ContentPosts from @faun..
Link
@faun shared a link, 3 weeks, 4 days ago

How I Built My Kubernetes Command Toolkit: A Journey from kubectl Chaos to Command Mastery

A dev-built Kubernetes CLI framework reshapeskubectlfor how teams actually work. Commands get grouped by role - dev, SRE, sec, admin - instead of by resource. It bakes in defaults forKyvernopolicies, encourages muscle-memory workflows, and wires up real-time troubleshooting to shrink downtime in pro..

How I Built My Kubernetes Command Toolkit: A Journey from kubectl Chaos to Command Mastery
Link
@faun shared a link, 3 weeks, 4 days ago

Internal HTTPS Routing in Istio.

Istio finally bringsinternal HTTPS routingwithSNI-based traffic rules. Services in the mesh can now talk over port 443—TLS fully intact. Just like in prod. TLS terminates at the ingress gateway. Routing pivots on SNI, not headers. Which makes this much closer to real-world mTLS flows. What’s the pla..

Internal HTTPS Routing in Istio.
Link
@faun shared a link, 3 weeks, 4 days ago

Introducing Headlamp Plugin for Karpenter

The newHeadlamp Karpenter Pluginwires real-time autoscaling insight straight into the Headlamp UI. It showsKarpenterresources, live metrics, scaling moves—no kubectl spelunking required. NodePoolsandNodeClaimsget mapped to core Kubernetes objects. You can tweak configs in the UI, get validation on t..

Introducing Headlamp Plugin for Karpenter
Link
@faun shared a link, 3 weeks, 4 days ago

Who’s Calling That API? A Detective Story from the Depths of EKS Networking

A production network got hammered by too many Auth0 token requests. The source? EKS workloads tucked behind a shared NAT Gateway. No easy trail. Engineers stitched it together usingVPC Flow Logs,pod-to-node maps, and some sharpIstio ServiceEntry logs. Even with Kubernetes CNI doing its NAT-obscuring..

Who’s Calling That API? A Detective Story from the Depths of EKS Networking
Link
@faun shared a link, 4 weeks, 2 days ago

Authentication Explained: When to Use Basic, Bearer, OAuth2, JWT & SSO

Modern apps don’t just check passwords—they rely on **API tokens**, **OAuth**, and **Single Sign-On (SSO)** to know who’s knocking before they open the door...

Link
@faun shared a link, 4 weeks, 2 days ago

Uncommon Uses of Common Python Standard Library Functions

A fresh guide gives old Python friends a second look—turns out, tools like **itertools.groupby**, **zip**, **bisect**, and **heapq** aren’t just standard; they’re slick solutions to real problems. Think run-length encoding, matrix transposes, or fast, sorted inserts without bringing in another depen..

Link
@faun shared a link, 4 weeks, 2 days ago

Privacy for subdomains: the solution

A two-container setup using **acme.sh** gets Let's Encrypt certs running on a Synology NAS—thanks, Docker. No built-in Certbot support? No problem. Cloudflare DNS API token handles auth. Scheduled tasks handle renewal...

Privacy for subdomains: the solution
Link
@faun shared a link, 4 weeks, 2 days ago

Writing Load Balancer From Scratch In 250 Line of Code

A developer rolled out a fully working **Go load balancer** with a clean **Round Robin** setup—and hooks for dropping in smarter strategies like **Least Connection** or **IP Hash**. Backend servers live in a custom server pool. Swapping balancing logic? Just plug into the interface...

Writing Load Balancer From Scratch In 250 Line of Code
Link
@faun shared a link, 4 weeks, 2 days ago

Organize your Slack channels by “How Often”, not “What” - Aggressively Paraphrasing Me

One dev rewired their Slack setup by **engagement frequency**—not subject. Channels got sorted into tiers like “Read Now” and “Read Hourly,” cutting through noise and saving brainpower. It riffs off the **Eisenhower Matrix**, letting priorities shift with projects, not burn people out...

Link
@faun shared a link, 4 weeks, 2 days ago

Building a Resilient Data Platform with Write-Ahead Log at Netflix

Netflix faced challenges like data loss, system entropy, updates across partitions, and reliable retries. To address these, they built a generic Write-Ahead Log (WAL) system serving a variety of use cases like delayed queues, generic cross-region replication, and multi-partition mutations. WAL abstr..