ContentPosts from @brainbruce..
Link
@faun shared a link, 6 months, 2 weeks ago
FAUN.dev()

v1.33: From Secrets to Service Accounts: Image Pulls Evolved

Kubernetes drops ephemeral KSA tokens into the mix for image pulls, putting long-lived credentials in the rearview mirror. Granular access? Absolutely rocks. Compliance? Consider it handled... read more  

Link
@faun shared a link, 6 months, 2 weeks ago
FAUN.dev()

Impromptu disaster recovery

K3s reconciler threw a fit. A botched YAML reformat doubled up resources and obliterated the author’s cluster, courtesy of the clumsy hands of language models. It’s a vivid postcard from the island of LLM limitations. Luckily, Hetzner’s system rebuild stepped in to save the day. But it wasn’t painle.. read more  

Impromptu disaster recovery
Link
@faun shared a link, 6 months, 2 weeks ago
FAUN.dev()

1.33: Volume Populators Graduate to GA

Kubernetes v1.33unleashesvolume populatorsfor all to enjoy. Custom resources now power data sources. Say goodbye to pesky resource leaks, mishmash configurations, and sleepy metrics. Prepare for a wild ride of flexibility... read more  

Link
@faun shared a link, 6 months, 2 weeks ago
FAUN.dev()

The state of Kubernetes jobs in 2025 Q1

North American Kubernetes salariestook a 6% nosedive, settling at an average$165,288. Meanwhile, Europe enjoyed a tidy 4% uptick. Remote work? Holding steady at68%. No surprise—Pythonremained the darling of coding languages, getting a nod in62%of job posts, whileDockerwasn't far behind, gracing57%of.. read more  

The state of Kubernetes jobs in 2025 Q1
Link
@faun shared a link, 6 months, 2 weeks ago
FAUN.dev()

How to build small and secure Docker images for Rust (FROM scratch)

This Dockerfile allows for the creation of minimal and secure Docker images for Rust projects. It utilizes multi-stage builds to avoid unnecessary dependencies and reduces the size of the final image... read more  

Link
@faun shared a link, 6 months, 2 weeks ago
FAUN.dev()

Podfox: World's First Container-Aware Browser

Podfoxswoops in to transform your browser into a Podman rootless container with a SOCKS proxy—no port forwarding monkey business required. It's like magic for your dev groove. Meanwhile,Homebrewgives container development a twist: it mounts user environments in read-only mode. This way, your favorit.. read more  

Podfox: World's First Container-Aware Browser
Link
@faun shared a link, 6 months, 2 weeks ago
FAUN.dev()

Uber’s Journey to Ray on Kubernetes

Uber tossed manual ML resource wrangling for a slick Kubernetes-Ray duo, amping up scalability and slashing inefficiencies.With dynamic resource pools, elastic sharing, and smart scheduling, they rev up utilization and demolish GPU waste—no micromanaging required... read more  

Uber’s Journey to Ray on Kubernetes
Link
@faun shared a link, 6 months, 2 weeks ago
FAUN.dev()

v1.33: Streaming List responses

Kubernetesunleashed a game-changer:streaming encoding for List responses. What used to hog70-80GBnow zips by on a sleek3GB. That's a20x improvementin memory conservation. Say goodbye to those aggravating Out-of-Memory errors. This upgrade tackles mammoth datasets while babysitting your cluster's sta.. read more  

v1.33: Streaming List responses
Link
@faun shared a link, 6 months, 2 weeks ago
FAUN.dev()

Microservices Are a Tax Your Startup Probably Can’t Afford

Premature microservicesare like planting seeds in concrete. They'll stall your startup's momentum. A monolith is your friend here—simple, reliable, with the vast realm of open-source at your disposal. A crispmonorepotightens team synergy and sidesteps the quagmire of complexity, unlike those headach.. read more  

Microservices Are a Tax Your Startup Probably Can’t Afford
Link
@faun shared a link, 6 months, 2 weeks ago
FAUN.dev()

v1.33: Fine-grained SupplementalGroups Control Graduates to Beta

Kubernetes v1.33 rolls in a snazzy beta feature: control over supplemental group merging in containers. It sharpenssecurityby exposing those sneaky implicit GIDs. But don't get too cozy—this power comes with strings. You’ll need CRI runtimes that play nice, or your pods will get the boot on unsuppor.. read more Â