Allow loading remote contents and showing images to get the best out of this email.FAUN.dev's DevOps Weekly Newsletter
 
🔗 View in your browser.   |  ✍️ Publish on FAUN.dev   |  🦄 Become a sponsor
 
Allow loading remote contents and showing images to get the best out of this email.
DevOpsLinks
 
#DevOps #SRE #PlatformEngineering
 
 
📝 A Few Words
 
 
I'm releasing a complete guide to building production-grade AI agents with MCP - and you can get it early for $10.

I've been building Practical MCP with FastMCP & LangChain for the past few weeks, and it's nearly ready (almost 80% of it).

It covers everything from first principles to production deployment — servers, clients, agent frameworks, RAG, session & state management, middleware, scaling, and 2 full capstone projects backed by a real databases and use cases.

This is not a collection of isolated examples but a complete, opinionated path from understanding how MCP works to shipping something real.

Before the official release, I'm opening it up at $10 instead of $30, that's the price for people who trust the work before it's done.

If you've been trying to figure out how to build AI agents that actually do things beyond generating text, this is for you.

👉 Grab the pre-sale here.

You'll be notified by email once the course is released.

This is a straightforward deal for early supporters, the price goes up at launch!

Happy hacking,
Aymen, Founder of FAUN.dev()
 
 
🔍 Inside this Issue
 
 
One tiny assumption can quietly turn an API key into a credential, while other teams are doing the opposite: dragging messy reality into the open with GitOps discipline, brute-force observability, and unapologetic performance work. If you like stories where defaults bite, dashboards lie, and optimizations actually move the needle, linger on the details.

🔑 Google API Keys Weren't Secrets. But then Gemini Changed the Rules
🧭 How to scale GitOps in the enterprise: From single cluster to fleet management
🗃️ LLMs Are Good at SQL. We Gave Ours Terabytes of CI Logs.
🐍 Rendering 100M pixels a second over ssh ·
💾 The real cost of random I/O

Take the ideas, dodge the footguns, ship the next thing.

Until next time!
FAUN.dev() Team
 
 
⭐ Patrons
 
spacelift.io spacelift.io
 
Your Terraform Plan Passed. Your App Just Broke. Here's Why. (Live Virtual Event, March 12)
 
 
At scale, IaC state management isn't a storage problem. It's a people and process problem. Join us live to learn how platform teams map dependencies, govern multi-team workflows, & stop mystery outages before they start. You’ll walk away with a practical checklist for scaling IaC.

Register now for this free virtual event on March 12 @ 12PM ET.
 
 
👉 Spread the word and help developers find you by promoting your projects on FAUN. Get in touch for more information.
 
ℹ️ News, Updates & Announcements
 
faun.dev faun.dev
 
OpenAI Hires OpenClaw Creator Peter Steinberger; Project Moves to Independent Foundation
 
 
Peter Steinberger joins OpenAI to push AI agent accessibility. Steinberger brings OpenClaw - an open-source autonomous agent built on LLMs and messaging integrations. OpenClaw moves into a foundation to stay open and community-driven. OpenAI supplies technical and financial backing and direct model access.
 
 
👉 Enjoyed this?Read more news on FAUN.dev/news
 
⭐ Sponsors
 
packt.com packt.com
 
Build & Scale AI Workloads on Kubernetes
 
 
If you're working with Kubernetes and exploring AI/ML in real-world environments, this 5-hour live workshop focuses on the practical side of running AI workloads in production.

🎟 Early Bird Offer – 50% Off (No Code Needed) : Build & Scale AI Workloads on Kubernetes Tickets, Sat, Mar 28, 2026 at 7:00 PM | Eventbrite
 
 
👉 Spread the word and help developers find you by promoting your projects on FAUN. Get in touch for more information.
 
