• A standing jar of a friend of mine: https://send.monobank.ua/jar/AYR2HGkbxg

• A jar for rehabilitation of a Ukrainian soldier, who got serious injuries on the front lines: https://send.monobank.ua/jar/5AmpbpVRxm

Time Sensitive

• Linux: The Good Stuff by No Starch Press - a book bundle with some incredibly good books about Linux on Humble Bundle. It’s available for 16 more days.

Digest

• Trivy Compromised: Everything You Need to Know about the Latest Supply Chain Attack - a report from Wiz about the supply chain attack on Trivy by TeamPCP, which likely caused a chain-reaction due to the number of leaked credentials.

• How a Typosquatted Domain and a Fake Version Tag Turned Trivy Into a Credential Stealer - another write-up on the aforementioned attack with some details of how it was done.

• Announcing Ingress2Gateway 1.0: Your Path to Gateway API - a tool from Kubernetes’ SIG Network that is aimed to help people to migrate from the deprecated NGINX Ingress to the new Gateway API.

• Updates to GitHub Copilot interaction data usage policy - you have to explicitly opt out in GitHub’s privacy settings, if you don’t want your code to be used to train Copilot models.

• axios Compromised on npm - Malicious Versions Drop Remote Access Trojan - another supply chain attack on a tremendously popular HTTP client for Node.js.

• Unpatchable Vulnerabilities of Kubernetes: CVE-2020-8561 - a CVE that allows server-side request forgery (SSRF) type of attack. Although, this one is not so exploitable, if you have networking and access control best practices in place.

Share

That’s it for today, I wish I had some better news, but it’s mostly supply chain attacks. In any case, happy holidays for those who celebrate this weekend!

• Dronefall by Come Back Alive. A big standing fundraiser to provide interceptor drones and down ruzzian UAVs.

• UA Responders - a foundation with which we collaborate a lot for DevOps Days Ukraine. It raises funds for the rehabilitation of Ukrainian veterans.

Time Sensitive

• Python Courses on Humble Bundle. Available for 2 more days!

• Cloud Certification courses and practice exams. Mostly AI-related. Just 1 more day to grab!

• A book bundle about LLMs and generative AI. 8 more days to get it!

Digest

• Staff archetypes can be anti-patterns - a blog post by Alex Ewerlöf on how focusing on just a single staff engineer archetype can backfire.

• Scaling PostgreSQL to power 800 million ChatGPT users - a story about how OpenAI scales their Postgres databases. Although, it seems like they are slowly migrating to Azure Cosmos DB from Postgres.

• AI Isn’t Replacing SREs. It’s Deskilling Them - a story about why AI is bad for you.

• My (hypothetical) SRECon26 keynote - a story about why AI is good for you.

• 4 ways to use Argo CD and Terraform together - an article on some ways of passing values between Terraform and Argo CD.

• Apparently, Amazon now mandates senior engineer review for AI-generated code. A discussion on Hacker News.

• Making Cloudflare Tunnels Work with Mobile Apps Using mTLS (VPN Alternative) - an article of a colleague of mine on how to use Cloudflare Tunnels to secure your self-hosted things.

• Measure What Matters by John Doerr: Summary & Notes - a short summary and notes about a book about OKRs.

• How to Help AI Write Better Tests - a short article from a former colleague of mine with some practical tips on how to generate better unit tests with AI.

That’s all for today! See you in a couple of weeks!

Subscribe in Telegram

Charity

• My co-author’s neighbor joined the Armed Forces of Ukraine as a combat medic, and now raises funds for some supplies. You can donate on a Monobank Jar.

• A standing Monobank Jar for FPV drones components for a guy from my wife’s hometown.

Digest

• An open letter to Oracle to establish a MySQL foundation - sign an open letter if you’re interested in the future of MySQL!

• Collaboration sucks - an article from PostHog on why you may want to volume of ongoing discussions in your company.

• AWS suffered ‘at least two outages’ caused by AI tools, and now I’m convinced we’re living inside a ‘Silicon Valley’ episode - apparently, recent prolonged incidents at AWS were caused by AI. AWS, unsurprisingly, declines these claims.

• Harness engineering: leveraging Codex in an agent-first world - a story from OpenAI about how they create a service using only their Codex project without any human-writen code.

• Why etcd breaks at scale in Kubernetes - a great explainer of how ETCD works in context of Kubernetes, as well as why and how it breaks.

Subscribe now

Not that many articles in these two weeks, I must admit. Hopefully, I have more time to read through my backlog next weeks!

• Support the Army Assistance initiative by the Comeback Alive foundation.

• Support the foundation itself.

Time Sensitive

• Solutions Architect Cloud bundle by Packt on Humble Bundle. You still have 7 days to pick it up.

• Linux for Seasoned Admins by O’Reilly on Humble Bundle. You still have 14 days to buy it.

• Networking Bundle by Packt, 10 days left.

Subscribe now

Digest

• Multiple issues in ingress-nginx - multiple CVEs discovered in Kubernetes Nginx Ingress. Fixed versions are available.

• Slop - a collection of AI-generated reports to Curl’s HackerOne bug bounty program.

• Open Source Security in spite of AI - a FOSDEM talk by Curl’s creator Daniel Stenberg. The previous collection of slop reports are from there.

• Using LLMs to Generate Terraform Code - 2025 Update - results of some experiments, how one company tried to generate Terraform code with different AI models.

• Story about Atlantis, Terraform, ASDF and versioning for binaries, modules and providers - an article from a friend of mine about keeping the versions of Terraform binaries in-check.

Share

That’s all for now, folks! See you in two weeks, and happy Valentine's Day!

