DevOps & SRE notes

Public

View Channel

Can't Join? @devops_sre_notes

12.4k Members

Updated: May 13, 2026 at 9:40 AM

DevOps & SRE notes

Helpful articles and tools for DevOps&SRE WhatsApp: https://whatsapp.com/channel/0029Vb79nmmHVvTUnc4tfp2F For paid consultation (RU/EN), contact: @tutunak All ways to support https://telegra.ph/How-support-the-channel-02-19

Join @devops_sre_notes for exclusive paid and contact content and discussions in 1

Ranking

Global Ranking

#456

Language Ranking

#45

Category Ranking

#23

-1

Participant Growth (Last 9 Days)

Total: 12.4K

24h growth: +0 0%

Latest Posts

DevOps & SRE notes

May 26, 2026, 06:32 AM

Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀

https://github.com/madhuakula/kubernetes-goat

2,220

DevOps & SRE notes

May 26, 2026, 06:32 AM

⚰️ Minio was archived on Apr 25, 2026
https://github.com/minio/minio

2,140

DevOps & SRE notes

May 26, 2026, 06:32 AM

⚰️ Minio was archived on Apr 25, 2026 https://github.com/minio/minio

2,130

DevOps & SRE notes

May 26, 2026, 06:32 AM

Any user with Argo CD application get permissions can extract real Kubernetes Secret values including service account tokens, TLS certificates, database credentials, and API keys. On Applications where IncludeMutationWebhook=true is already set, exploitation requires only read-only Argo CD access.

https://github.com/argoproj/argo-cd/security/advisories/GHSA-3v3m-wc6v-x4x3

2,140

DevOps & SRE notes

May 26, 2026, 06:32 AM

The proliferation of AI coding models has drastically lowered the barrier to discovering software vulnerabilities, resulting in a massive influx of automated, low-quality, and false-positive vulnerability reports. This volume is overwhelming open-source maintainers and security teams. The article outlines how the industry must adapt, offering specific strategies for companies, maintainers, and external bug hunters to manage triage, improve report quality, and prevent ecosystem burnout.

https://www.cncf.io/blog/2026/04/16/the-ai-driven-shift-in-vulnerability-discovery-what-maintainers-and-bug-finders-need-to-know/

1,850

DevOps & SRE notes

May 26, 2026, 06:32 AM

Uber engineered native gRPC endpoints directly into OpenSearch to eliminate inefficient REST/JSON translation layers within their architecture. Their automated pipeline for syncing JSON APIs with Protobuf schemas, their internal integration strategy, and the resulting performance gains in production environments for high-throughput ingestion and vector search workloads.

- Uber implemented gRPC as an OpenSearch module
- To prevent divergence between REST and gRPC, Uber built a three-stage automated pipeline
- Removing the JSON-to-Protobuf translation layer reduced p99 index write latency by 60% for Uber’s M3 metrics system and decreased batch indexing job runtimes by 20-35%.
- Large vector searches, which serialize poorly in JSON, saw a 53% reduction in p50 latency and a 43% reduction in p95 latency.
- Combining gRPC with binary document formats like SMILE proved highly effective, executing 30% faster than REST JSON and 45% faster than gRPC JSON.

https://www.uber.com/us/en/blog/high-performance-grpc/

1,980

DevOps & SRE notes

May 26, 2026, 06:32 AM

It's time to update your kernel

An unprivileged local user can write 4 controlled bytes into the page cache of any readable file on a Linux system, and use that to gain root.

https://copy.fail/

2,060

DevOps & SRE notes

May 26, 2026, 06:32 AM

Red Hat critiques a recent VMware study that claimed VMware Cloud Foundation (VCF) with vSphere Kubernetes Service (VKS) offers a "5.6x pod density" advantage over Red Hat OpenShift. The benchmark as an architectural mismatch rather than an accurate performance evaluation, noting that VMware compared 300 overcommitted virtual worker nodes against 4 bare-metal OpenShift nodes.

https://www.redhat.com/en/blog/precision-over-perception-why-architecture-matters-benchmarking

2,150

DevOps & SRE notes

May 26, 2026, 06:32 AM

Microsoft is so jealous of Claude Code's success that they decided to include a "co-author" credit for GitHub Copilot, even if Copilot has done nothing.

