Frigga Blogs

Watch the first two minutes of any investigation and you will notice that almost none of it is investigation. An alert fires for a service. Before anybody can reason about what went wrong, somebody has to establish what the service even is. Which clus…

The thing nobody warns you about with your first few incidents isn't the pressure. It's the tab count. You start with an alert. By minute four you've got Grafana open, a terminal running kubectl , your CI system in another tab, GitHub in…

Somebody asked me a simple question a while back: are any of our databases reachable from the public internet? I said I'd check. Then I sat there for a second realising I didn't actually know how to answer that quickly. Not because the inf…

A node memory alert goes off. The question that follows is always the same, and it's never as easy to answer as it should be. Which workload is doing this? The usual route is kubectl top pods , sorted by hand, one namespace at a time. If you…

Every investigation I have been part of needs two kinds of knowledge, and they never live in the same place. The first is what production is doing. Error rate, latency, memory, what deployed and when, which pods are unhappy. That is Grafana, or Data…

Watch how an investigation actually begins. An alert fires. Somebody in the channel says "I bet it's the database." Within ninety seconds four people are looking at database metrics, somebody is checking connection pool saturation, and a…

Nearly nine in ten organisations now run more than one cloud. Flexera's 2026 State of the Cloud report puts multi-cloud adoption at 89%, and the average sits at around 2.6 providers. Almost none of them chose this. Multi-cloud is usually th…