Guides, comparisons and engineering notes from DevOpsPad.https://devopspad.com/enhttps://devopspad.com/blog/inspect-kafka-partition-leaders/https://devopspad.com/blog/inspect-kafka-partition-leaders/Read partition leaders, replicas and ISR with kafka-topics.sh and kcat, find under-replicated or leaderless partitions, and avoid advertised listener traps.Fri, 06 Nov 2026 00:00:00 GMTGuideshttps://devopspad.com/blog/read-only-mysql-user-for-desktop-clients/https://devopspad.com/blog/read-only-mysql-user-for-desktop-clients/A read-only flag in a client is not a permission boundary. Create a MySQL account that can only SELECT, scope it to one schema and verify the grants.Fri, 06 Nov 2026 00:00:00 GMTGuideshttps://devopspad.com/blog/devopspad-vs-ansible/https://devopspad.com/blog/devopspad-vs-ansible/Ansible automates any host task over SSH with playbooks. DevOpsPad offers a narrow set of reviewed actions for K3s Deployments and Nginx configs, with records.Fri, 06 Nov 2026 00:00:00 GMTComparisonshttps://devopspad.com/blog/devopspad-vs-argo-cd/https://devopspad.com/blog/devopspad-vs-argo-cd/Argo CD continuously syncs clusters from Git with a controller in each cluster. DevOpsPad releases from your desktop with a dry-run plan, a lease and a record.Fri, 06 Nov 2026 00:00:00 GMTComparisonshttps://devopspad.com/blog/devopspad-vs-dbeaver/https://devopspad.com/blog/devopspad-vs-dbeaver/DBeaver Community is a free, cross-platform SQL client with hundreds of JDBC drivers. DevOpsPad covers fewer engines, is read-only and adds Kubernetes.Fri, 06 Nov 2026 00:00:00 GMTComparisonshttps://devopspad.com/blog/devopspad-vs-k9s/https://devopspad.com/blog/devopspad-vs-k9s/k9s is a fast terminal UI that can edit, exec and stream logs on any resource. DevOpsPad is a read-only desktop explorer with databases and SSH tunnels.Fri, 06 Nov 2026 00:00:00 GMTComparisonshttps://devopspad.com/blog/devopspad-vs-lens/https://devopspad.com/blog/devopspad-vs-lens/Lens is a full Kubernetes IDE with editing, terminals and Helm. DevOpsPad is a read-only cluster explorer with databases, SSH tunnels and reviewed releases.Fri, 06 Nov 2026 00:00:00 GMTComparisonshttps://devopspad.com/blog/devopspad-vs-navicat/https://devopspad.com/blog/devopspad-vs-navicat/Navicat is a mature database IDE for editing, modeling and syncing SQL databases. DevOpsPad is a read-only workbench that also covers Kafka and Kubernetes.Fri, 06 Nov 2026 00:00:00 GMTComparisonshttps://devopspad.com/blog/dry-run-plans-and-leases-for-desktop-releases/https://devopspad.com/blog/dry-run-plans-and-leases-for-desktop-releases/How DevOpsPad releases from a laptop with no server: single-use plans, server-side dry-run, a Lease per Deployment, resourceVersion checks and honest results.Fri, 06 Nov 2026 00:00:00 GMTEngineeringhttps://devopspad.com/blog/kubernetes-rbac-for-read-only-debugging/https://devopspad.com/blog/kubernetes-rbac-for-read-only-debugging/A namespace Role that can read Pods, logs, events and Deployments but not Secrets or anything writable, a ServiceAccount token kubeconfig, and how to verify it.Fri, 06 Nov 2026 00:00:00 GMTGuideshttps://devopspad.com/blog/mongodb-pagination-skip-vs-range-queries/https://devopspad.com/blog/mongodb-pagination-skip-vs-range-queries/skip() gets slower with every page and shifts when data changes. Range queries on an indexed sort key stay fast. When to use each, with Extended JSON examples.Fri, 06 Nov 2026 00:00:00 