Allow loading remote contents and showing images to get the best out of this email.DevOps Weekly Newsletter, DevOpsLinks, a FAUN Newsletter.
 
🔗 View in your browser.   |  ✍️ Publish on FAUN   |  🦄 Become a sponsor
 
Allow loading remote contents and showing images to get the best out of this email.
DevOpsLinks
 
Curated DevOps news, tutorials, tools and more!
 
 
 
 
SSL certs are getting shorter, AI comms are getting smarter, and Kubernetes still finds new ways to surprise us. From swap memory secrets to a Terragrunt glow-up, this week is full of deep cuts and sharp upgrades.

🔐 SSL/TLS certificates will max out at 47 days by 2029
🛡️ Google’s Sec-Gemini v1: smarter cybersecurity through AI
🧰 Terragrunt Stacks finally Feature Complete
🚀 Amazon EKS Auto Mode Workshop: launch clusters in one command
🧠 Why Swap on Kubernetes ≠ Swap on Linux
🧙‍♂️ Nelm steps in as a Helm alternative, now GA
🧮 Bicep vs. Terraform: IaC showdown, cloud edition
🤖 The Post-Developer Era—AI writes 25% of Google’s code
🎛️ Retry, Backoff & Jitter: when they fail you
🧠 eBPF kernel wizardry gets practical with Co-Re

Fewer assumptions. Better defaults. More signal!!
 
 
⭐ Patrons
 
bytevibe.co bytevibe.co
 
🚀 Fuel Your Dev Flow – One Sip at a Time ☕
 
 
Fuel your coding sessions with the Kubernetes Mug — a sleek, durable 11oz ceramic essential for any developer or DevOps pro. Dishwasher and microwave safe with a sharp, double-sided design, it’s the perfect blend of style and function.

✔️ Ships fast.
♥️ Built to last.
 
 

👉 Spread the word and help developers find you by promoting your projects on FAUN. Get in touch for more information.

 
ℹ️ News, Updates & Announcements
 
www.gruntwork.io www.gruntwork.io
 
The Road to 1.0: Terragrunt Stacks Feature Complete
 
 

Terragrunt Stacks just leveled up. It's like Marie Kondo hit your Infrastructure as Code, making it pristine with On-Demand and Recursive Generation. Say goodbye to config clutter.

 
 
www.theregister.com www.theregister.com
 
SSL/TLS certificates will last 47 days max by 2029
 
 

SSL/TLS Cert Lifespan Crashes from 398 to 47 Days by March 2029! Automation’s your lifeline. Kiss those manual migraine-inducers goodbye.

 
 
security.googleblog.com security.googleblog.com
 
Google announces Sec-Gemini v1, a new experimental cybersecurity model
 
 

Sec-Gemini v1 steamrolls cybersecurity benchmarks, leaving rivals eating digital dust. It’s 11% better on CTI-MCQ and 10.5% sharper on CTI-Root Cause Mapping, thanks to cutting-edge threat intelligence and vulnerability insights. With a little help from Google Threat Intelligence and OSV, it decodes complex vulnerabilities faster than you can say "firewall." Cybersecurity pros: get ready to outpace those cyber gremlins.

 
 
aws.amazon.com aws.amazon.com
 
Introducing the Amazon EKS Auto Mode workshop
 
 

Amazon EKS Auto Mode tosses the headaches of Kubernetes cluster management to AWS. It dynamically tunes resources, making life easier for your apps. Feeling lazy? The workshop deploys an app with just one command, all while delivering beefy, scalable solutions. Oh, and you’ll master it in two hours flat.

 
 
 
🐾 From FAUNers
 
faun.pub faun.pub
 
Why Swap on Kubernetes Isn’t the Same as Swap on Linux — and What You Should Do Instead
 
 

Kubernetes doesn't mess around. Swaps or not, you're still getting OOMKilled thanks to cgroup limits acting like bouncers. For a budget-friendly strategy, turn to Spot Instances and stretch those dollars.

 
 
faun.dev faun.dev
 
Nelm, a new alternative to Helm, is GA
 
 

Nelm waves goodbye to the 3-Way Merge and embraces Server-Side Apply. Kubernetes updates now strut in with more reliability, while remaining fully cozy with Helm compatibility.

 
 

👉 Create your FAUN Page if it's not done yet and start sharing your blog posts, news, and tools on FAUN Developer Community, collect badges and more!
 

