Ens on 翟志军 Jack Zhai

The Hidden Trap in Technical Decisions: Trading a One-Time Cost for Continuous Debt

Sun, 14 Jun 2026 00:00:00 +0000

Using the case of building an in-house AI Gateway to talk about the trap of trading continuous debt for a one-time cost

An Example Implement Ansible Deployment on Github Action

Mon, 22 Apr 2024 00:00:00 +0000


- name: write secrets into json
  run: |
    echo "${{ toJSON(secrets) }}" > _github_secrets.json
- name: write github repo vars into json
  run: |
    echo "${{ toJSON(vars) }}" > _github_vars.json
- name: write ssh private key
  run: |
    echo "${{ secrets.STAG_SSH_PRIVATE_KEY }}" > ${{ github.workspace }}/.ssh_private_key.pem
    chmod 0400 ${{ github.workspace }}/.ssh_private_key.pem
- name: write ssl certificate
  run: |
    echo "${{ secrets.showmecodes_TLS_CERTIFICATES }}" > ${{ github.workspace }}/showmecodes.ai.pem
    echo "${{ secrets.showmecodes_TLS_KEY }}" > ${{ github.workspace }}/showmecodes.ai.key
- name: deploy showmecodes to stag
  uses: dawidd6/action-ansible-playbook@v2
  with:
    playbook: playbook-showmecodes.yml
    key: ${{ secrets.STAG_SSH_PRIVATE_KEY }}
    options: |
      --inventory env_vars/${{env.APP_ENV}}/hosts.yaml
      --extra-vars "app_backend_zip_path=${{ needs.init_build_version.outputs.backendArtifactName }} app_frontend_zip_path=${{ needs.init_build_version.outputs.fontendStagArtifactName }} app_version=${{ needs.init_build_version.outputs.VERSION }} ansible_ssh_private_key_file=${{ github.workspace }}/.ssh_private_key.pem showmecodes_tls_certificate_file=${{ github.workspace }}/showmecodes.ai.pem showmecodes_tls_private_key_file=${{ github.workspace }}/showmecodes.ai.key" --extra-vars=@_github_vars.json --extra-vars=@_github_secrets.json

Two Patterns for Rollback

Wed, 06 Mar 2024 00:00:00 +0000

Rollback is an operations and maintenance procedure. It usually occurs when a problem is discovered during deployment, and the target environment needs to be reverted to its pre-deployment state.

In my opinion, there are two patterns for rollback. One of them is to perform a reverse operation step by step, which I call the Reverse Operation Pattern.

Rollback Pattern Based on Reverse Operation

Probably due to the inertia of the past manual operation mindset, I found that quite a few people only know this one pattern.

Setting up EKS with Bazel, Jsonnet and Terraform

Sat, 20 Jan 2024 00:00:00 +0000

Overview

In this document, I’ll describe my solution from the following parts:

Part1 Architecture: describe the desired state of the architecture
Part2 Implementation:
- Code Structure Introduce
- How to Build it
- Deploy Nginx Controller using Helm

Part1: Architecture

We assume that the project has a project named: health. Here’s the architecture graph, which draw by Excalidraw

Network Architecture

I created 4 subnets that are evenly distributed to 2 Availability Zones. Each availability zone has 2 subnets, one is public subnet,and another one is private subnet. The public subnet goes out through the Internet gateway and the private subnet goes out through the NAT gateway.