Announcing multi-subnet support for more scalable GKE clusters (2 minute read)
Google Kubernetes Engine now supports multi-subnet clusters, removing single-subnet limitations to improve scalability, resource utilization, and flexibility. Clusters running version 1.30.3-gke.1211000 or higher can add subnets on demand, allowing new node pools to use available IP space and avoid IP exhaustion errors.
|
Dragonfly v2.3.0 has been released (5 minute read)
Dragonfly v2.3.0 features improvements to large file distribution, enhanced security through Personal Access Tokens (PATs), and optimized preheating mechanisms. Other key updates include comprehensive audit logging, hardware-accelerated piece hash computation, disk space validation, configurable garbage collection thresholds, and tracing based on OpenTelemetry for end-to-end visibility.
|
|
OpenTofu at Scale: 4 Strategies & Scaling Best Practices (11 minute read)
Effective scaling strategies for OpenTofu include local development for learning, generic CI/CD pipelines for automation, open-source tools like Atlantis for GitOps workflows, and advanced orchestration platforms like Spacelift that provide integrated policy enforcement, drift detection, and multi-tool coordination.
|
Solving secret zero with Vault and OpenShift Virtualization (12 minute read)
Red Hat OpenShift Virtualization and HashiCorp Vault can be used together to solve the secret zero problem by establishing machine identities for virtualized infrastructure. By using Kubernetes identities, trust can be established between Red Hat OpenShift Virtualization workloads and HashiCorp Vault with Vault Agent, eliminating the need for secret zero.
|
|
spotinfo (GitHub Repo)
spotinfo is a CLI tool and MCP server that can explore AWS EC2 Spot Instances and provide real-time placement scores, pricing, and interruption rates. DevOps engineers can use it to optimize cloud costs, while AI assistants can query AWS Spot Instance data using natural language via the tool's MCP server capabilities.
|
pyx: a Python-native package registry, now in Beta (Tool)
Astral's pyx is a Python-native package registry designed as an optimized backend for uv that makes Python package management faster, more secure, and GPU-aware. It is the first piece of the new Astral platform. While Astral's open-source tools like Ruff and uv remain free, pyx introduces a paid hosted service that addresses enterprise pain points (like PyTorch/CUDA installs, repeated builds, and registry auth) by tightly integrating client and server for a next-gen Python developer experience.
|
|
MadeYouReset: An HTTP/2 vulnerability thwarted by Rapid Reset mitigations (3 minute read)
A new HTTP/2 denial-of-service vulnerability called MadeYouReset (CVE-2025-8671) affects unpatched server implementations that don't restrict malformed frames from clients. While versions of Cloudflare's Pingora framework prior to 0.4.11 were potentially susceptible, Cloudflare was informed of the vulnerability in May and confirmed that its systems were protected due to mitigations put in place during Rapid Reset (CVE-2023-44487).
|
Why LLMs Can't Really Build Software (3 minute read)
LLMs can generate and modify code but struggle to build software because they cannot maintain clear mental models, leading to confusion when resolving discrepancies between requirements, tests, and code. Effective software engineering requires this iterative mental modeling, so for now, LLMs are best used as helpful tools rather than independent engineers.
|
|
|
Love TLDR? Tell your friends and get rewards!
|
|
Share your referral link below with friends to get free TLDR swag!
|
|
|
|
|
Track your referrals here.
|
|
Want to advertise in TLDR? 📰
If your company is interested in reaching an audience of devops professionals and decision makers, you may want to advertise with us.
Want to work at TLDR? 💼
Apply here or send a friend's resume to jobs@tldr.tech and get $1k if we hire them!
If you have any comments or feedback, just respond to this email!
Thanks for reading,
Kunal Desai & Martin Hauskrecht
|
|
|
|
