Should you define every GKE resource yourself or use a Terraform module?

Building a basic cluster from individual resources is a good way to understand what Terraform is actually creating. A maintained module becomes useful once you need repeatable configurations, multiple environments and more advanced GKE features without duplicating large amounts of code.

This article demonstrates both approaches, including VPC-native networking, node pools, service accounts and the complete Terraform deployment lifecycle.

A practical introduction for anyone starting to automate GKE: https://mkdev.me/posts/deploying-gke-clusters-with-terraform

Your delivery pipeline should help you move faster without sacrificing stability. mkdev designs CI/CD systems around your team, product and business, from organizational challenges to technical implementation. Check out the page and schedule a call: https://mkdev.me/b/consulting/majestic-pipeline

The more capable AI becomes, the easier it is to trust it too much.

The current GPT-5 generation is better at understanding intent, reasoning across large amounts of context and using external tools. Its answers can be detailed, polished and highly convincing. But a convincing answer is not automatically a correct one, and an autonomous workflow is not automatically an appropriate one.

AI literacy in 2026 therefore involves much more than learning how to write prompts. Employees need to understand what information may be shared, when external sources must be checked, which actions require human approval and where the model’s output should never be treated as a final decision.

This is both the carrot and the stick of the EU AI Act’s literacy requirements: better-trained teams can use AI more effectively, while companies without suitable guidance expose themselves to avoidable operational, legal and reputational risks.

Our article looks at how companies can turn AI literacy from a compliance exercise into a practical business capability.

https://mkdev.me/posts/the-carrot-and-stick-of-the-eu-ai-act-s-literacy-requirements-benefits-compliance-and-risks

Serving a SaaS app on customer-owned domains gets complicated when every hostname needs TLS. AWS ALBs start with a quota of 25 additional certificates, while Cloudflare for SaaS offers a more scalable custom-domain workflow. Watch the video: https://www.youtube.com/watch?v=hy1feUVVejQ

The free Argo CD Lightning Course will teach you how Argo CD works, what problems it solves, and why it has become an important tool for managing Kubernetes deployments. Available as both articles and videos, the course also covers Argo CD’s essential features and how it structures projects and applications.

Article series: https://mkdev.me/posts/what-is-argo-cd-and-why-would-you-need-gitops
Video form: https://www.youtube.com/playlist?list=PLozcbFx8FoPHUHoKfuSrkMO0ulZD-CHHu

AWS Lambda and Google Cloud Functions have both evolved, but the main lesson from our pricing comparison remains relevant in 2026: serverless costs depend heavily on the shape of your workload.

Google’s second-generation Cloud Functions are now called Cloud Run functions and follow the Cloud Run pricing model. AWS Lambda continues to bill according to requests, execution duration and allocated resources.

Billing granularity, concurrency, architecture, region, networking and supporting services can all affect which platform is more economical.

Instead of asking which service is cheaper in general, ask which one is cheaper for your actual application.

Read the full article: https://mkdev.me/posts/aws-lambda-pricing-vs-google-cloud-functions-pricing-explained

Is your AWS setup secure, cost-effective and built for reliable growth? mkdev’s In-Depth AWS Audit reviews your architecture, services and applications, then delivers practical recommendations and concrete backlog items. Check out the page and schedule a call: https://mkdev.me/b/audits/in-depth-aws-audit-and-assessment

GPT models have become much better since the early days of ChatGPT, but one lesson from GenAI security has survived every generation: a prompt is not a security boundary.

Prompt injection remains one of OWASP’s major LLM risks, and agentic systems have increased the potential consequences because a manipulated model may now have tools, credentials and access to other systems.

That means securing an AI application cannot consist of writing an increasingly elaborate system prompt telling the model what it must never do.

Input and output validation, least-privilege permissions, secret management, logging, dependency controls and conventional application security still have to surround the model.

GPT-5.6 may be far more capable than the models developers were experimenting with a few years ago. The surrounding software still needs to assume that the model can make mistakes, misunderstand instructions or be manipulated.

https://mkdev.me/posts/don-t-let-cyber-risk-kill-your-genai-vibe-a-developer-s-guide

If networking still feels like a collection of acronyms, this one from the mkdev archives is worth revisiting.

It walks through switches, routers, DNS, DHCP, NAT, VPNs and more, with practical examples along the way.

Read the full article: https://mkdev.me/posts/how-networks-work-what-is-a-switch-router-dns-dhcp-nat-vpn-and-a-dozen-of-other-useful-things

In the 96th mkdev dispatch, Pablo talks about what technology companies can learn from Spain’s football philosophy: competing with ambition, structure, creativity, and integrity to build systems that win for years instead of relying on shortcuts for short-term victories. Sign up for mkdev dispatch today!

https://mkdev.me/posts/you-don-t-win-by-cheating-96

Moving data into AWS is usually the easy part. Moving it around — and eventually back out — is where the pricing becomes more interesting.

AWS currently gives customers 100 GB of data transfer out to the internet per month for free, aggregated across supported AWS services and Regions, excluding China and GovCloud. CloudFront also includes 1 TB of free data transfer out each month. Beyond that, outbound pricing varies by Region and volume.

