Blog

GCP insights for
startup founders

Practical guides on Google Cloud infrastructure, Terraform, CI/CD, and cloud cost optimisation. Written from real client work.

FEATURED

The GCP security mistakes I find at 9 out of 10 startup audits

Everyone has Owner role on production. Service account JSON keys in GitHub. Passwords in .env files. Database with a public IP. Here is the full list and exactly how to fix each one.

📅 April 2025⏱ 8 minSecurity
TerraformTutorial

How to set up GCP infrastructure for a startup — step by step

A complete guide to a production-ready GCP foundation. VPC, IAM, Cloud Run, and CI/CD in one terraform apply.

📅 Apr 2025⏱ 6 min
Cloud RunPerformance

Why your Cloud Run service is slower than it should be

Cold starts, min-instances, startup CPU boost. Three settings that immediately improve your API response times.

📅 Mar 2025⏱ 5 min
SecurityCI/CD

Workload Identity Federation: GitHub Actions without stored keys

How to authenticate GitHub Actions to GCP using short-lived OIDC tokens. No JSON keys, no rotation, no security debt.

📅 Mar 2025⏱ 7 min
CostOptimisation

How to cut your GCP bill by 40% without changing your architecture

Committed use discounts, idle cleanup, Cloud Run scale-to-zero, and Cloud SQL right-sizing.

📅 Feb 2025⏱ 6 min
GKEKubernetes

GKE Autopilot vs Standard: which should your startup use?

Autopilot handles node management automatically. Standard gives you full control. Here is when each makes sense.

📅 Feb 2025⏱ 8 min
IAMSecurity

Why every startup should eliminate service account JSON keys

JSON keys are the most dangerous credential in cloud infrastructure. Here is how to replace them with Workload Identity Federation.

📅 Jan 2025⏱ 6 min

Cloud Infrastructure Weekly

One practical GCP tip every Friday. For startup founders and CTOs. No spam.

No spam. Unsubscribe anytime. Or follow on LinkedIn.