AWS CDK Risk: Exploiting a Missing S3 Bucket Allowed Account Takeover
AWS CDK Risk: Exploiting a Missing S3 Bucket Allowed Account Takeover
October 24, 2024 at 11:21AM
via Instapaper
1_r/devopsish
- YouTube
- YouTube
October 24, 2024 at 11:02AM
via Instapaper
Anyone using this? | The First HTML LSP That Reports Syntax Errors
The story of how I gained two world-firsts, somehow.
Qualcomm shares fall after report of Arm threat to scrap key license in escalating dispute
Qualcomm shares fell on Wednesday after Bloomberg reported that British chip designer Arm is looking to scrap a key license for the U.S. firm.
Linus Torvalds Comments On The Russian Linux Maintainers Being Delisted
Following yesterday's news first featured on Phoronix of several Linux driver maintainers being de-listed from their maintainer positions within the mainline Linux kernel over their connections to Russia, Linus Torvalds has today commented on the matter.
fenio/pv-mounter: Mount Kubernetes PVs locally using SSHFS
Mount Kubernetes PVs locally using SSHFS.
Last Week in Kubernetes Development - Week Ending October 20 2024
Week Ending October 20, 2024
https://lwkd.info/2024/20241022
Developer News
Join other members of your SIG for the Kubernetes SIG Meet & Greet & Lunch & Learn at Kubecon on Nov 14th. Sign up to table for your SIG.
If you are a SIG lead, please also add callouts for the Summit opening session to find new contributors for your SIG.
The Summit Social will be at Flanker and will have the usual fun & games. Unusually, due to Utah law, you will be required to bring an ID/passport. Also, the Summit is still looking for volunteers to help staff.
Release Schedule
Next Deadline: Docs placeholder PRs deadline, October 24
We are now in Enhancements Freeze, and Alpha2 has been released. For those working on 1.32 enhancements and documentation updates, now’s the time to open your PR against dev-1.32 on the kubernetes/website repo. It would be awesome if full docs are ready, but a placeholder PR will keep your contribution on track. Final exceptions for missed Enhancements are due on Monday.
October patch releases were delayed due to Go update issues. They are available now for v1.28.15, v1.29.10, v1.30.6, and v1.31.2.
KEP of the Week
KEP 784: Kube Proxy component configuration graduation
This KEP proposes a plan to graduate kube-proxy’s component configuration to beta, addressing its current complexity. Originally configured via command-line flags, kube-proxy’s config became difficult to manage as new features were added, staying in v1alpha1. The current format is hard to use, with poorly grouped options and inconsistencies, making restructuring and stabilization necessary.
This KEP is tracked for alpha release in the ongoing v1.32 cycle.
Other Merges
scheduler_perf test cases added for NodeUpdate event handling
Apply fsGroup policy for ReadWriteOncePod volumes
Fix AssignedPodUpdated in scheduler to check if the incoming events are scale down events
Removed legacy cloud provider integration code from kube-controller-manager
Fix for 1.31 regression that can crash kube-controller-manager’s service-lb-controller loop
Clarification for API validation error for toleration if operator is Exists and value is not empty
Fix for kubelet wrongly dropping the QOSClass field of the Pod’s status when it rejects a Pod
Image pull error used in messages during back-off
Fix for failing storage e2e test
Improvements to CSILimits plugin accuracy by using VolumeAttachments
Added kubelet support for systemd watchdog integration
More fine-grained QHints for podtopologyspread plugin
Add e2e test for custom profile in kubectl debug
container_aligned_compute_resources_count metric added to kubelet to report containers getting aligned compute resources
corev1.Binding deprecation message removed
kubeadm removes preflight check for existence of conntrack binary
e2e tests added for ClusterTrustBundle to prepare promotion to beta
Fixed issue in the kubelet that showed when writeable layers and read-only layers were at different paths within the same mount
Fine-grained kubelet API authorization checks added for kubelet /configz, /healthz and /pods API
CRI adds field to support CPU affinity on Windows
Refactor for node shutdown manager
Promotions
StructuredAuthorizationConfiguration to GA
ServiceAccountTokenJTI, ServiceAccountTokenPodNodeInfo and ServiceAccountTokenNodeBindingValidation to GA
AuthorizeNodeWithSelectors and AuthorizeWithSelectors to beta
RelaxedEnvironmentVariableValidation to beta
Deprecated
PostStartHookContext.StopCh removed
Version Updates
publishing-bot rules updated to Go 1.22.8
via Last Week in Kubernetes Development https://lwkd.info/
October 22, 2024 at 12:30PM
Rustls Outperforms OpenSSL and BoringSSL
ISRG has been investing heavily in the Rustls TLS library over the past few years. Our goal is to create a library that is both memory safe and a leader in performance.
