Netgear critical vulns come amid global netsec concern
International security squads all focus on stopping baddies busting in through routers, IoT kit etc
1_r/devopsish
Last Week in Kubernetes Development - Week Ending February 02 2025
Week Ending February 02, 2025
https://lwkd.info/2025/20250205
Developer News
The London Maintainer Summit schedule is up, and registration is open. There will also be an unconference at the event.
Release Schedule
Next Deadline: Production Readiness Freeze, February 6
Production Readiness Reviews will start this week, and the Enhancements Freeze is next week, so make sure your 1.33 enhancements are opted in.
Cherry-pick deadline for the February patch release is this Friday.
Featured PRs
129816: Improve SA max token expiry with external signer logic, and plumb extended expiry duration
This PR refines the token expiration handling in the kube-apiserver. It allows you to set the --service-account-max-token-expiration flag when using an external signer by replacing the old IsExternalSigner check with a dedicated extended signing duration. This change streamlines the configuration, making token management more straightforward and reliable.
KEP of the Week
4815 DRA Partitionable Devices
Support for partitionable devices, such as GPUs, is the next step in the grand implementation plan for dynamic resource allocation (DRA). Abhishek Malvankar has published an excellent primer on this KEP. The goal of this feature is to allow runtime partitioning of GPU resources like microprocessors, graphical engines, and memory between different pods and containers so that workloads can share them as required. The DRA team would like your comments on the proposed API, to make sure that they are covering the capabilities of a variety of popular hardware.
Other Merges
Score integration tests added for TaintToleration plugin
Fix in DRA plugin to return directly when there is no resourceclaim
New lint rule added to prevent the deprecated usage of unversioned featuregate
Added context for Wait methods in integration test utils
Improvements to goroutines metric calls in parallelizer.Until
Common code for statusz and flagz moved under httputil package
Added static pod upgrade test with hostNetwork
Version Updates
cel-go to v0.23.2
via Last Week in Kubernetes Development https://lwkd.info/
February 05, 2025 at 05:00PM
Why users still couldn't care less about Windows 11
No reason to upgrade other than the looming end of Windows 10
Twitterrific team launches new ‘Tapestry’ iPhone app for Bluesky, Mastodon, RSS, more
The makers of Twitterrific just launched a new iPhone app for social and web feeds. Tapestry brings together Bluesky, Mastodon, RSS, and more.
China to launch probe into Google over alleged antitrust violations
China's regulatory body said it would begin an antitrust investigation into Google over alleged anti-competitive market behavior.
DevOps Toolkit - Ep10 - Ask Me Anything About DevOps Cloud Kubernetes Platform Engineering... w/Scott Rosenberg - https://www.youtube.com/watch?v=7aR0K9Qtkpg
Ep10 - Ask Me Anything About DevOps, Cloud, Kubernetes, Platform Engineering,... w/Scott Rosenberg
There are no restrictions in this AMA session. You can ask anything about DevOps, Cloud, Kubernetes, Platform Engineering, containers, or anything else. We'll have a special guest Scott Rosenberg to help us out.
▬▬▬▬▬▬ 👋 Contact me 👋 ▬▬▬▬▬▬ ➡ BlueSky: https://vfarcic.bsky.social ➡ LinkedIn: https://www.linkedin.com/in/viktorfarcic/
▬▬▬▬▬▬ 🚀 Other Channels 🚀 ▬▬▬▬▬▬ 🎤 Podcast: https://www.devopsparadox.com/ 💬 Live streams: https://www.youtube.com/c/DevOpsParadox
via YouTube https://www.youtube.com/watch?v=7aR0K9Qtkpg
Age isn't the issue, it's the lack of any kind of public trust background check. | A 25-Year-Old With Elon Musk Ties Has Direct Access to the Federal Payment System
The Bureau of the Fiscal Service is a sleepy part of the Treasury Department. It’s also where, sources say, a 25-year-old engineer tied to Elon Musk has admin privileges over the code that controls Social Security payments, tax returns, and more.
The AI bust is here
The arrival of DeepSeek blows up delusions of AI tech wealth.
In 2025, Apps are Becoming the Middlemen Nobody Needs
Welcome to the protocol revolution. The apps are dying.
5000 pods/second and 60% utilization with Gödel and Katalyst with Yue Yin
5,000 pods/second and 60% utilization with Gödel and Katalyst, with Yue Yin
Learn how ByteDance manages computing resources at scale with custom Kubernetes scheduling solutions that handle millions of pods across thousands of nodes.
