ContentPosts from @faun..
Link
@faun shared a link, 2 months ago

Fast, Secure Kubernetes with AKS Automatic

Azure dropped **AKS Automatic**, a new managed Kubernetes tier that tries to do it all—so you don’t have to. It comes with baked-in best practices: autoscaling via HPA, VPA, KEDA, and Karpenter. Automated patching. Node repair. Monitoring. All wired up by default. You still get full access to the .. read more  

Fast, Secure Kubernetes with AKS Automatic
Link
@faun shared a link, 2 months ago

v1.34: Pods Report DRA Resource Health

Kubernetes v1.34 lands with an alpha upgrade to **[KEP-4680](https://github.com/kubernetes/enhancements/tree/master/keps/sig-node/4680-add-resource-health-to-pod-status)**, pushing **Dynamic Resource Allocation (DRA)** into smarter territory: health-aware Pods. DRA drivers can now stream device heal.. read more  

Link
@faun shared a link, 2 months ago

v1.34: Recovery From Volume Expansion Failure (GA)

Kubernetes v1.34 bumps **automated recovery from botched PVC expansions** to GA. Users can now fix bad volume size requests—no admin, no drama. It cleans up unused quota, slows down retry spam, and surfaces progress with new PVC status fields... read more  

Link
@faun shared a link, 2 months ago

Kubernetes Security: Best Practices to Protect Your Cluster

A new JetBrains IDE plugin throws Kubernetes security best practices straight into your deployment manifests—right where they belong. Think: checks for `runAsRoot`, privileged mode, `hostPath`, host ports, and sketchy sysctls. No hand-waving. It enforces stuff like: - Default `runAsNonRoot` - Drop .. read more  

Kubernetes Security: Best Practices to Protect Your Cluster
Link
@faun shared a link, 2 months ago

v1.34: DRA Consumable Capacity

Kubernetes 1.34 rolls in **consumable capacity** for Dynamic Resource Allocation (DRA). That means device plugins can now carve up resources—GPU memory, NIC bandwidth, etc.—into precise slices for Pods, ResourceClaims, and namespaces. The scheduler tracks it all, so nothing spills over... read more  

Link
@faun shared a link, 2 months ago

v1.34: Decoupled Taint Manager Is Now Stable

Kubernetes 1.34 graduates the taint eviction controller to GA. Now, the node lifecycle controller only applies taints, while a dedicated taint eviction controller manages pod eviction. First split in 1.29, now stable in 1.34... read more  

 Activity
@faun published <function LinkPost.objectify at 0x7f5ccde85fc0> AI Models Need a Virtual Machine , 2 months, 1 week ago.
 Activity
@faun published <function LinkPost.objectify at 0x7f5ccde85fc0> Writing effective tools for AI agents—using AI agents , 2 months, 1 week ago.
 Activity
@faun published <function LinkPost.objectify at 0x7f5ccde8ca60> Zero-Click Remote Code Execution: Exploiting MCP & Agentic IDEs , 2 months, 1 week ago.
 Activity
@faun published <function LinkPost.objectify at 0x7f5ccde85fc0> MCP vulnerability case study: SQL injection in the Postgres MCP server , 2 months, 1 week ago.