https://github.com/orgs/community/discussions/194075

2,010

DevOps & SRE notes

May 26, 2026, 06:32 AM

The article addresses the "broken" scale of AI model distribution, where transferring massive models (like a 130GB DeepSeek-V3) to hundreds of GPU nodes simultaneously bottlenecks network bandwidth and hits rate limits on hubs like Hugging Face. The solution is the CNCF project Dragonfly, which uses a Peer-to-Peer (P2P) architecture to ensure a model is fetched from the origin only once. It details new native protocol support for hf:// and modelscope://, allowing dfget (Dragonfly's download tool) to natively understand these hubs, reducing origin traffic by up to 99.5% and enabling wire-speed distribution across clusters.

https://www.cncf.io/blog/2026/04/06/peer-to-peer-acceleration-for-ai-model-distribution-with-dragonfly/

2,190

DevOps & SRE notes

May 11, 2026, 01:53 AM

K8s 1.36 will be released soon, and it’s a good time to check which new alpha features will be available in the new release.

https://palark.com/blog/kubernetes-1-36-release-features/

2,440

DevOps & SRE notes

May 11, 2026, 01:53 AM

The article introduces GKE Active Buffer, a native feature designed to solve the persistent problem of scale-out latency in Kubernetes. Traditionally, cluster autoscaling suffers from delays while provisioning new VMs and pulling container images. To solve this, admins often used "balloon pods" (dummy pods that hold space), which are "hacky," complex to manage, and lack native integration. GKE Active Buffer replaces these with a declarative CapacityBuffer API, providing a standardized, portable way to maintain "warm" capacity. This allows business-critical workloads—such as AI inference, retail flash sales, and gaming—to land on pre-provisioned capacity nearly instantaneously.

https://cloud.google.com/blog/products/containers-kubernetes/new-gke-active-buffer-minimizes-scale-out-latency

2,320

DevOps & SRE notes

May 11, 2026, 01:53 AM

Following the announced retirement of the ingress-nginx project, the CNCF migrated its internal services cluster to Envoy Gateway (an implementation of the Gateway API). Rather than a generic tutorial, the post details their specific architectural decisions, such as utilizing a shared Gateway object across multiple HTTPRoutes to optimize cloud load balancer costs and operational simplicity. It also covers the migration strategies they used for maintaining the same IP address, handling legacy certificates, and conducting "Day 2" operations with cert-manager.

https://www.cncf.io/blog/2026/04/13/ingress-nginx-to-envoy-gateway-migration-on-cncf-internal-services-cluster/

2,240

DevOps & SRE notes

May 11, 2026, 01:53 AM

📷 Photo

🚀 Join our https://wearecommunity.io/events/aws-cloud-dev-2026q2 and gain practical experience working with various AWS services and technologies during an intensive 2-month program!

🎯 Become familiar with over 15 AWS services and confidently apply your skills in real-world projects by the end of the course.

▪️Start date: April 13, 2026
▪️Free / Online
▪️In English

COURSE HIGHLIGHTS

☁️ Build a single-page application (SPA) using AWS S3 and CloudFront
☁️ Develop serverless APIs with AWS API Gateway and Lambda
☁️ Integrate with databases and S3
☁️ Master asynchronous microservices communication using SQS and SNS
☁️ Explore authorization with Lambda Authorizers and Cognito
☁️ Learn containerization with Docker and Elastic Beanstalk
☁️ Implement backend-for-frontend using API Gateway

Find out more details and enroll:
https://wearecommunity.io/events/aws-cloud-dev-2026q2

3,380

DevOps & SRE notes

May 11, 2026, 01:53 AM

In the modern world of services, the teams developing and working with them need to understand the concept of rate limiting. Being able to design these systems is crucial to avoid service denial and provide higher uptime. It is an important part not only for externally available services, but also for internal ones.

https://bytebytego.com/courses/system-design-interview/design-a-rate-limiter

3,340

DevOps & SRE notes

May 11, 2026, 01:53 AM

Have you switched over to IPv6 yet? It’s time to start getting ready for IPv8.

https://www.ietf.org/archive/id/draft-thain-ipv8-00.html

2,650

DevOps & SRE notes

May 11, 2026, 01:53 AM

A realistic exam simulator for CKAD, CKA, and CKS featuring timed sessions and hands-on labs with pre-configured clusters.

https://github.com/sailor-sh/CK-X

2,750

DevOps & SRE notes

Apr 2, 2026, 07:05 AM

A utility for generating Mermaid diagrams from Terraform configurations
https://github.com/RoseSecurity/Terramaid

2,740

DevOps & SRE notes

Apr 2, 2026, 07:05 AM

Last week, I switched the default search in zsh (Ctrl+R) to fzf, and it’s working out pretty well.

https://github.com/junegunn/fzf

2,700

DevOps & SRE notes

Apr 2, 2026, 07:05 AM

Although Ingress-Nginx is still maintained and receiving security updates (e.g. https://github.com/kubernetes/ingress-nginx/releases/tag/controller-v1.15.0), it's time to start migrating to the Gateway API. https://github.com/kubernetes-sigs/ingress2gateway can help with that.