Yue Yin, Software Engineer at ByteDance, discusses their open-source Gödel scheduler and Katalyst resource management system. She explains how these tools address the challenges of managing online and offline workloads in large-scale Kubernetes deployments.
You will learn:
How Gödel's distributed architecture with dispatcher, scheduler, and binder components enables the scheduling of 5,000 pods per second
Why NUMA-aware scheduling and two-layer architecture are crucial for handling complex workloads at scale
How Katalyst provides node-level resource insights to enable efficient workload co-location and improve CPU utilization
Sponsor
This episode is sponsored by Learnk8s — get started on your Kubernetes journey through comprehensive online, in-person or remote training.
More info
Find all the links and info for this episode here: https://ku.bz/lMpNng_33
Interested in sponsoring an episode? Learn more.
via KubeFM https://kube.fm
February 04, 2025 at 05:00AM
Red Hat Releases Tuned 2.25 Daemon For Linux Adaptive Performance Tuning & Monitoring
Red Hat engineers have released Tuned 2.25 as the newest version of their alternative to power-profiles-daemon and similar for adaptive performance tuning and monitoring
Evaluating Security Risk in DeepSeek and Other Frontier Reasoning Models
The performance of DeepSeek models has made a clear impact, but are these models safe and secure? We use algorithmic AI vulnerability testing to find out.
Palisades fire drone crash operator pleads guilty
Peter Tripp Akemann avoids jail, will pay 'Super Scooper' repair costs and is ordered to help with LA's wildfire recovery
Anthropic has a new way to protect large language models against jailbreaks
This line of defense could be the strongest yet. But no shield is perfect.
Rust-CUDA Project Restarted For Enabling NVIDIA CUDA Kernels Within Rust Code
The open-source Rust CUDA project has been 'rebooted' to get back onto the effort of allowing NVIDIA CUDA compute kernels to be coded within the Rust programming language.
Apple reportedly gives up on its AR video glasses project
Apple’s AR roadmap looks increasingly unclear.
That was FAST | Chatbot Software Begins to Face Fundamental Limitations | Quanta Magazine
Recent results show that large language models struggle with compositional tasks, suggesting a hard limit to their abilities.
How DeepSeek and next-generation AI agents could erode value of language models
Executives at leading AI labs say that large language models like those from OpenAI and Big Tech firms risk becoming commoditized in 2025.
Linux Security: Scan Your Servers for Rootkits With Ease
Open source tools like Linux Malware Detect and Chkrootkit can alert you to unwanted visitors on your server.
System Operators to Timekeepers: What Will Replace Leap Seconds?
Water from the melting polar ice caps could be subtly affecting the earth's rotation, throwing off the ultra-precise atomic measurements of time.
2024 Data Security Incident - Asheville Eye
[et_pb_section fb_built=”1″ fullwidth=”on” _builder_version=”4.16″ global_colors_info=”{}”][et_pb_fullwidth_image src=”https://ashevilleeye.com/wp-content/uploads/Revised.jpg” title_text=”Revised” module_class=”banner-img” _builder_version=”4.27.4″ global_colors_info=”{}”][/et_pb_fullwidth_image][/et_pb_section][et_pb_section fb_built=”1″ _builder_version=”4.16″ global_colors_info=”{}”][et_pb_row column_structure=”1_2,1_2″ _builder_version=”4.16″ custom_padding=”0px||0px|” global_colors_info=”{}”][et_pb_column type=”1_2″ module_class=”float-column” _builder_version=”4.16″ custom_padding=”||0px|” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_post_title meta=”off” featured_image=”off” module_class=”up-block” _builder_version=”4.16″ border_style=”solid” global_colors_info=”{}”][/et_pb_post_title][/et_pb_column][et_pb_column type=”1_2″ _builder_version=”4.16″ custom_padding=”||0px|” global_colors_info=”{}” custom_padding__hover=”|||”][/et_pb_column][/et_pb_row][et_pb_row _builder_version=”4.16″ custom_padding=”||0px|” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.16″ custom_padding=”||0px|” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_text _builder_version=”4.27.4″ text_font_size=”15px” hover_enabled=”0″ border_style_all=”solid” border_style=”solid” global_colors_info=”{}” sticky_enabled=”0″] Asheville Eye Associates, PLLC Notifies Patients… Learn More About
If you need AI news Tim is delivering a good newsletter | Weekly News from the Intersection of AI and Open Source - Issue #05
This is a weekly curated newsletter, published every Monday (at least of Q1 2025, and longer if it gets traction) for people who are interested in unlocking the best possible scifi future with AI and open source (please subscribe if that's you!). It is offered in the spirit of a personal open source
Oh the irony. | AI Company Asks Job Applicants Not to Use AI in Job Applications
Anthropic, the developer of the conversational AI assistant Claude, doesn’t want prospective new hires using AI assistants in their applications, regardless of whether they’re in marketing or engineering.
