-proxy-on-u/ https://durrellgemuh.com/blog/assigning-a-domain-name-to-your-service-with-apache-reverse-proxy-on-u/ Mon, 25 Aug 2025 00:00:00 GMT When you deploy services like Jenkins (8080), SonarQube (9000), or Grafana (3000), by default they... https://durrellgemuh.com/blog/resetting-apache-archiva-admin-password-in-a-docker-container/ https://durrellgemuh.com/blog/resetting-apache-archiva-admin-password-in-a-docker-container/ Fri, 22 Aug 2025 00:00:00 GMT Sometimes, you may need to reset the admin password for Apache Archiva running inside a Docker...