Back in January of this year we published a post about the start of our performance journey. We've come a long way since then and we're excited to share an update on Rustls performance today.
What is Rustls? Rustls is a memory safe TLS implementation with a focus on performance.
Several Linux Kernel Driver Maintainers Removed Due To Their Association To Russia
Quietly merged into this week's Linux 6.12-rc4 kernel was a patch that removes a number of kernel maintainers from being noted in the official MAINTAINERS file that recognizes all of the driver and subsystem maintainers.
Initial explorations of Anthropic’s new Computer Use capability
Two big announcements from Anthropic today: a new Claude 3.5 Sonnet model and a new API mode that they are calling computer use. (They also pre-announced 3.5 Haiku, but that’s …
US FTC probing Deere over customers' 'right to repair' equipment
The U.S. Federal Trade Commission is probing farm equipment maker Deere over the company's repair policies, according to a filing made public on Thursday.
Anthropic's new AI model can control your PC | TechCrunch
Anthropic has released an updated version of its Claude 3.5 Sonnet model with a new Computer Use feature that can interact with apps on a PC.
OpenSSL 3.4 Series Release Notes
OpenSSL 3.4 Series Release Notes The major changes and known issues for the 3.4 branch of the OpenSSL toolkit are summarised below. The contents reflect the current state of the NEWS file inside the git repository.
More details can be found in the ChangeLog.
Major changes between OpenSSL 3.3 and OpenSSL 3.4.0 [22 Oct 2024] OpenSSL 3.4.0 is a feature release adding significant new functionality to OpenSSL.
This release incorporates the following potentially significant or incompatible changes:
AI's energy appetite has Taiwan reconsidering nuclear option
Premier indicates possible shift in post-Fukushima policy
Sneaky Ghostpulse malware loader hides inside PNG pixels
Miscreants combine it with an equally tricky piece of social engineering
US to crackdown on databrokers doing deals with 6 nations
Biden's Executive Order finally getting its day in the sun, soonish
octodns/octodns: Tools for managing DNS across multiple providers
octodns/octodns: Tools for managing DNS across multiple providers
DNS as code - Tools for managing DNS across multiple providers In the vein of infrastructure as code octoDNS provides a set of tools & patterns that make it…
October 23, 2024 at 07:26AM
via Instapaper
The Narrows Bridge: From Open Source to AI
The Narrows Bridge: From Open Source to AI
October 22, 2024 at 01:56PM
via Instapaper
When Kubernetes and Go don't work well together with Emin Laletović
When Kubernetes and Go don't work well together, with Emin Laletović
https://kube.fm/kubernetes-go-emin
Discover how a seemingly simple 502 error in Kubernetes can uncover complex interactions between Go and containerized environments.
Emin Laletović, a solution architect at Hybird Technologies, shares his experience debugging a production issue in which a specific API endpoint failed due to out-of-memory errors.
He walks through the systematic investigation process, from initial log checks to uncovering the root cause in Go's memory management within Kubernetes.
You will learn:
How Go's garbage collector interacts with Kubernetes resource limits, potentially leading to unexpected OOMKilled errors.
The importance of the GOMEMLIMIT environment variable in Go 1.19+ for managing memory usage in containerized environments.
Debugging techniques for memory-related issues in Kubernetes, including GODEBUG for garbage collector tracing.
Considerations for optimizing Go applications in Kubernetes, balancing performance and resource utilization.
Sponsor
This episode is sponsored by StormForge – Double your Kubernetes resource utilization and unburden developers from sizing complexity with the first HPA-compatible vertical pod rightsizing solution. Try it for free.
More info
Find all the links and info for this episode here: https://kube.fm/kubernetes-go-emin
Interested in sponsoring an episode? Learn more.
via KubeFM https://kube.fm
October 22, 2024 at 06:00AM
Phucking with Phishers
Phishers tried to steal my Instagram credentials. They also forget to properly secure their database…
Chris's Wiki :: blog/programming/GoForcingModuleUpdates
Netflix hikes prices in some countries as growth fades
Netflix announces some price hikes, as growth from password sharing crackdown starts to fade.
DevOps Toolkit - Day 2 Operations Solved for Internal Developer Platforms with Kubernetes and Crossplane - https://www.youtube.com/watch?v=KLHNrLWmBfw
Day 2 Operations Solved for Internal Developer Platforms with Kubernetes and Crossplane
In this video we tackle a major challenge in Internal Developer Platforms built on top of Kubernetes: enabling developers to not only manage their applications and infrastructure but also to observe and troubleshoot them effectively. We demonstrate how to propagate meaningful status information to top-level resources using Crossplane and the Status Transformer Function. Watch as we solve real-world issues, making day 2 operations easier for developers without overwhelming them with low-level details. Learn how to create custom resource definitions (CRDs) and controllers that simplify the developer experience.
