Ideas for
your next move.

Practical thinking for teams building software, securing systems and operating modern infrastructure. Explore our engineering field notes.

550 insights · Page 36 of 46

ENGINEERING JOURNAL ↗

Google Cloud Operations

Cloud Monitoring Alerts: Verify Evaluation, Delivery and Response

Troubleshoot Google Cloud alert gaps with time-series filters, aggregation, condition evaluation and notification evidence. Includes a controlled incident-response rehearsal.

Read field note ↗

ENGINEERING JOURNAL ↗

Google Cloud Operations

Cloud Logging Missing Entries: Trace the Sink and Destination

Investigate missing GCP log exports using source evidence, sink filters, writer identity and destination access. Explains why a repaired sink does not backfill old entries.

Read field note ↗

ENGINEERING JOURNAL ↗

Google Cloud Operations

Cloud KMS Rotation: Preserve Access to Existing Ciphertext

Plan GCP Cloud KMS rotation with old-ciphertext tests, key-version inventory and a separate retirement decision. Includes recovery ownership and acceptance evidence.

Read field note ↗

ENGINEERING JOURNAL ↗

Google Cloud Operations

Secret Manager Startup Failures: Verify Identity and Version

Diagnose GCP Secret Manager startup failures using runtime identity, secret version state and configuration loading order. Includes private verification and rotation checks.

Read field note ↗

ENGINEERING JOURNAL ↗

Google Cloud Operations

Cloud NAT Port Exhaustion: Measure Egress Demand Before Scaling

Diagnose Cloud NAT outbound failures with port-allocation evidence, connection behavior and controlled load tests. Includes a capacity and egress-change SOP.

Read field note ↗

ENGINEERING JOURNAL ↗

Google Cloud Operations

Cloud DNS Private Resolution: Test from the Intended Network

Investigate private Cloud DNS failures using authorized networks, name suffixes and the actual resolver. Includes Shared VPC ownership and application acceptance checks.

Read field note ↗

ENGINEERING JOURNAL ↗

Google Cloud Operations

Artifact Registry Pull Failures: Verify the Runtime Reader

Diagnose Artifact Registry image-pull failures using the exact image path, pulling identity and artifact digest. Includes repository access and rollout acceptance checks.

Read field note ↗

ENGINEERING JOURNAL ↗

Google Cloud Operations

Cloud Build Permission Failures: Trace the Identity Used by Each Step

Investigate Cloud Build permission failures by separating trigger callers, build identities and deployment identities. Includes least-privilege repair and release checks.

Read field note ↗

ENGINEERING JOURNAL ↗

Google Cloud Operations

Pub/Sub Redelivery: Protect the Business Operation Before Acknowledging

Handle Pub/Sub message redelivery with durable business identifiers, acknowledgment evidence and replay tests. Explains the boundary of exactly-once delivery.

Read field note ↗

ENGINEERING JOURNAL ↗

Google Cloud Operations

Cloud Storage 403 Errors: Identify the Requesting Principal

Diagnose Cloud Storage forbidden responses using the actual principal, requested permission and object path. Includes a least-privilege repair and download acceptance test.

Read field note ↗

ENGINEERING JOURNAL ↗

Google Cloud Operations

Cloud SQL Connection Failures: Separate Network, Identity and Pooling

Investigate Cloud SQL for MySQL connection failures by separating network reachability, connector identity, database authentication and application pool behavior.

Read field note ↗

ENGINEERING JOURNAL ↗

Google Cloud Operations

GKE CrashLoopBackOff: Diagnose the Exit Before Restarting

Diagnose GKE container restart loops through exit state, previous logs and probe events. Includes an application-versus-platform handover and verification plan.

Read field note ↗