https://blog.thalamus.am/tag/devops/Recent content in DevOps on ThalamusHugo -- gohugo.ioen-USThalamus TMSat, 18 Jul 2026 00:00:00 +0000https://blog.thalamus.am/posts/the-apply-is-still-mine/Sat, 18 Jul 2026 00:00:00 +0000https://blog.thalamus.am/posts/the-apply-is-still-mine/<img src="https://blog.thalamus.am/posts/the-apply-is-still-mine/editorial-cover.png" alt="Featured image of post The apply is still mine" /><p>Claude Code writes a useful share of my Terraform now. It drafts Helm values, reviews GitOps configuration and helps me write runbooks. I still decide which changes reach production.</p> <p>The useful output is a diff I can review. Getting that diff faster doesn&rsquo;t remove the need to understand it.</p> <p>My workflow keeps commits, pushes and deployment commands with me. Claude Code&rsquo;s permissions help enforce that split. But a list of blocked commands is only part of the control: a tool that has production credentials may have more than one way to use them.</p>