Ontario is ‘ripping up’ Starlink contract in response to US tariffs
Elon Musk’s DOGE role makes his companies a target.
block/goose: an open-source, extensible AI agent that goes beyond code suggestions - install, execute, edit, and test with any LLM
an open-source, extensible AI agent that goes beyond code suggestions - install, execute, edit, and test with any LLM - block/goose
codename goose | codename goose
Your open source AI agent, automating engineering tasks seamlessly.
Why I Changed My Mind About Backstage? A Brutally Honest Opinion
Why I Changed My Mind About Backstage? A Brutally Honest Opinion
In this video, I share my evolving perspective on Backstage, a popular developer portal platform. Despite my initial skepticism due to its architectural choices and plugin quality, my view changed after seeing its potential through the eyes of Scott Rosenberg. Join me as I explore how to set up, configure, and deploy Backstage with custom plugins, and why it might be the Kubernetes of developer portals. Learn the step-by-step process and discover the power of automation and reproducibility in managing your developer tools. Watch till the end to see the future of Backstage unfold!
Backstage #Kubernetes #Plugins #ScottRosenberg
Consider joining the channel: https://www.youtube.com/c/devopstoolkit/join
▬▬▬▬▬▬ 🔗 Additional Info 🔗 ▬▬▬▬▬▬ ➡ Transcript and commands: https://devopstoolkit.live/internal-developer-platforms/why-i-changed-my-mind-about-backstage?-a-brutally-honest-opinion 🔗 Backstage: https://backstage.io/ 🎬 Should We Run Databases In Kubernetes? CloudNativePG (CNPG) PostgreSQL: https://youtu.be/Ny9RxM6H6Hg 🎬 How to Create Custom CLIs for Internal Developer Platforms with Nushell: https://youtu.be/TgQZz2kGysk 🎬 Crossplane (Tutorial Playlist): https://youtube.com/playlist?list=PLyicRj904Z99i8U5JaNW5X3AyBvfQz-16 🎬 Mastering Developer Portals: Discover & Integrate API Schemas with Port: https://youtu.be/PV1sBiC85Yc 🎬 Surviving Backstage with Roadie: A Developer's Nightmare or Dream?: https://youtu.be/LIhnicLyzsk
▬▬▬▬▬▬ 💰 Sponsorships 💰 ▬▬▬▬▬▬ If you are interested in sponsoring this channel, please visit https://devopstoolkit.live/sponsor for more information. Alternatively, feel free to contact me over Twitter or LinkedIn (see below).
▬▬▬▬▬▬ 👋 Contact me 👋 ▬▬▬▬▬▬ ➡ BlueSky: https://vfarcic.bsky.social ➡ LinkedIn: https://www.linkedin.com/in/viktorfarcic/
▬▬▬▬▬▬ 🚀 Other Channels 🚀 ▬▬▬▬▬▬ 🎤 Podcast: https://www.devopsparadox.com/ 💬 Live streams: https://www.youtube.com/c/DevOpsParadox
▬▬▬▬▬▬ ⏱ Timecodes ⏱ ▬▬▬▬▬▬ 00:00 Why Backstage? 01:45 What's Up Scott? 05:23 Backstage Setup and Configuration 09:57 Backstage Build 11:15 Deploy Backstage 12:55 Explore the Crossplane Plugin 17:57 How Does It Work? 20:04 Backstage Is Not (Only) What I Thought It Is
via YouTube https://www.youtube.com/watch?v=qi7eH6dZJOk
Ford Field Experience 2025
Ford Field Experience 2025
https://chrisshort.net/micro/ford-field-experience-2025/
Experience a family's VIP adventure at Ford Field, home of the Detroit Lions, including playing on the NFL turf and exclusive locker room access
via Chris Short https://chrisshort.net/
February 03, 2025
I was wondering if we were approaching this point. | The AI revolution is running out of data. What can researchers do?
Listen to an audio version of a recent Nature Feature.
Sam Altman: OpenAI has been on the 'wrong side of history' concerning open source | TechCrunch
In a Reddit AMA, OpenAI CEO Sam Altman said that he believes OpenAI has been 'on the wrong side of history' concerning its open source approach.