Praveen B S D builds internal developer platforms, self-service infrastructure, and the reliability, security, and cost foundations product teams ship on. Writing on platform engineering, GitOps, SRE, and FinOps.https://praveenbsd.com/en-gbhttps://praveenbsd.com/writing/otel-agent-datadog-logging/https://praveenbsd.com/writing/otel-agent-datadog-logging/Shipping logs to Datadog through an OpenTelemetry Collector: the exporter config, the batching that causes 413s, the hostname bug that restarts your pods, and keeping the bill in your control.Sat, 22 Aug 2026 00:00:00 GMTobservabilityhttps://praveenbsd.com/writing/otel-agent-loki-logging/https://praveenbsd.com/writing/otel-agent-loki-logging/The Loki exporter is gone from the Collector. What replaced it, how OTLP attributes become Loki labels, and the two limits that will reject your logs in production.Fri, 21 Aug 2026 00:00:00 GMTobservabilityhttps://praveenbsd.com/writing/monitoring-pyspark-applications/https://praveenbsd.com/writing/monitoring-pyspark-applications/Spark applications are ephemeral, so the usual scrape model does not fit. Wiring the Prometheus servlet, catching the Python memory that JVM metrics never show, and keeping evidence after the driver exits.Wed, 19 Aug 2026 00:00:00 GMTobservabilityhttps://praveenbsd.com/writing/monitoring-airflow/https://praveenbsd.com/writing/monitoring-airflow/Airflow 3 emits metrics through StatsD or OpenTelemetry, and the choice changes your Prometheus config. The pipeline, the metrics that predict failures, and the alerts worth paging on.Tue, 18 Aug 2026 00:00:00 GMTobservabilityhttps://praveenbsd.com/writing/opencost-getting-started/https://praveenbsd.com/writing/opencost-getting-started/Per-namespace, per-workload cost from metrics you already collect. Installing it against an existing Prometheus, what it actually measures, and the number everyone argues about.Sun, 16 Aug 2026 00:00:00 GMTfinopshttps://praveenbsd.com/writing/envoy-gateway/https://praveenbsd.com/writing/envoy-gateway/A Gateway API implementation built on Envoy Proxy: how the pieces fit, what the policy CRDs are for, and where you still end up reaching for raw Envoy config.Thu, 13 Aug 2026 00:00:00 GMTkuberneteshttps://praveenbsd.com/writing/auto-prs-gitops-agent/https://praveenbsd.com/writing/auto-prs-gitops-agent/A small agent watches platform releases and opens pull requests into every product team's DevOps repo, so upgrades propagate consistently, but teams still hold the merge.Wed, 12 Aug 2026 00:00:00 GMTgitopshttps://praveenbsd.com/writing/annotation-translation-ingress-to-envoy-gateway/https://praveenbsd.com/writing/annotation-translation-ingress-to-envoy-gateway/A working map from ingress-nginx annotations to Gateway API resources and Envoy Gateway policies. Including the ones that have no equivalent and need a decision instead.Tue, 11 Aug 2026 00:00:00 GMTkuberneteshttps://praveenbsd.com/writing/terraform-vs-crossplane/https://praveenbsd.com/writing/terraform-vs-crossplane/Not a competition so much as two different answers to "when does infrastructure converge". Where each one fits, and why most platform teams end up running both.Sun, 09 Aug 2026 00:00:00 GMTplatformhttps://praveenbsd.com/writing/ingress-to-gateway-api/https://praveenbsd.com/writing/ingress-to-gateway-api/Gateway API is not a new spelling of Ingress. What actually changed, why the role split matters more than the syntax, and a migration path that does not need a cutover weekend.Fri, 07 Aug 2026 00:00:00 GMTkuberneteshttps://praveenbsd.com/writing/kyverno-admission-policy/https://praveenbsd.com/writing/kyverno-admission-policy/Policy as Kubernetes resources: the four rule types, a starter set worth running in any cluster, and how to roll enforcement out without blocking every team on day one.Sun, 02 Aug 2026 00:00:00 GMTdevsecopshttps://praveenbsd.com/writing/checkov-getting-started/https://praveenbsd.com/writing/checkov-getting-started/Static analysis for infrastructure as code: wiring it into CI without drowning in findings, plus baselines, suppressions, and custom policies that catch what the defaults miss.Tue, 28 Jul 2026 00:00:00 GMTdevsecopshttps://praveenbsd.com/writing/trivy-getting-started/https://praveenbsd.com/writing/trivy-getting-started/One scanner for images, filesystems, IaC, secrets and live clusters. How to configure it so the results are actionable instead of a wall of unfixable CVEs.Sat, 25 Jul 2026 00:00:00 GMTdevsecopshttps://praveenbsd.com/writing/static-code-analysis-devsecops/https://praveenbsd.com/writing/static-code-analysis-devsecops/Six distinct classes of static analysis, the open-source tool for each, and where in the pipeline to run it so the results get acted on rather than ignored.Wed, 22 Jul 2026 00:00:00 GMTdevsecopshttps://praveenbsd.com/writing/opentelemetry-with-jaeger/https://praveenbsd.com/writing/opentelemetry-with-jaeger/Instrumentation, the Collector, and tail sampling. How the pieces fit for distributed tracing on Kubernetes, and the two things that decide whether traces are actually useful.Sat, 18 Jul 2026 00:00:00 GMTobservabilityhttps://praveenbsd.com/writing/grafana-prometheus-kubernetes-monitoring/https://praveenbsd.com/writing/grafana-prometheus-kubernetes-monitoring/kube-prometheus-stack, the Operator CRDs, and how to build alerts people act on instead of a wall of dashboards nobody opens.Wed, 15 Jul 2026 00:00:00 GMTobservabilityhttps://praveenbsd.com/writing/kubernetes-deployment-high-availability/https://praveenbsd.com/writing/kubernetes-deployment-high-availability/PDBs, topology spread, HPA, probes and graceful shutdown, which of them actually prevent downtime, and the misconfigurations that quietly cancel each other out.Sat, 11 Jul 2026 00:00:00 GMTkubernetes