Join us

ContentUpdates and recent posts about ForgeMT..
Link
@kaptain shared a link, 4 days, 9 hours ago
FAUN.dev()

KubeCon North America 2025 Recap: Federation and

HAProxy just droppedUniversal Mesh, a fresh spin on service mesh design. Forget the per-service sidecars - this model plants high-speed gateways at the network edges instead. Result? Lighter by 30–50% on resources, easier to upgrade, and way less hassle routing traffic across Kubernetes, VMs, and cl.. read more  

KubeCon North America 2025 Recap: Federation and
Link
@kaptain shared a link, 4 days, 9 hours ago
FAUN.dev()

Ingress NGINX Is Retiring. Here’s Your Path Forward with HAProxy

TheIngress NGINX projectis riding off into the sunset by March 2026. Time to pick a new horse. One strong contender: theHAProxy Kubernetes Ingress Controller. It matches feature-for-feature, comes with deeper observability, and reloads configs without taking your cluster offline. HAProxy’s not stopp.. read more  

Ingress NGINX Is Retiring. Here’s Your Path Forward with HAProxy
Link
@kaptain shared a link, 4 days, 9 hours ago
FAUN.dev()

Developers don’t care about Kubernetes clusters

Most cloud-native tools obsess over clusters. Not developers. That means poor support for things like promoting code between environments or deploying by feature - not just by repo. The author pushes for a better way: platforms that hide the Kubernetes mess and tame CI/CD. Think feature-driven deplo.. read more  

Developers don’t care about Kubernetes clusters
Link
@kaptain shared a link, 4 days, 9 hours ago
FAUN.dev()

udwall: A Tool for Making UFW and Docker Play Nice With Each Other

Hexmos droppedudwall, a declarative firewall manager that finally makesUFWandDockerplay nice. Docker’s notorious for bulldozing past UFW rules via iptables. udwall patches that hole. It syncs rules across both, auto-reconciles changes, backs up configs, and plugs cleanly intoAnsible. No more duct-ta.. read more  

udwall: A Tool for Making UFW and Docker Play Nice With Each Other
Link
@kaptain shared a link, 4 days, 9 hours ago
FAUN.dev()

You Want Microservices—But Do You Need Them?

Amazon Prime Video ditched its pricey microservices maze and rebuilt as asingle-process monolith, cutting ops costs by 90%. No big press release. Just results. Same move from Twilio Segment. And Shopify. Both pulled their tangled systems back intomodular monoliths- cleaner, faster, easier to test, a.. read more  

You Want Microservices—But Do You Need Them?
Link
@kaptain shared a link, 4 days, 9 hours ago
FAUN.dev()

Kubernetes Configuration Good Practices

Stripped down and sharp, the blog lays out Kubernetes config best practices: keep YAML manifests in version control, use Deployments (not raw Pods), and label like you mean it - semantically, not just alphabet soup. It digs into sneaky pain points too, like how YAML mangles booleans (yes≠true), and .. read more  

Link
@kaptain shared a link, 4 days, 9 hours ago
FAUN.dev()

The Grafana trust problem

Grafana’s been busy clearing the shelves.Grafana Agent,Agent Flow, andOnCall? All deprecated. The replacement:Grafana Alloy- a one-stop observability agent that handles logs, metrics, traces, and OTEL without flinching. Meanwhile,Mimir 3.0ships with a Kafka-powered ingestion pipeline. More scalabili.. read more  

Link
@kaptain shared a link, 4 days, 9 hours ago
FAUN.dev()

Turning Kubernetes Last Access to Kubernetes Least Access Using KIEMPossible

KIEMPossible is a new open-source tool for Kubernetes entitlement cleanup. It maps out who has access to what - roles, entities, permissions - and shows how those are actually used across your clusters. Think of it as a permission microscope for AKS, EKS, GKE, and even the DIY K8s crowd. It breaks d.. read more  

Turning Kubernetes Last Access to Kubernetes Least Access Using KIEMPossible
Link
@kala shared a link, 4 days, 9 hours ago
FAUN.dev()

How I Built a 100% Offline “Second Brain” for Engineering Docs using Docker & Llama 3 (No OpenAI)

Senior Automation Engineer built an offline RAG system for technical documents using Ollama, Llama 3, and ChromaDB in a Dockerized microservices architecture. The system enables efficient retrieval and generation of information from PDFs with a streamlined UI. The deployment package, including compl.. read more  

Link
@kala shared a link, 4 days, 9 hours ago
FAUN.dev()

How to Evaluate LLMs Without Opening Your Wallet

A new mock-based framework lets QA and automation folks stress-test LLM outputs - no API calls, no surprise charges. It runs entirely local, usingpytest fixtures, structured test flows, and JSON schema checks to keep things tight. Test logic stays modular. Cross-validation’s baked in. And if you nee.. read more  

ForgeMT is an open-source, production-grade platform designed to solve the complexity of running GitHub Actions runners at scale. Instead of teams managing their own fragile and duplicated CI runner setups, ForgeMT centralizes orchestration into a single, multi-tenant system built for scalability, security, and cost efficiency.

The platform provisions ephemeral runners on both EC2 and Kubernetes (EKS) using Terraform and Terragrunt, ensuring workloads scale up instantly and tear down to zero when idle, reducing costs. It enforces strong tenant isolation with AWS IAM, OIDC integration, and network segmentation, giving each team a secure boundary without requiring separate infrastructure.

ForgeMT integrates seamlessly with GitHub via a GitHub App and webhook events, automatically spinning up the right type of runner when jobs start. It supports advanced autoscaling strategies with Karpenter, spot instance optimization, and observability through centralized logging and monitoring.

By removing operational overhead, ForgeMT helps organizations accelerate delivery, cut cloud costs, and meet security requirements — all while giving developers fast, ephemeral CI runners that just work.