ContentPosts from @tixo..
Link
@faun shared a link, 1 month, 4 weeks ago

End to End Argo-Workflow for CI/CD

Argo Workflowsisn't just another tool; it sings for Kubernetes-native CI/CD. It juggles complex workflows as DAGs, brings dynamic execution to life with CRDs and parameters. Got a weekly CI? Automate it withCronWorkflows. Secure those Docker pushes using Kubernetes secrets, and let shared volumes ha..

End to End Argo-Workflow for CI/CD
Link
@faun shared a link, 1 month, 4 weeks ago

The Ultimate Guide to Running Kubernetes in a Home Lab

K3sandMicroK8sshine in makeshift home labs with minimal hardware. Throw inLonghornfor storage andVelerofor backup bliss. Now that's a recipe for tech nirvana...

Link
@faun shared a link, 1 month, 4 weeks ago

Kubernetes 1.33: Resizing Pods Without the Drama (Finally!)

Kubernetes 1.33brings in-place pod vertical scaling, allowing you to adjust CPU and memory without restarting pods, a game-changer for seamless resource management in production workloads. This feature simplifies vertical pod autoscaling especially for stateful workloads like databases...

Kubernetes 1.33: Resizing Pods Without the Drama (Finally!)
Link
@faun shared a link, 1 month, 4 weeks ago

A Journey Through Kafkian SplitDNS in a Multitenant Kubernetes Offering

SCHIPfaced off with tenant demands for serverless Kafka. Their weapon of choice? A crafty DNS trick usingCoreDNSand a few clevernode-local DNSadjustments. They kept multitenancy alive and kicking without wearing out the ops team. Nice move...

A Journey Through Kafkian SplitDNS in a Multitenant Kubernetes Offering
Link
@faun shared a link, 1 month, 4 weeks ago

GitOps for Kubernetes With Nixidy and ArgoCD

Nixidyturns Kubernetes YAMLs into sleek, declarative Nix setups. It offers a robust, repeatable config flow—even for those complex Helm charts. Spice up your deployment by pairingArgoCDwith encrypted secrets viasops-secrets-operator. Now you can wrangle sensitive data in Git with style—and security...

GitOps for Kubernetes With Nixidy and ArgoCD
Link
@faun shared a link, 1 month, 4 weeks ago

Interesting Kubernetes application demos

Kubeappsis your backstage pass to deploying and controllingK8sapps with style. Dive into a treasure chest ofHelmcharts ready to roll. For those looking to jazz up a demo, unleashKubedoomorKubevaders. Obliteratepodsfor stress-testing, or just because you can. Craving some retro-futuristic fun? Check ..

Link
@faun shared a link, 1 month, 4 weeks ago

How We Designed Model Runner and What’s Next

Docker's just unleashed a new gadget with Desktop4.40. Meet theModel Runner, your ticket to running AI models on your local machine. Imagine it as the Peacekeeper of container-host diplomacy. It’s powered byllama.cppand can ride GPUs like a pro skater. Oh, and it plays nice with theOpenAI API. Model..

How We Designed Model Runner and What’s Next
Link
@faun shared a link, 1 month, 4 weeks ago

AWS’ EKS Kubernetes ‘Critical Security’ Flaw Exposes Credentials, Says Trend Micro

Trend Microblows the lid off Amazon's EKS snafu—misconfigured Kubernetes containers brazenly leaking AWS credentials. Cue privilege escalation chaos. AWS shrugs, hiding behind the "Shared Responsibility" mantra. Trend Micro, undeterred, sounds the alarm: secure those configurations, and embrace the ..

AWS’ EKS Kubernetes ‘Critical Security’ Flaw Exposes Credentials, Says Trend Micro
Link
@faun shared a link, 1 month, 4 weeks ago

NSEnter and Kubernetes

nsenteris your backstage pass to aKubernetesnode. It plays with Linux namespaces, crashing through isolation walls for a direct look inside. Summon it withPID1 and proper permissions, and you're deep in the node's core. No middleman required...

NSEnter and Kubernetes
Link
@faun shared a link, 1 month, 4 weeks ago

Kernel-level container insights: Utilizing eBPF with Cilium, Tetragon, and SBOMs for security

eBPF, Cilium'sTetragon, andSBOMsare the dream team for exposing real-time kernel-level drama inside containers. When these powers combine, they hunt down surprise breaches likeLog4Shellwith a sleuth's precision. Bonus: they shave off20%fromCPU usagewhile they're at it...