 
🔗 Stories, Tutorials & Articles
 
engblog.nextdoor.com engblog.nextdoor.com
 
Scaling Nextdoor’s Datastores
 
 

Nextdoor took on database scalability like a pro. They dynamically routed queries to read replicas and kept cache consistency tight, even while yanking the carpet out with schema changes. Multi JOINs blocked their move to distributed SQL like annoying roadblocks. But Nextdoor, the sly foxes, extended their lead by slicing off foreign-key shackles and outsmarting query routing. They bought precious time before slamming into the monolithic database ceiling.

 
 
spacelift.io spacelift.io
 
Bicep vs. Terraform - Differences & Key Features Comparison
 
 
Bicep, born from the heart of Azure, untangles the knotty ARM JSON mess. It delivers developer zen with its modular magic and ditches the hassle of state files. Meanwhile, Terraform swaggers across clouds, flaunting its multicloud prowess, a spirited community, and integrations that slip together like puzzle pieces.
 
 
www.joshwcomeau.com www.joshwcomeau.com
 
The Post-Developer Era
 
 

AI crafts 25% of Google's code while human developers orchestrate the symphony, molding and refining the AI's raw outputs. These AI tools "boost," they don't "replace," the seasoned artisans of code. Startups peddling the AI-only coding pipe dream tend to implode, tripped up by unanticipated hurdles. While AI inches forward, human expertise stands firm, untouchable.

 
 
thenewstack.io thenewstack.io
 
When Do Retry, Backoff, and Jitter Work?
 
 

Retries, meet your nemesis: server overload. Just hammering the "try again" button doesn’t solve it. Enter exponential backoff and jitter, the dynamic duo for taming sudden traffic spikes. But don’t pop the champagne just yet. When fresh requests keep pushing past capacity, this strategy crumbles, revealing the ugly truth—it’s no silver bullet for scaling woes.

 
 
www.robertdemeyer.com www.robertdemeyer.com
 
Measure risk probability in IAM
 
 

AWS actions don't always pick up list capabilities from resource types automatically. You'll often find yourself manually specifying list actions, which throws a wrench into Attribute-Based Access Control (ABAC) plans. AWS docs on dependency themes like PassRole? Incomplete at best. Cue the unexpected failures.

In the security scene, overstuffed IAM Roles, particularly when mixing federated users and Infrastructure as Code (IaC), present a hacker's dream. Precise trust policies become your holy grail. Hedging these threats? Not optional.

 
 
www.linkedin.com www.linkedin.com
 
Building a resilient DNS client for web-scale infrastructure   ✅
 
 

DCL flips DNS on its head with adaptive timeouts, exponential backoff, and real-time config updates. Result? Downtime hits the floor, fault tolerance flexes its muscles. DNS visibility and client-side metrics accelerate alert sharpness, fine-tune infrastructure tweaks, and kick old-school limits to the curb across LinkedIn’s domain.

 
 
theserverlessedge.com theserverlessedge.com
 
AWS Well-Architected Framework: Performance Efficiency Pillar
 
 

The AWS Well-Architected Framework's Performance Pillar champions nimble, cloud-native and serverless-first approaches. These tactics help systems pivot like a ballerina, dodge vendor lock-in, and slash costs. With Wardley Mapping, gain clarity. Prioritize flexibility. Ditch the shackles of hard-coded solutions.

 
 
cgmathprog.home.blog cgmathprog.home.blog
 
BPF or How I Learned to Stop Worrying and Love the Kernel
 
 

eBPF lets you safely unleash custom C programs inside the Linux kernel. No more messing with kernel modules or courting system crashes. Think of it as your eagle-eyed watchman for events. Thanks to Compile Once, Run Everywhere (Co-Re), you streamline the operation, keeping your kernel as panic-proof as a monk in a meditation retreat.

 
 
www.elastic.co www.elastic.co
 
Linux Detection Engineering - A Sequel on Persistence Mechanisms
 
 
PANIX turns the tangled web of Linux persistence and Process Capabilities on its head. It makes them as easy to test as flipping a light switch—and sharpens your detection game along the way.
 
 
luke.geek.nz luke.geek.nz
 
Sending Emails with MCP and Azure Communication Services
 
 

MCP struts onto the scene as the new AI-comms rockstar. Now featured in GitHub Copilot, it turns email automation with Azure Communication Services into a walk in the park.

 
 
www.thecoder.cafe www.thecoder.cafe
 
Lurking Variables: How Hidden Factors Can Mislead Your Analysis
 
 

NebuloSky's VM panic spike: not a botched kernel rollout, but the chaos of adding 1,000,000 platform Y VMs. Classic lurking variable mistake. Pro tip from Gen Z's crystal ball: dissect data by potential influences to sidestep this mess next time.

