Join us

ContentUpdates and recent posts about Argo CD..
Link
@kala shared a link, 4 months ago
FAUN.dev()

AWS Frontier Agents: Kiro, DevOps Agent, and Security Agent

“Frontier Agents” drop straight into incident workflows. They kick off investigations on their own, whether triggered by alarms or a human hand, pulling together logs, metrics, and deployment context fast. Findings show up where they’re needed: Slack threads, tickets, operator dashboards. No shell c.. read more  

AWS Frontier Agents: Kiro, DevOps Agent, and Security Agent
Link
@kala shared a link, 4 months ago
FAUN.dev()

Is that allowed? Authentication and authorization in Model Context Protocol

TheModel Context Protocol (MCP) 2025-11-25spec tightens up remote agent auth. It leans intoOAuth 2.1 Authorization Code grants, PKCE required, step-up auth backed. No token passthrough allowed. What’s new: experimental extensions forclient credentialsandclient ID metadata. These smooth out agent reg.. read more  

Is that allowed? Authentication and authorization in Model Context Protocol
Link
@kala shared a link, 4 months ago
FAUN.dev()

Keeping 20,000 GPUs healthy

Modal unpacked how it keeps a 20,000+ GPU fleet sane across AWS, GCP, Azure, and OCI. Think autoscaling, yes, but with some serious moves behind the curtain. They're running instance benchmarking, enforcing machine image consistency, running boot-time checks, and tracking GPU health both passively a.. read more  

Keeping 20,000 GPUs healthy
Link
@kala shared a link, 4 months ago
FAUN.dev()

Securing Agents in Production (Agentic Runtime, #1)

Palantir's AIP Agentic Runtime isn't just another agent platform, it's a control plane with teeth. Think tight policy enforcement, ephemeral autoscaling with Kubernetes (Rubix), and memory stitched in from the jump viaOntology. Tool usage? Traced and locked down with provenance-based security. Every.. read more  

Securing Agents in Production (Agentic Runtime, #1)
Link
@devopslinks shared a link, 4 months ago
FAUN.dev()

Nanoservices: Why Serverless Got Architecture Right

A fresh take onAWS Lambdaand serverless: thinknanoservices- tiny, isolated functions instead of chunky microservices. No shared state or shared runtime but clean separation, lean logic, and fewer ways to screw up scaling. Where microservices can spiral into spaghetti, nanoservices stay crisp. Each f.. read more  

Nanoservices: Why Serverless Got Architecture Right
Link
@devopslinks shared a link, 4 months ago
FAUN.dev()

Supply-chain risk of agentic AI - infecting infrastructures via skill worms

AI assistants with shell, network, or filesystem "skills" don't just help, they expose. These hooks can run commands before any human checks the model’s output. That means a bigger attack surface. More room for lateral movement. Easier persistence. In setups where tools like Claude Code run often, i.. read more  

Link
@devopslinks shared a link, 4 months ago
FAUN.dev()

Moltbot Personal Assistant Goes Viral, And So Do Your Secrets

Moltbot, the self-hosted AI agent with native hooks for Slack, Telegram, and WhatsApp, exploded from 50-ish to over 3,000 GitHub forks a day after going viral on Jan 24, 2026. It's built around a file-backed workspace and automates everything from code deploys to cloud orchestration. Cool? Definitel.. read more  

Moltbot Personal Assistant Goes Viral, And So Do Your Secrets
Link
@devopslinks shared a link, 4 months ago
FAUN.dev()

I Cannot SSH Into My Server Anymore (And That’s Fine)

A dev ditched their $100/month VPS for a clean, automated CoreOS setup. No SSH. No clicking around. JustIgnition,Podman Quadlets, andTerraformdoing the heavy lifting. It boots from YAML, spins up containers with systemd, and keeps itself fresh withPodman auto-updates, zero-touch, straight from the r.. read more  

I Cannot SSH Into My Server Anymore (And That’s Fine)
Link
@devopslinks shared a link, 4 months ago
FAUN.dev()

CodeBreach: Supply Chain Vuln & AWS CodeBuild Misconfig

Wiz Research dropped details onCodeBreach, a serious flaw that cracked open AWS SDK GitHub repos, yes, including the popular JavaScript one. The root problem? Leakyregex filtersin CodeBuild pipelines. They missed anchors, so attackers slipped in rogue pull requests, dodged build rules, and stole hig.. read more  

CodeBreach: Supply Chain Vuln & AWS CodeBuild Misconfig
At its core, Argo CD treats Git as the single source of truth for application definitions. You declare the desired state of your Kubernetes applications in Git (manifests, Helm charts, Kustomize overlays), and Argo CD continuously compares that desired state with what is actually running in the cluster. When drift is detected, it can alert you or automatically reconcile the cluster back to the Git-defined state.

Argo CD runs inside Kubernetes and provides:

- Declarative application management
- Automated or manual sync from Git to cluster
- Continuous drift detection and health assessment
- Rollbacks by reverting Git commits
- Fine-grained RBAC and multi-cluster support

It integrates natively with common Kubernetes configuration formats:

- Plain YAML
- Helm
- Kustomize
- Jsonnet

Operationally, Argo CD exposes both a web UI and CLI, making it easy to visualize application state, deployment history, diffs, and sync status. It is commonly used in platform engineering and SRE teams to standardize deployments, reduce configuration drift, and enforce auditability.

Argo CD is part of the Argo Project, which is hosted by the Cloud Native Computing Foundation (CNCF), and is widely adopted in production Kubernetes environments ranging from startups to large enterprises.