2,260

DevOps & SRE notes

Apr 2, 2026, 07:05 AM

K8sQuest — A local, hands-on Kubernetes learning game with real-world troubleshooting challenges. Practice Pods, Deployments, Services, networking, storage, and debugging using kubectl on a local cluster (kind/k3d). No cloud required.

https://github.com/Manoj-engineer/k8squest

2,940

DevOps & SRE notes

Apr 2, 2026, 07:05 AM

A good starting point for finding a Helm chart that is not officially provided by the vendor is the Community Helm Chart Repository.

https://github.com/trueforge-org/truecharts

2,940

DevOps & SRE notes

Apr 2, 2026, 07:05 AM

As announced November 2025, Kubernetes will retire Ingress-NGINX in March 2026. Despite its widespread usage, Ingress-NGINX is full of surprising defaults and side effects that are probably present in your cluster today. This blog highlights these behaviors so that you can migrate away safely and make a conscious decision about which behaviors to keep. This post also compares Ingress-NGINX with Gateway API and shows you how to preserve Ingress-NGINX behavior in Gateway API. The recurring risk pattern in every section is the same: a seemingly correct translation can still cause outages if it does not consider Ingress-NGINX's quirks.

https://kubernetes.io/blog/2026/02/27/ingress-nginx-before-you-migrate/

3,280

DevOps & SRE notes

Apr 2, 2026, 07:05 AM

📷 Photo

AWS Cost Optimization Game Day — a hands-on, interactive session focused on improving cloud efficiency and reducing costs in real-world scenarios.

You’ll collaborate, analyze architectures, uncover cost-saving opportunities, and compete in a fun, gamified environment.

Ready to optimize and win?
Let’s play smart with AWS!

When: Wednesday, Mar 11 · 4:30 PM to 7:30 PM GMT+2
Language: English

https://forms.gle/aV4YwBRrLmCUVdnZA

2,830

DevOps & SRE notes

Apr 2, 2026, 07:05 AM

Understanding how many pods your infrastructure can actually support is crucial for reliability. This overview breaks down the nuances of Kubernetes cluster capacity and resource allocation.
https://dnastacio.medium.com/kubernetes-cluster-capacity-d96d0d82b380

2,980

DevOps & SRE notes

Apr 2, 2026, 07:05 AM

The original article is behind a paywall. TL;DR Amazon service was taken down by AI coding bot Amazon’s cloud unit has suffered at least two outages due to errors involving its own AI tools, leading some employees to raise doubts about the US tech giant’s…

2,500

DevOps & SRE notes

Apr 2, 2026, 07:05 AM

Ingress Nginx will be retired, time to choose a gateway api. Gateway API Benchmarks provides a common set of tests to evaluate a Gateway API implementation. https://github.com/howardjohn/gateway-api-bench

2,540

Showing 27 of 27 posts

No more posts

Loading posts...

Rating

User Reviews (0)

No reviews yet. Be the first to share your experience!

Loading reviews...

Related Telegram Channels

Loading recommended channels...

DevOps & SRE notes

DevOps & SRE notes

Ranking

Participant Growth (Last 9 Days)

Latest Posts

Rating

User Reviews (0)

Related Telegram Channels

Shroomy

Genuine deals | Shopping offers & deals

Trend Micro MCX

[Deals India]™ hot loot offers Deals amazon flipkart

Planet Sandbox

Amazon Offers Flipkart Deals Hub

Store TheStarkArmy of Mr Neophyte | Mr_Neophyte Shop

contact lenses🍓🍓

Related Telegram Channels

Shroomy

Genuine deals | Shopping offers & deals

Trend Micro MCX

[Deals India]™ hot loot offers Deals amazon flipkart

Planet Sandbox

Amazon Offers Flipkart Deals Hub

Store TheStarkArmy of Mr Neophyte | Mr_Neophyte Shop

contact lenses🍓🍓

User Reviews (0)

Latest Posts