DevOps & SRE notes

Terragrunt is now v1! This means that Terragrunt will no longer have any breaking changes in minor releases, with all future breaking changes taking place in (infrequent) future major releases. https://github.com/gruntwork-io/terragrunt/releases/tag/v1.0.0

It might become an alternative to LocalStack Floci - Light, fluffy, and always free - AWS Local Emulator https://github.com/hectorvent/floci

⚡️ LocalStack archived its GitHub repo — what happened and what it means On March 23, 2026, LocalStack archived localstack/localstack on GitHub (read-only) and consolidated everything into a single Docker image that requires an auth token — including in CI. What changed: - docker pull localstack/localstack:latest without LOCALSTACK_AUTH_TOKEN → your pipeline breaks - Free "Hobby" plan exists but requires account creation and is non-commercial only - Paid plans start at $39/mo - CI needs a dedicated CI Auth Token stored in secrets Your options: - Pin to an older tag (e.g. 4.12) — works short-term, but you accumulate parity drift and unpatched CVEs - Create a free account — enough for individual non-commercial dev - Pay — if LocalStack is embedded in team CI For open-source projects: LocalStack launched a separate program offering free Ultimate tier licenses (100+ AWS services, Cloud Pods, IAM enforcement) to eligible OSS projects with OSI-approved licenses. https://blog.localstack.cloud/introducing-localstack-for-open-source/

Delivers efficient, stable, and secure data distribution and acceleration powered by P2P technology, with an optional content‑addressable filesystem that accelerates OCI container launch. https://github.com/dragonflyoss/dragonfly

Good introduction for k8s Gateway API https://www.youtube.com/watch?v=HLXyrQT8zV0

Trivy has been hacked, again. The malicious payload is designed to execute within GitHub Actions runners, targeting sensitive data in CI/CD environments. Observed behavior includes dumping runner process memory to extract secrets, harvesting SSH keys, and exfiltrating credentials for AWS, GCP, and Azure, as well as Kubernetes service account tokens. https://socket.dev/blog/trivy-under-attack-again-github-actions-compromise

Container and file artifact promotion tooling for the Kubernetes project https://github.com/kubernetes-sigs/promo-tools

Short-lived public TLS certificates are our future, with a 46-day maximum validity by 2029. https://knowledge.digicert.com/alerts/public-tls-certificates-199-day-validity

Looking for a hosting platform to practice with Linux, Kubernetes, etc.? Register using my referral link on DigitalOcean and get $200 in credit for 60 days. By registering through my referral link, you also support this Telegram channel. 👉 Register

🔥 You can now create Amazon S3 general purpose buckets in your own reserved namespace, eliminating the need to find globally unique bucket names! The announce - https://aws.amazon.com/about-aws/whats-new/2026/03/amazon-s3-account-regional-namespaces/

AI Group now in K8s https://kubernetes.io/blog/2026/03/09/announcing-ai-gateway-wg/

Last week, I switched the default search in zsh (Ctrl+R) to fzf, and it’s working out pretty well. https://github.com/junegunn/fzf

A utility for generating Mermaid diagrams from Terraform configurations https://github.com/RoseSecurity/Terramaid

As announced November 2025, Kubernetes will retire Ingress-NGINX in March 2026. Despite its widespread usage, Ingress-NGINX is full of surprising defaults and side effects that are probably present in your cluster today. This blog highlights these behaviors so that you can migrate away safely and make a conscious decision about which behaviors to keep. This post also compares Ingress-NGINX with Gateway API and shows you how to preserve Ingress-NGINX behavior in Gateway API. The recurring risk pattern in every section is the same: a seemingly correct translation can still cause outages if it does not consider Ingress-NGINX's quirks. https://kubernetes.io/blog/2026/02/27/ingress-nginx-before-you-migrate/

A good starting point for finding a Helm chart that is not officially provided by the vendor is the Community Helm Chart Repository. https://github.com/trueforge-org/truecharts

K8sQuest — A local, hands-on Kubernetes learning game with real-world troubleshooting challenges. Practice Pods, Deployments, Services, networking, storage, and debugging using kubectl on a local cluster (kind/k3d). No cloud required. https://github.com/Manoj-engineer/k8squest

Understanding how many pods your infrastructure can actually support is crucial for reliability. This overview breaks down the nuances of Kubernetes cluster capacity and resource allocation. https://dnastacio.medium.com/kubernetes-cluster-capacity-d96d0d82b380

AWS Cost Optimization Game Day — a hands-on, interactive session focused on improving cloud efficiency and reducing costs in real-world scenarios. You’ll collaborate, analyze architectures, uncover cost-saving opportunities, and compete in a fun, gamified environment. Ready to optimize and win? Let’s play smart with AWS! When: Wednesday, Mar 11 · 4:30 PM to 7:30 PM GMT+2 Language: English Registration link is here

The second part of bench https://github.com/howardjohn/gateway-api-bench/blob/main/README-v2.md

Amazon's response https://www.aboutamazon.com/news/aws/aws-service-outage-ai-bot-kiro