https://johnnyhuy.com/notes Short, self-contained, actionable write-ups. Each note is something a reader could act on, or would otherwise have to rediscover. en (Johnny Huynh) (Johnny Huynh) Fri, 11 Sep 2026 22:05:00 GMT https://johnnyhuy.com/notes/terraform-plan-is-not-drift-detection https://johnnyhuy.com/notes/terraform-plan-is-not-drift-detection A plan on a schedule detects pending configuration changes. It does not detect drift, because drift is unrecorded change to live infrastructure and a plan has no way to see it unless you ask for a refresh-only run. It also exits 0 with real differences present. Two facts, and most homegrown drift detection is wrong because it missed one of them. Fri, 11 Sep 2026 22:05:00 GMT (Johnny Huynh) TerraformInfrastructure as CodeDrift Detection https://johnnyhuy.com/notes/github-token-suppresses-pull-request-ci https://johnnyhuy.com/notes/github-token-suppresses-pull-request-ci GitHub does not run pull_request workflows for pull requests that GITHUB_TOKEN opened. Any release tool that opens its own PR (release-please, semantic-release, changesets, Mergify) will therefore never see its own release PR pass CI. Nothing errors, nothing is annotated, the checks just do not exist. Here is the rule, how to prove you have hit it, and the three ways out. Sat, 29 Aug 2026 23:20:00 GMT (Johnny Huynh) CI/CDGitHub ActionsRelease Automation https://johnnyhuy.com/notes/helm-does-not-install-crds-on-upgrade https://johnnyhuy.com/notes/helm-does-not-install-crds-on-upgrade CRDs in a chart's crds/ directory are only applied by helm install. helm upgrade skips them entirely, with no warning. If your External Secrets Operator ClusterSecretStore or your cert-manager Issuer disappears, this is why, and the fix is not in your values file because the values file is never read. Wed, 22 Jul 2026 04:10:00 GMT (Johnny Huynh) KubernetesHelmExternal Secrets Operator https://johnnyhuy.com/notes/cold-coresimulator-hangs-on-fresh-runners https://johnnyhuy.com/notes/cold-coresimulator-hangs-on-fresh-runners On a fresh GitHub Actions macOS runner, the first iOS simulator boot can hang indefinitely with no output. The job does not fail, it just stops making progress until timeout-minutes kills it. Shutting down and erasing the prewarmed simulators before the first boot is the fix, and bootstatus instead of sleep is what turns an invisible hang into a readable failure. Sun, 14 Jun 2026 01:45:00 GMT (Johnny Huynh) CI/CDiOSTesting