DevOps&SRE Library

We brought Skew Protection to your Kubernetes

We're excited to share a new experimental feature for Platformatic: Skew Protection in the Intelligent Command Center (ICC). This brings Vercel-style deployment safety to Kubernetes, letting you deploy without downtime and avoid version-mismatch problems.

https://blog.platformatic.dev/skew-protection-for-kubernetes

DocumentDB on Kubernetes: Resilient, Highly Available Databases with Automatic Failover https://itnext.io/documentdb-on-kubernetes-resilient-highly-available-databases-with-automatic-failover-74c1a3ec882e

Autoscaling Hid Our LLM Cost Regression (85% → 4% Cache Hit Rate)

Why we moved capacity engineering into CI and started gating on prefix-cache efficiency

https://medium.com/@nroan/autoscaling-hid-our-llm-cost-regression-85-4-cache-hit-rate-b4beab5df240

Why post-mortem action items die https://incident.io/blog/why-post-mortem-action-items-die

The Incident Hero Trap https://uptimelabs.io/articles/the-incident-hero-trap

What does using AI for post-mortems actually mean? https://incident.io/blog/what-does-using-ai-for-post-mortems-actually-mean

Why LLMs Write Incorrect SQL (and What That Means for Your Database)

Most LLM-generated SQL doesn't fail. It runs and returns results, and that's exactly what makes it dangerous. The errors don't surface until they're already in your data.

https://readyset.io/blog/why-llms-write-incorrect-sql-and-what-that-means-for-your-database

The Human Infrastructure: How Netflix Built the Operations Layer Behind Live at Scale

In the three years since our first Live show, Chris Rock: Selective Outrage, we have witnessed an incredible expansion of our live content slate and the live operations that support it. From modest beginnings of streaming just one show per month, we are now capable of streaming over nine shows in a single day, reaching tens of millions of concurrent members. This post pulls back the curtain on the Live Operations teams that enable this rapid scale.

https://netflixtechblog.com/the-human-infrastructure-how-netflix-built-the-operations-layer-behind-live-at-scale-33e2a311c597

codeburn

CodeBurn tracks token usage, cost, and performance across 19 AI coding tools. It breaks down spending by task type, model, tool, project, and provider so you can see exactly where your budget goes.

https://github.com/getagentseal/codeburn

openhare

openhare is an AI-powered, cross-platform desktop SQL client with multi-database support, built for everyday development, data analysis, and DBA management workflows.

https://github.com/sjjian/openhare

eraser

Eraser helps Kubernetes admins remove a list of non-running images from all Kubernetes nodes in a cluster.

https://github.com/eraser-dev/eraser

Finding zombies in our systems: A real-world story of CPU bottlenecks https://medium.com/pinterest-engineering/finding-zombies-in-our-systems-a-real-world-story-of-cpu-bottlenecks-ea4722e552eb

Стартуем с Kubernetes без боли в Managed Kubernetes от MWS Cloud Platform. 27 мая в 16:00 Александр Курасов, технический владелец продукта в MWS Cloud Platform, покажет, как развернуть кластер за минуты, на вебинаре «Быстрый старт с Managed Kubernetes в облаке MWS». Разберём архитектуру сервиса, его интеграцию с IAM, сетями и балансировщиками. Увидите, как управляемый сервис берёт на себя администрирование master-узлов и упрощает жизнь. Будет интересно: ♦DevOps-инженерам, которые хотят упростить работу с Kubernetes ♦Backend-разработчикам, которым нужно быстро задеплоить сервис ♦Platform-инженерам, строящим cloud-native инфраструктуру ♦Техлидам и архитекторам, выбирающим Kubernetes в облаке ➡ Зарегистрироваться

I Don’t Care if AI Wrote the Code. You Own It.

SREcon Chair Heinrich Hartmann on why the age of AI-assisted engineering demands a radical return to design rigor.

https://www.runllm.com/blog/i-dont-care-if-ai-wrote-the-code-you-own-it

Superficial Blamelessness

For many organizations, some form of blamelessness has become a more standard practice and blame-awareness has been gaining in popularity. However, there is an anti-pattern I have noticed as well, which I like to call superficial (or shallow) blamelessness that I think is important for people to be on the lookout for.

https://resilienceinsoftware.org/news/11502437

Not all index scans are equal: How we cut query latency by over 99% https://www.datadoghq.com/blog/detect-inefficient-index-scans-with-dbm

hunk

Hunk is a review-first terminal diff viewer for agent-authored changesets, built on OpenTUI and Pierre diffs.

https://github.com/modem-dev/hunk

chartpack

A single, opinionated Helm chart for deploying any Kubernetes application workload. Instead of maintaining separate charts per application, define your entire deployment through values.

https://github.com/cotzo/chartpack

kubebuilder

Kubebuilder is a framework for building Kubernetes APIs using custom resource definitions (CRDs).

https://github.com/kubernetes-sigs/kubebuilder

pii-shield

Zero-code log sanitization sidecar for Kubernetes. Prevents data leaks (GDPR/SOC2) by redacting PII from logs before they leave the pod.

https://github.com/aragossa/pii-shield