Tootfinder

Few people know that #Uwubernetes is actually real.
It is the name if the #Kubernetes 1.30 release.
https://

Understanding #Kubernetes: part 62 – Image Volume
https://dev.to/aurelievache/understanding-kubernetes-part-62-image-volume-59hf

from my link log —
DNS problems with conntrack and Kubernetes.
https://blog.codacy.com/dns-hell-in-kubernetes/
saved 2020-08-14 https://

DNS Problems Scaling With Kubernetes: Read More
DNS problems with Kubernetes, particularly intermittent delays, have been challenging moving our services to the Kubernetes platform for scaling.

Sydney-based AI data center operator IREN agrees to acquire Mirantis, which offers Kubernetes management and cloud infrastructure software, for $625M in stock (Shane Snider/Data Center Knowledge)
https://www.datacenterknowledge.com/infras

IREN Buys Mirantis for $625M to Unlock AI Compute Utilization
The $625 million deal adds Kubernetes and enterprise ops to help turn deployed GPUs into usable, revenue-generating AI infrastructure.

Bike to work, low-intensity run at lunch, bike from work, and publish the Java Geek Weekly.
What a cool day 😊
https://blog.frankel.ch/java-geek-weekly/137/

just had my great deal of fun with #Kubernetes patch operations 🫠

cooool, Hashi Nomad 2.0.4 broke half of our cluster in a fucking point release again 🥲
i'm really gonna have to learn kubernetes don't i
https://github.com/hashicorp/nomad/issues/28224

Issue · hashicorp/nomad
Nomad is an easy-to-use, flexible, and performant workload orchestrator that can deploy a mix of microservice, batch, containerized, and non-containerized applications. Nomad is easy to operate and...

from my link log —
Kubernetes liveness probes are dangerous.
https://srcco.de/posts/kubernetes-liveness-probes-are-dangerous.html
saved 2019-10-08

Liveness Probes are Dangerous
Kubernetes livenessProbe can be dangerous. I recommend to avoid them unless you have a clear use case and understand the consequences. This post looks at both Liveness and Readiness Probes and describ

"Root Cause:
A dog named Kubernetes ate a YubiKey."
This a fun read.
"The legitimate maintainer has won €2.3 million in the EuroMillions and is researching goat farming in Portugal."
#infosec #incident

Incident Report: CVE-2024-YIKES
A series of unfortunate events.

The most severe Linux threat to surface in years catches the world flat-footed:
CopyFail threatens multi-tenant servers, CI/CD work flows, Kubernetes containers, and more.
Publicly released exploit code for an effectively unpatched vulnerability that gives root access to virtually all releases of Linux is setting off alarm bells as defenders scramble to ward off severe compromises inside data centers and on personal devices.
🌐

The most severe Linux threat to surface in years catches the world flat-footed
CopyFail threatens multi-tenant servers, CI/CD work flows, Kubernetes containers, and more.

I have created a handful of useful abstractions for #testing #Kubernetes controllers in #Rust 🦀.
They needed some iteration to work out, and I am sure they are not perfect just yet, but they do al…

🧩 Rich plugin ecosystem: hundreds of plugins run tasks anywhere — local, SSH, #Docker, #Kubernetes or serverless task runners — and code in any language including #Python, Node.js, R, Go and S…

Bei #Kufer Software GmbH suchen wir jemanden der DevOps und Qualitätssicherung wirklich owned - nicht nebenbei, sondern als Kernaufgabe.
Wir sitzen in Mühldorf am Inn. Kein Großstadttrubel, kein Mietpreis der das Gehalt auffrisst - dafür ein Job der wirklich was hermacht. Coole Arbeit gibt's nicht nur in der City.

Tired: side effects
Wired: sigh effects
... between Rustls shenanigans after factoring out code and non-explanatory 404 errors from #Kubernetes with high-level integration tests. 🥹

🧱 Defense in depth across four policy domains: filesystem (blocks reads/writes outside allowed paths), network (hot-reloadable), process (blocks privilege escalation & dangerous syscalls), and inference (reroutes model API calls)
⚙️ Under the hood it runs a #K3s #Kubernetes cluster in…

Researchers detail CopyFail, a now-patched Linux vulnerability that lets unprivileged users gain admin access, as many distributions have yet to add fixes (Dan Goodin/Ars Technica)
https://arstechnica.com/security/2026/04/as-the…

The most severe Linux threat to surface in years catches the world flat-footed
CopyFail threatens multi-tenant servers, CI/CD work flows, Kubernetes containers, and more.

i will not use kubernetes ffs 😭

☸️ Kubernetes — k8s.verb / resource / namespace / name. Deny delete secrets, allow get pods only in dev.
🌐 HTTPS — match on http.method, path, headers & body_json. The body is parsed once for JSON endpoints, so you match on payload fields, not just shape.
🙋 Human-in-the-loop approvals for risky actions — defer kubectl apply -f production to a #Slack approval before the request le…

Researchers find several packages in the @redhat-cloud-services npm namespace shipped malware targeting credentials for GitHub Actions, AWS, GCP, and others (Rohan Prabhu/Step Security Blog)
https://www.stepsecurity.io/blog/multiple-redhat-cloud-servi…

Multiple redhat-cloud-services npm Packages compromised - StepSecurity
Several packages in the @redhat-cloud-services npm scope were found to carry malicious payloads that fire via a preinstall hook on every npm install. The affected versions span multiple packages across the RedHat Cloud Services frontend ecosystem. The payload is a sophisticated multi-stage credential harvester that targets GitHub Actions secrets, AWS, GCP, Azure, Kubernetes, HashiCorp Vault, npm tokens, and CircleCI tokens

Coincidentally, all these 5 words starts with an F:
- finalizer
- field manager
- footgun
- fuck-up
- facepalm
I'm learning more and more about #Kubernetes lol
(not mocking anything here, I just gotta chuckle a bit)

🐳 Deploy anywhere: Docker sidecars, Systemd services, Kubernetes StatefulSets or a Windows service.
🛠️ Written in Go, Apache-2.0 licensed, currently at v0.5.x and actively maintained.
https://github.com/benbjohnson/litestream

RE: https://mastodon.social/@CyReVolt/116509408768705567
... which led me to filing https://

3am on a public holiday is a good time for posting bug reproducers...
https://github.com/kube-rs/envtest/issues/58

listing resources often gets 429 "storage is (re)initializing" errors in envtest · Issue #58 · kube-rs/envtest
Just for tracking/understading, here are the rough details now; I'll add a reproducer later. I have a controller with a reconciler operating on CRDs from Envoy Gateway and Kubernetes Gateway. Rust ...

Calling "increasingly evaluating migration paths" what's otherwise been a necessary migration due to deprecation is a funny perspective. 😂
https://www.cncf.io/blog/2026/05/25/zero-downtime-migration-from-ingress-nginx-to-envoy-ga…

Zero-Downtime migration from ingress NGINX to Envoy Gateway
Teams running Ingress NGINX in production are increasingly evaluating migration paths as Kubernetes networking evolves toward Gateway API. For many organizations, the challenge is not just selecting a…