IDP #Kubernetes #Crossplane #DeveloperPlatform
Consider joining the channel: https://www.youtube.com/c/devopstoolkit/join
▬▬▬▬▬▬ 🔗 Additional Info 🔗 ▬▬▬▬▬▬ ➡ Transcript and commands: https://devopstoolkit.live/internal-developer-platforms/internal-developer-platform-day-2-operations-solved-with-kubernetes-and-crossplane 🔗 Crossplane: https://crossplane.io 🎬 Status Transformer Crossplane Function: https://github.com/crossplane-contrib/function-status-transformer 🎬 Kubernetes Events Are Broken (If You Are Building a Developer Portal): https://youtu.be/xAl3TAfFE_M
▬▬▬▬▬▬ 💰 Sponsorships 💰 ▬▬▬▬▬▬ If you are interested in sponsoring this channel, please visit https://devopstoolkit.live/sponsor for more information. Alternatively, feel free to contact me over Twitter or LinkedIn (see below).
▬▬▬▬▬▬ 👋 Contact me 👋 ▬▬▬▬▬▬ ➡ Twitter: https://twitter.com/vfarcic ➡ LinkedIn: https://www.linkedin.com/in/viktorfarcic/
▬▬▬▬▬▬ 🚀 Other Channels 🚀 ▬▬▬▬▬▬ 🎤 Podcast: https://www.devopsparadox.com/ 💬 Live streams: https://www.youtube.com/c/DevOpsParadox
▬▬▬▬▬▬ ⏱ Timecodes ⏱ ▬▬▬▬▬▬ 00:00 Introduction 02:!3 The Problem In Kubernetes 08:25 The Problem With Custom Resources 12:16 Status Propagation 18:31 How It's Done
via YouTube https://www.youtube.com/watch?v=KLHNrLWmBfw
Introducing Netflixs TimeSeries Data Abstraction Layer
Introducing Netflix’s TimeSeries Data Abstraction Layer
Written by Netflix Technology Blog 427K Followers ·Editor for Netflix TechBlog Learn more about how Netflix designs, builds, and operates our systems and…
October 21, 2024 at 09:26AM
via Instapaper
US charges Indian official over new Sikh assassination plot | Semafor
The charge directly implicates New Delhi in the alleged attempted murder of a Sikh separatist in New York.
Daily briefing: Why you need so many COVID boosters
Antibody insights could lead to longer-lasting vaccines. Plus, scientists have made a new type of insulin.
Products on average retain 30% of customers after 3 months: Product benchmark findings
User retention is an important metric for determining a product's success. Our recent benchmarking report has shed some light on patterns in user retention across various industries and company sizes. Let’s dive right into what our data says.
Whitney Lee: From Wedding Photographer to Cloud-Native DevRel
This episode is from the reboot of Software Defined Interviews. Whitney Lee joins Coté to discuss her varied career path, from artist and wedding photographer to her current role in DevRel within the cloud-native world. They kick off this revamped series with an engaging conversation. Expect new interviews every two weeks! Subscribe at softwaredefinedinterviews.com.
Qualcomm cancels Windows dev kit PC for “comprehensively” failing to meet standards
Snapdragon Dev Kit was supposed to ship in June but was repeatedly delayed.
DevOps Toolkit - Cloud Cost - Feat. OpenCost StormForge and CAST AI (You Choose! Ch. 04 Ep. 07) - https://www.youtube.com/watch?v=5P_6vlmjQm4
Cloud Cost - Feat. OpenCost, StormForge, and CAST AI (You Choose!, Ch. 04, Ep. 07)
Cloud Cost - Choose Your Own Adventure: The Observability Odyssey
In this episode, we'll go through cloud cost and resource optimization. The contestants are OpenCost, StormForge, and CAST AI.
Vote for your choice of a tool for signing artifacts at https://cloud-native.slack.com/archives/C05M2NFNVRN. If you have not already joined CNCF Slack, you can do so from https://slack.cncf.io.
This and all other episodes are available at https://www.youtube.com/playlist?list=PLyicRj904Z9-FzCPvGpVHgRQVYJpVmx3Z.
More information about the "Choose Your Own Adventure" project including the source code and links to all the videos can be found at https://github.com/vfarcic/cncf-demo.
٩( ᐛ )و Whitney's YouTube Channel → https://www.youtube.com/@wiggitywhitney
opencost #stormforge #castai
▬▬▬▬▬▬ 🔗 Additional Info 🔗 ▬▬▬▬▬▬ 🔗 Progressive Delivery: https://github.com/vfarcic/cncf-demo/tree/main/manuscript/cost/README.md
via YouTube https://www.youtube.com/watch?v=5P_6vlmjQm4