GMTGuideshttps://devopspad.com/blog/browse-kubernetes-through-an-ssh-bastion/https://devopspad.com/blog/browse-kubernetes-through-an-ssh-bastion/Three ways to use kubectl against an API server that only a bastion can reach, how TLS server names break, and how a tunnel-aware client avoids it.Fri, 06 Nov 2026 00:00:00 GMTGuideshttps://devopspad.com/blog/k3s-pod-logs-from-a-crashed-container/https://devopspad.com/blog/k3s-pod-logs-from-a-crashed-container/When a Pod restarts, kubectl logs shows the new container. How to get the previous instance's logs, exit code and events, and what to do when they are gone.Fri, 06 Nov 2026 00:00:00 GMTGuideshttps://devopspad.com/blog/redis-scan-vs-keys-in-production/https://devopspad.com/blog/redis-scan-vs-keys-in-production/KEYS walks the whole keyspace in one blocking call. SCAN pages through it. How to use SCAN correctly and how to lock KEYS out of a read-only Redis ACL user.Fri, 06 Nov 2026 00:00:00 GMTGuideshttps://devopspad.com/blog/release-with-immutable-image-digests/https://devopspad.com/blog/release-with-immutable-image-digests/Tags can be moved; digests cannot. How to find an image's sha256 digest, deploy by digest, handle multi-arch indexes and roll back to exactly what ran before.Fri, 06 Nov 2026 00:00:00 GMTGuideshttps://devopspad.com/blog/clickhouse-readonly-queries-over-http/https://devopspad.com/blog/clickhouse-readonly-queries-over-http/Query ClickHouse over HTTP with readonly, result limits and timeouts, then enforce them on the server with a SELECT-only user and a settings profile.Fri, 06 Nov 2026 00:00:00 GMTGuideshttps://devopspad.com/blog/signing-and-notarizing-a-wails-app/https://devopspad.com/blog/signing-and-notarizing-a-wails-app/The GitHub Actions workflow that builds, signs, notarizes and staples the DevOpsPad macOS app, CLI and DMG, including a temporary keychain and stapler retries.Fri, 06 Nov 2026 00:00:00 GMTEngineeringhttps://devopspad.com/blog/ssh-tunnels-without-a-local-listener/https://devopspad.com/blog/ssh-tunnels-without-a-local-listener/How DevOpsPad sends database and Kubernetes traffic over in-process SSH channels, with no local port, no direct fallback and strictly verified host keys.Fri, 06 Nov 2026 00:00:00 GMTEngineeringhttps://devopspad.com/blog/storing-secrets-in-the-os-keychain/https://devopspad.com/blog/storing-secrets-in-the-os-keychain/How DevOpsPad splits connection metadata from secrets, keeps the keychain and workspace.json consistent on failure, and refuses to fall back to plaintext.Fri, 06 Nov 2026 00:00:00 GMTEngineeringhttps://devopspad.com/blog/local-llm-for-sql-suggestions/https://devopspad.com/blog/local-llm-for-sql-suggestions/Run an OpenAI-compatible model on your own machine with Ollama, LM Studio or llama.cpp, test the endpoint with curl, and point a desktop SQL client at it.Fri, 06 Nov 2026 00:00:00 GMTGuideshttps://devopspad.com/blog/why-devopspad-is-read-only-first/https://devopspad.com/blog/why-devopspad-is-read-only-first/Why the DevOpsPad query workspace only reads, how each engine adapter enforces it, where the separate write paths live, and what read-only cannot protect.Fri, 06 Nov 2026 00:00:00 GMTEngineeringhttps://devopspad.com/blog/why-the-ai-never-sees-your-credentials/https://devopspad.com/blog/why-the-ai-never-sees-your-credentials/What DevOpsPad sends to an AI provider, what it never sends, and the request rules that keep an API key on the right host and stop queries running on their own.Fri, 06 Nov 2026 00:00:00 GMTEngineering