Plamen

holy moly this is bonkers! lowering the barrier to write ebpf programs is a huge advancement for people scared to look at c code (me :D)

Happy user here, AMA 😁

After I got hacked (they bypassed 2FA -.-") I migrated to Tutanota (now just Tuta @tutaprivacy.bsky.social ) and never touched Gmail again, super smooth, all features I need and so encrypted that searching old emails is a bit of a pain (so categorize and archive correctly on time ^^'')

I hope this settles the debate...

A rebranding that triggered lots of people 😅

if you love vibe coding wait until your pm starts vibe Jira storying

Bought some used hardware on eBay. Factory reset didn't work. Wasn't able to get in with admin/admin.

So, I desoldered the flash chip, replaced it with a ZIF socket, dumped it, and pointed John the Ripper at /etc/shadow.

Password was "admin", but username was "agcfw".

Sometimes obscurity works!

I'm the control plane now

:set number

Also exec and sec often get baited by multiple vendors for same features they are currently paying

anythingllm.com
itnext.io/deploy-flexi...

This one looks pretty cool

This weekend I locked myself out of my laptop... Luks and hibernate+force shutdown don't go well, at least I learned how to unencrypt my disk and boot it from the grub emergency console. I don't recommend it as an experience to anyone though 😉 (you need to write manually UUIDs a lot of times 🥲)

Just keep being humble 😊

We all have that ONE usb-c cable that supports all the features (but is a bit too short)

I object.

Bare metal is easier every day of the week and twice on Sunday.

I'd love a hyper scale kubernetes on metal platform engineering automation principal engineer role. I'll make you hate the public cloud.

Yeah same for me, but as I said was like a 10 min coffee break 😄

10 mins of downtime for some reason

Deepseek (r1 and Janus) is absolutely hyper giga terribly terrible, prove me wrong

Yeah we never stop adding to that stream 😜

If you're using kube-prometheus-stack you can just disable the default rule in the values.yaml like this
defaultRules:
create: true
rules:
etcd: false
kubeScheduler: false

Title slide of a presentation entitled, "A Commencement into Real Kubernetes Security"

Slides and demo videos for the talk that @antitree.com and I gave at the last @shmoocon.bsky.social on entitled, " "A Commencement into Real #Kubernetes Security!"

Demos include use of Mark's brand new tool, as well as of Peirates.

www.canva.com/design/DAGZr...

1/9

Wow, I Came Looking for Copper and I Found Gold

The internet used to be so good

parallel

Post a picture of yourself from a different era

Private images and registries with Kubernetes? 🤔 You got it, check my new blog post about implementing a private registry into Kubernetes:

6 minutes read worth bookmarking
plamen.works/hooking...

Give it a go with Argo Rollouts and Traefik Services (Or Istio) for traffic split, it's so cool seeing those percentages of traffic split in action

Else you could try to pull it off to make this whole thing work and you won't regret it ;)

Automated Rollouts with Analysis and Prom dependant rollouts Automated Rollouts with Analysis and Prom dependant rollouts - automated-rollouts.yaml

I uploaded you a working cool demo:
gist.github.com/plpetkov-tec...
this one though is dependant on you sharing traefik metrics in a prometheus instance, if you want to skip it just comment it out and instead of having "analysis" parts in the "steps" array of the rollout just put pauses

Or worse:
Next day: it's so over...