MHMuhammad Hassaan Javedinblog.infraforge.agency·5d ago · 8 min readHow a missing S3 gateway endpoint route quadrupled our NAT billThe finance lead asked why AWS charged us $2,100 for NAT gateway data processing last month. Our normal was around $400. Nothing in the release calendar explained it: no new services, no traffic bump 10
MHMuhammad Hassaan Javedinblog.infraforge.agency·5d ago · 12 min readHow one stuck PDB doubled our EKS autoscaler bill in five daysThe AWS bill for EKS Compute went from $4,200 to $9,800 in five days. Same cluster, no launch, no traffic event, no team asking for headroom. kubectl get nodes returned 60 m5.4xlarge instances where t00
MHMuhammad Hassaan Javedinblog.infraforge.agency·Jul 13 · 11 min readRecovering a status page from a half-finished schema migrationThe log line was 'database schema version 23 is dirty, refusing to start' and the pod exited immediately after printing it. The team had already tried a Helm rollback to the previous chart version. Th00
MHMuhammad Hassaan Javedinblog.infraforge.agency·Jun 17 · 12 min readWhen a hardening rollout breaks 8 layers and your own reconciler fights youThe first thing the on-call team tried was patching the status ConfigMap. Five apps showed Progressing in the platform's bleater-status object, the dashboard had been red for four hours, and somebody 00
MHMuhammad Hassaan Javedinblog.infraforge.agency·Jun 16 · 11 min readWhen a validating webhook blocks the ConfigMap that would fix itThe kubectl patch came back as a webhook call failure, connection refused, not a credentials error. That was the moment the incident stopped being about a rotated MongoDB password and started being ab00