🔗 Stories, Tutorials & Articles
 
eieio.games eieio.games
 
Rendering 100M pixels a second over ssh
 
 
A massively multiplayer snake game accessible over ssh, capable of handling thousands of concurrent players and rendering over a hundred million pixels a second. The game utilizes bubbletea for rendering frames and custom techniques to reduce bandwidth usage to around 2.5 KB/sec. Performance improvements including pre-allocating resources and optimizing string handling allowed the game to support up to 2,500 concurrent users.
 
 
vondra.me vondra.me
 
The real cost of random I/O
 
 
The random_page_cost was introduced ~25 years ago, and its default value has remained at 4.0 since then. Recent experiments suggest that the actual cost of reading a random page may be significantly higher than the default value, especially on SSDs. Lowering the random_page_cost may not always be the best solution, as there are various factors to consider in optimizing query planning.
 
 
trufflesecurity.com trufflesecurity.com
 
Google API Keys Weren't Secrets. But then Gemini Changed the Rules
 
 
A report reveals Google Cloud's API keys use the same format for public IDs and secret auth. That overlap lets public keys reach the Gemini API.

New keys default to Unrestricted. Existing keys can be retroactively granted Gemini access. Google will add scoped defaults, block leaked keys, and notify affected projects.
 
 
platformengineering.org platformengineering.org
 
How to scale GitOps in the enterprise: From single cluster to fleet management
 
 
Implementing GitOps at scale can lead to challenges such as config sprawl, Git repository bottlenecks, and cultural resistance. State store strategies like OCI registries, ConfigHub, and multi-cluster topology patterns are key to overcoming these obstacles. Secrets management through Sealed Secrets and External Secrets Operator, policy enforcement with Kyverno, multi-tenancy via Argo CD Projects, and repository organization with trunk-based development and progressive delivery strategies are vital components of scaling GitOps. Choosing the right tool, whether it's Argo CD, Flux CD, or Sveltos, and building a central catalog for GitOps manifests are essential for managing large-scale GitOps deployments efficiently.
 
 
mendral.com mendral.com
 
LLMs Are Good at SQL. We Gave Ours Terabytes of CI Logs.
 
 
Mendral's agent runs ad‑hoc SQL against compressed ClickHouse logs. It traces flaky tests across months and scans up to 4.3B rows per investigation.

They denormalize 48 metadata columns per log line. They compress 5.31 TiB down to ~154 GiB (~21 bytes/line) — a 35:1 ratio. That turns arbitrary filters into column predicates.

The pipeline uses materialized views, bloom and ngram indexes, and Inngest for durable execution. GitHub API throttling (~3 req/s, 4k spare/hr) keeps P95 ingest under 5 minutes.

System shift: Granting LLM agents direct SQL access to denormalized, columnar CI logs moves debugging out of fixed tool APIs and into ad‑hoc, queryable data stores.
 
 

👉 Got something to share? Create your FAUN Page and start publishing your blog posts, tools, and updates. Grow your audience, and get discovered by the developer community.

 
⭐ Supporters
 
faun.dev faun.dev
 
Three Events. One Week. The Heart of SoCal Tech.
 
 
This March, Pasadena brings together three practitioner-driven events - supported by FAUN.dev() as media partner:


Built by practitioners, for practitioners. If you're near Southern California in early March, plan around it.
 
 
👉 Spread the word and help developers find you by promoting your projects on FAUN. Get in touch for more information.
 
🛍️ Swag, Deals, And Offers
 
bytevibe.co bytevibe.co
 
Linux Is Sexy Long Sleeve Tee
 
 
For the developer who speaks fluent terminal.

You don't just use Linux. You live it. And now you can wear it. Only real ones will get it. Everyone else will just be confused - and that's exactly the point.

Get it here!
 
 

❤️ Get a 10% exclusive discount on all our swag (with free shipping) when you use the code "THANKSFAUN".

