Testing
Unit tests verify that your Pulumi code produces the resources you intend. Policy-as-code verifies that those resources comply with organizational standards — encryption enabled, tags present, no public S3 buckets, required IAM conditions. Pulumi CrossGuard handles the second concern. CrossGuard policies run on every pulumi up and pulumi preview. They can
Testing
Most Terratest tutorials cover the basics: deploy a module, assert an output, destroy it. That gets you started, but production infrastructure codebases need more. Modules compose, environments differ, and running 40 sequential end-to-end tests takes hours. This guide covers the advanced Terratest patterns that make infrastructure test suites fast, maintainable,
Testing
CDK unit tests with assertions.Template are fast and require no AWS account — but they only verify the CloudFormation template you generate, not what AWS actually creates. Integration tests deploy real stacks, make real API calls, and assert on real cloud state. The @aws-cdk/integ-tests-alpha library is CDK's
Database
Atlas brings declarative schema management to database migrations, letting you define what your schema should look like rather than how to get there. This post covers automated schema validation with atlas schema diff, lint-driven migration safety checks, CI/CD pipeline integration, and drift detection to keep your database and codebase
DevOps
Flux automates GitOps deployments, which means a broken Kustomization or HelmRelease can silently fail to reconcile — or worse, reconcile incorrectly — without anyone noticing until a production incident. This guide covers the full Flux testing stack: flux build for local manifest rendering, flux diff for live drift detection, envtest for controller
DevOps
Internal developer platforms (IDPs) are the infrastructure that your engineering teams depend on every day. A broken platform breaks every team simultaneously. This guide covers the full QA strategy for IDPs: from the testing pyramid for platform components, to golden path validation, self-service workflow smoke tests, chaos testing for platform
DevOps
ArgoCD makes GitOps deployments feel effortless — until a bad sync silently rolls out a broken config to 40 namespaces via an ApplicationSet. This guide covers how to validate ArgoCD applications, ApplicationSets, and sync policies before they reach a production cluster, using argocd app diff, local kind/k3d clusters, and automated
DevOps
Crossplane Compositions are Kubernetes-native infrastructure templates that expand a simple XR claim into tens of managed resources. A bug in a Composition can delete a production RDS instance when someone creates a new database claim. This guide covers how to test Composition logic with crossplane beta render, unit-test patch-and-transform functions,
DevOps
Backstage plugins live at the intersection of React frontend, Node.js backend, and Backstage's entity catalog — which makes them surprisingly tricky to test. This guide walks through unit testing plugin backends with @backstage/test-utils, integration-testing catalog API interactions, and running Cypress E2E tests against a real Backstage instance.
Testing
AI agent pipelines need CI/CD just like any software — but standard pipelines don't account for LLM non-determinism, evaluation costs, or model-level regressions. This guide covers building CI/CD pipelines specifically for AI agent systems: fast deterministic checks, LLM evaluation gates, model upgrade workflows, safety guardrails, and production
Chaos Engineering
Chaos Toolkit is an open-source chaos engineering tool that defines experiments as declarative JSON or YAML files. Each experiment specifies a steady-state hypothesis (what "normal" looks like), a set of fault-injection actions, and rollback activities. Chaos Toolkit verifies your hypothesis before chaos, injects faults, then verifies the hypothesis
Testing
Ansible playbooks are often "tested" by running them against production and hoping. Molecule changes that — it provides a framework for testing roles and playbooks in isolated containers or VMs, verifying your automation actually works before it touches real infrastructure. What Is Molecule? Molecule is the official testing framework