Inside AWS, topology matters too. Crossing Availability Zones can create transfer charges, and moving data between Regions has pricing based on the source and destination Regions. A seemingly small architectural choice can therefore become significant once you are moving terabytes every day.

Caching, compression, CloudFront, VPC endpoints and simply understanding your application's traffic patterns can all make a difference.

We break down these costs and optimization options in our guide to AWS data transfer pricing.

https://mkdev.me/posts/understanding-aws-data-transfer-costs

Logs, metrics and traces are only part of observability.

The real goal is understanding what happened, tracing problems across systems and making sure the right people get the right alerts — without alert fatigue.

Take a look at mkdev’s approach and arrange a call with us: https://mkdev.me/b/consulting/observability

AI explainability is easy to underestimate when AI is used for small, everyday tasks. If a model recommends the wrong article, produces a weak summary, or gives a slightly strange answer, the consequences are usually limited. We may be annoyed, but we can move on.

The problem begins when AI becomes part of decisions that people cannot simply ignore. A loan application, an insurance claim, a medical recommendation, a hiring process, a court case, or an autonomous system failure all create a very different expectation. In those situations, people need more than an output. They need a way to understand what influenced it, whether it was fair, and whether it can be challenged.

That is why AI explainability should not be treated as decoration around a model. A nice paragraph next to a prediction may improve the interface, but it does not automatically create accountability. The explanation has to match the decision, the risk, and the person who needs to use it.

As regulation catches up with AI adoption, companies will have to think about explainability much earlier in the product lifecycle. Not after deployment, not only when lawyers ask for it, and not as a checkbox. It has to be part of how AI systems are designed, tested, documented, and governed.

https://mkdev.me/posts/explaining-ai-explainability-vision-reality-and-regulation

Back in 2023, we tested AWS App Runner as a simpler way to deploy containers without managing all the usual infrastructure around ECS.

In 2026, App Runner is closed to new customers and AWS recommends ECS Express Mode instead. Watch the video to see where the idea worked — and where it didn’t: https://www.youtube.com/watch?v=E6E6HtrLs98

If you’re one of our Spanish-speaking subscribers and want to dive into containers, we have a free video course for you!

It covers Docker, docker-compose, Docker Swarm, Podman, Buildah, Firecracker and more — all in Spanish and completely free: https://www.youtube.com/playlist?list=PLNXwhzx0-DmRlCz9lKPLRWdv5visGlNNT

Cloud lock-in isn’t only about proprietary APIs and managed services.

Economics can create lock-in too.

Historically, one of the clearest examples was data egress: getting data into a cloud was often cheap or free, while getting large amounts of it back out could become expensive.

In 2026, the picture is changing. AWS, Google Cloud and Azure all offer programs that waive eligible egress charges when customers completely migrate away. In the EU, the Data Act has already started changing the rules around cloud switching, with switching charges due to be fully prohibited from January 2027.

But there is an important distinction: making it cheaper to leave a cloud does not mean data transfer itself has become free.

Applications still generate network costs between zones, regions, services and the public internet. Those costs can influence architecture just as much as compute or storage pricing.

The cloud is becoming easier to leave. Understanding the cost of moving data while you are still there remains just as important.

https://mkdev.me/posts/the-biggest-cloud-scam

Misconfigured RBAC, weak network policies or poorly managed secrets can leave a Kubernetes cluster exposed.

Our In-Depth Kubernetes Security Audit helps uncover these risks and gives your team a practical path to address them. Explore the audit and talk to us about your setup: https://mkdev.me/b/audits/kubernetes-security-audit

There are really two different problems hiding behind the term “AI explainability.”

The first is understanding how a model behaves in general. Global explainability methods can tell us which features tend to matter across a population and are particularly useful for developers who want to understand or debug a model.

The second is explaining one particular decision. Why was this loan application rejected? Why did this model produce this prediction? Local explainability methods such as LIME and SHAP try to answer those questions by building simpler approximations around individual cases.

The distinction matters because a population-level explanation doesn't necessarily tell you why something happened to one person. And a local approximation, however useful, isn't the same thing as opening up the original black box.

Explainability therefore isn't one technology solving one problem. It's a collection of approaches with different strengths, limitations, audiences and purposes.

We explored these questions in our article on AI explainability, and the distinction remains an important one for businesses working with increasingly complex AI systems: https://mkdev.me/posts/explaining-ai-explainability-the-current-reality-for-businesses

If Linux networking still feels like a collection of mysterious interfaces and commands, this one is worth revisiting.

Learn how teaming, Linux Bridge, tap interfaces and Traffic Control work together for fault tolerance and bandwidth management.

Read more: https://mkdev.me/posts/how-networks-work-part-two-teaming-for-fault-tolerance-bandwidth-management-with-traffic-control-tap-interfaces-and-linux-bridge

In the 97th mkdev dispatch Kirill explains the role Terraform has in this new age of AI agents. Also inside: AWS fast networking, Aurora DSQL pricing and more!

https://mkdev.me/posts/terraform-in-the-ai-agents-age-97