 
⚙️ Tools, Apps & Software
 
github.com github.com
 
LukasNiessen/terrashark
 
 
Terraform Skill for Claude Code and Codex. LLMs hallucinate a lot with Terraform - TerraShark fixes this. It eliminates hallucinations, is designed for modular and secure code and grounds your IaC in the official Hashicorp Terraform best practices.
 
 
github.com github.com
 
zackerydev/theclawmachine
 
 
Run OpenClaw (and friends!) on Kubernetes, with container and network isolation, automated backups and more.
 
 
github.com github.com
 
Higangssh/homebutler
 
 
Manage your homelab from chat. Single binary, zero dependencies.
 
 
github.com github.com
 
zw008/VMware-AIops
 
 
VMware vCenter/ESXi AI-powered monitoring and operations. Two skills: vmware-monitor (read-only, safe) and vmware-aiops (full operations) | Claude Code Skill
 
 
github.com github.com
 
abhigyanpatwari/GitNexus: GitNexus
 
 
The Zero-Server Code Intelligence Engine - GitNexus is a client-side knowledge graph creator that runs entirely in your browser. Drop in a repo or ZIP file, and get an interactive knowledge graph wit a built in Graph RAG Agent. Perfect for code exploration
 
 
github.com github.com
 
zackerydev/theclawmachine
 
 
Run OpenClaw (and friends!) on Kubernetes, with container and network isolation, automated backups and more.
 
 
github.com github.com
 
Higangssh/homebutler
 
 
Manage your homelab from chat. Single binary, zero dependencies.
 
 

👉 Spread the word and help developers find and follow your Open Source project by promoting it on FAUN. Get in touch for more information.

 
🤔 Did you know?
 
 
Did you know that Kubernetes can silently evict your pods even when the node is not under pressure, because the kubelet enforces eviction thresholds using the nodefs and imagefs partitions separately? If your container logs or writable layers land on the partition you are not watching, you can see Evicted pods while CPU and memory graphs look perfectly fine. The giveaway is kubectl describe pod showing Reason: Evicted with messages like The node was low on resource: ephemeral-storage, and the fix is often moving logs off the node filesystem or setting realistic ephemeral-storage requests/limits instead of only tuning CPU and RAM. This bites seasoned teams because node disk is treated like "infinite" until kubelet starts acting like an SRE.
 
 
🤖 Once, SenseiOne Said
 
 
"Every reliability layer you add in the cloud also adds another failure mode you don't own, but will still get paged for. SRE is learning which promises to automate and which to keep painfully manual."
- SenseiOne
 

(*) SenseiOne is FAUN.dev’s work-in-progress AI agent

 
⚡Growth Notes
 
 
Pipeline execution time is almost never treated as a production metric until engineers start merging less frequently to avoid waiting, at which point the feedback loop that makes small, safe changes possible has already quietly collapsed. A CI pipeline that takes 40 minutes isn't slow infrastructure, it's a behavioral tax that accumulates in batch sizes, integration risk, and deploys that feel like events rather than routine.
 
Each week, we share a practical move to grow faster and work smarter
 
👤 This Week's Human
 
 
This week, we're highlighting ChandraKumar R Pillai, an AI Advisor, Technology Speaker, and Enterprise Architect in Brussels who distills the EU AI Act and fast moving tooling into concrete checklists and architecture decisions. With 114K+ followers and 50K+ AI Daily Nutshell readers, he draws on 20+ years in enterprise architecture, cloud, and automation to make AI adoption practical for European teams.
 
💡 Engage with FAUN.dev on LinkedIn — like, comment on, or share any of our posts on LinkedIn — you might be our next “This Week’s Human”!
 
😂 Meme of the week
 
 
 
 
❤️ Thanks for reading
 
 
👋 Keep in touch and follow us on social media:
- 💼LinkedIn
- 📝Medium
- 🐦Twitter
- 👥Facebook
- 📰Reddit
- 📸Instagram

👌 Was this newsletter helpful?
We'd really appreciate it if you could forward it to your friends!

🙏 Never miss an issue!
To receive our future emails in your inbox, don't forget to add community@faun.dev to your contacts.

🤩 Want to sponsor our newsletter?
Reach out to us at sponsors@faun.dev and we'll get back to you as soon as possible.
 

DevOpsLinks #518: Google API Keys Weren't Secrets. But then Gemini Changed the Rules
Legend: ✅ = Editor's Choice / ♻️ = Old but Gold / ⭐ = Promoted / 🔰 = Beginner Friendly

You received this email because you are subscribed to FAUN.dev.
We (🐾) help developers (👣) learn and grow by keeping them up with what matters.

You can manage your subscription options here (recommended) or use the old way here (legacy). If you have any problem, read this or reply to this email.