 
 
blog.simprasuite.com blog.simprasuite.com
 
Serverless Is a Lie (But It’s Still Useful)
 
 

ECS Fargate dominates 24/7 stateless APIs, dodging those pesky Lambda cold starts. Meanwhile, Lambda thrives in event-driven bursts but hits a 15-minute ceiling. For lean, mean APIs with built-in auth, lean towards API Gateway. But if speed matters, marry Fargate with an App Load Balancer. Step Functions streamline multi-step processes with state machines. Yet, don't overcomplicate—often a simple Lambda does the trick.

 
 
 
⚙️ Tools, Apps & Software
 
github.com github.com
 
awslabs/StsOidcDriver
 
 

The STS OIDC Driver (stsoidcdriver) is a Python-based tool that enables you to request temporary AWS security credentials for an IAM role, using ID tokens, from your OpenID Connect(OIDC) provider (OpenID provider, in their parlance).

 
 
github.com github.com
 
Miguel07Alm/dcs
 
 

A tool that monitors a local Git repository, generates AI-powered summaries of recent commits (daily, weekly, or monthly), and sends them to a Discord channel. Includes robust error handling and optional email notifications for critical failures.

 
 
github.com github.com
 
iterative/shtab
 
 

Automagic shell tab completion for Python CLI applications

 
 
github.com github.com
 
ymichael/open-codex
 
 

Codex CLI drops ChatGPT-level genius straight into the terminal. Code execution hooks up to version control like a dream. Open-source and safe—no need for network handshakes. Toss in some wizardry with diagrams for that multimodal flair!

 
 
github.com github.com
 
awslabs/mcp
 
 

AWS MCP Servers — specialized MCP servers that bring AWS best practices directly to your development workflow

 
 
github.com github.com
 
mark-adams/gcp-ip-list
 
 

A CLI tool (and library) written in Go to simplify the process of retrieving IP addresses from infrastructure hosted on Google Cloud Platform (GCP).

 
 

👉 Spread the word and help developers find and follow your Open Source project by promoting it on FAUN. Get in touch for more information.

 
🤔 Did you know?
 
 
Did you know that Discord handles millions of concurrent voice connections using a highly optimized mix of Elixir and Rust? Elixir, built on the Erlang VM, powers Discord’s real-time messaging and voice infrastructure thanks to its incredible concurrency capabilities. Rust is used for performance-critical parts, like the audio/video encoding pipeline. This combination allows Discord to deliver low-latency, real-time communication at massive scale—supporting everything from gaming squads to classroom lectures without skipping a beat.
 
 
😂 Meme of the week
 
 
 
 
🗣️ Quote of the week
 
 
Code is bad. It rots. It requires periodic maintenance. It has bugs that need to be found. New features mean old code has to be adapted. The more code you have, the more places there are for bugs to hide. The longer checkouts or compiles take. The longer it takes a new employee to make sense of your system. If you have to refactor there’s more stuff to move around.

Code is produced by engineers. To make more code requires more engineers. Engineers have n^2 communication costs, and all that code they add to the system, while expanding its capability, also increases a whole basket of costs. You should do whatever possible to increase the productivity of individual programmers in terms of the expressive power of the code they write. Less code to do the same thing (and possibly better). Less programmers to hire. Less organizational communication costs.

~ Rich Skrenta
 
 
❤️ Thanks for reading
 
 
👋 Keep in touch and follow us on social media:
- 💼LinkedIn
- 📝Medium
- 🐦Twitter
- 👥Facebook
- 📰Reddit
- 📸Instagram

👌 Was this newsletter helpful?
We'd really appreciate it if you could forward it to your friends!

🙏 Never miss an issue!
To receive our future emails in your inbox, don't forget to add community@faun.dev to your contacts.

🤩 Want to sponsor our newsletter?
Reach out to us at sponsors@faun.dev and we'll get back to you as soon as possible.
 

DevOpsLinks #473: Sec-Gemini Drops, eBPF Gets Practical, and SSL Certs Get Shorter
Legend: ✅ = Editor's Choice / ♻️ = Old but Gold / ⭐ = Promoted / 🔰 = Beginner Friendly

You received this email because you are subscribed to FAUN.
We (🐾) help developers (👣) learn and grow by keeping them up with what matters.

You can manage your subscription options here (recommended) or use the old way here (legacy). If you have any problem, read this or reply to this email.