Frankly, I should have posted a new issue of this newsletter weeks ago, but better late than never, right?

Subscribe now

Charity

• Friend’s fundraiser for a car on Zaporizhzhia direction. Monobank Jar.

• A standing jar for a guy from my wife’s hometown. Monobank Jar.

Time Sensitive

• “High Tech Career Playbook Bundle” by Manning books on Humble Bundle. You still have 17 days to grab it!

Digest

• Incident Report for Honeycomb - a postmortem from Honeycomb for their issues with Kafka in Europe, which lasted for 12 days.

• The Hidden Cost of Database Indexes - a nice write-up on the tradeoffs of database indices.

• When Change Outruns Us - smart companies do not push changes for the sake of changes, but adopt more sustainable cyclic rhythms.

• New term “Claude Hole” - when it takes 5 minutes to generate code, and 5 hours to debug the generated code in production.

• Frameworks for understanding databases - self-explanatory title.

• Sorted string tables (SST) from first principles - a nice recap for one of the chapters of the “Design Data-Intensive Applications” book.

• Culture Debt - it’s like technical debt, but for your organization. And it’s much harder to get rid of, compared to actual technical debt.

• From RSS to WSS: Navigating the Depths of Kubernetes Memory Metrics - how Linux and Kubernetes (cadvisor) calculate memory differently.

• Terraform Skill - Cloude skill for Terraform and OpenTofu by Anton Babenko.

• Bring Back Ops Pride - an article by Charity Majors about how we tend to treat IT operations, and what’s wrong with that.

• “You Had One Job”: Why Twenty Years of DevOps Has Failed to Do it - another article from Charity that triggered the previous one. This one is a marketing material for Honeycomb, but it provides context for the previous article.

• Kubectl Prof - a tool to profile your Kubernetes pods live.

• Kubernetes Remote Code Execution Via Nodes/Proxy GET Permission - a new vulnerability in Kubernetes, and a hands-on lab to reproduce it.

• How do we use Terraform at Preply - last but not list, my own article about the usage of Terraform in the company I currently work. At last, some original content!

Share

That’s all for today, folks! I am on my way to Brussels for FOSDEM 2026. If you also are going to be there, ping me! Let’s have a chat!

Here’s a random thought I had recently about the holidays: it’s interesting, how traditional holidays define public days off, which in turn define, when people have celebrations. I am not into the whole Jesus-thing, but the winter holiday season was always the holiday season of a year for me. When I moved to Germany, the official Christmas in Ukraine was still in January. However, here in Germany, people celebrate it in December, thus public holidays dictated the day on which we hold a party with our friends, gifts, etc.

Anyway, enough of the diversion, here’s the digest!

Charity

• Let’s help a friend of mine to raise enough funds for a car for the Zaporizhzhia frontline. Monobank jar.

• Standing Monobank jar for Rusoriz from Serhii Sternenko.

• Another fundraiser from Serhii Sternenko. For the interceptor drones. Privat Bank envelope.

Digest

• Shifting left at enterprise scale: how we manage Cloudflare with Infrastructure as Code - Cloudflare on how they use Terraform for their infrastructure. There’s nothing mind-blowing in this article, since they have a pretty standard setup, except for a custom backend, on which they do not elaborate anyway.

• Pricing changes for GitHub Actions - an announcement from GitHub (Microsoft) that they later withdrew after a backlash. The whole deal was about GitHub Actions to charge $0.002 per minute for self-hosted runners.

• A Safer Container Ecosystem with Docker: Free Docker Hardened Images - on the flip side, Docker makes their hardened images available to the public.

• GraphQL: the enterprise honeymoon is over - a blog-post about GraphQL, more specifically its “plateau of productivity”. Tl;dr: unless you have a huge, complex setup, you probably do not need it. In any case, I am biased here. In my opinion, GraphQL is just SOAP for millennials.

• Cold-Restart Resilience - a cautionary tale with a couple of examples about caveats of a system recovering from scratch. The list of things that can go wrong is not exhaustive, of course, but it’s an interesting read nevertheless.

• Securing admin access to Monzo’s platform - a story of how Monzo guards the admin access to their systems. Their solution is based on AWS Nitro Enclaves with some automation around it.

Share

This is it for this time, folks! See you in the new year!

I would appreciate hearing your thoughts about this newsletter going forward. I have started a Substack, when it was a “hot new thing”, similar to the way I started the CatOps Telegram channel back in the day. However, unlike with Telegram, I struggle a bit to understand the fit for this newsletter. If you have any idea, it would be great, if you could share them in the comments, or send me at: info@catops.dev

🎄🎄🎄 Happy holidays! 🎄🎄🎄

• Let’s help the “Тихо” (silent in Ukrainian) Foundation to raise funds for FPV and Vampire drones: https://send.monobank.ua/jar/WaFbzLzNK

Subscribe on Telegram

Time Sensitive

• Cybersecurity books bundle by Packt - only 3 days left to grab it!

• Hacking book bundle by No Starch Press - 10 days before it expires.

• A salary survey from DOU.ua (in Ukrainian) - with more responses they’ll have more accurate results!

Digest

• KubeСon 2025 Atlanta | AI and Kubernetes | OSI L8 | The Sunset of Open Source? | Your Development Plan - a video by Denys Vasyliev (in Ukrainian) about KubeCon NA 2025 and other things.

• Minio is the maintenance mode now - the open source version is in the maintenance mode now, and the team behind it focuses on the commercial solution instead. There is also a discussion on Reddit about the possible migration options.

• Cloudflare outage on December 5, 2025 - a postmortem from Cloudflare for one of their recent outages.

• Shadow work in engineering teams - an article on how to make your work visible for the organization and recognize the work that you do, but never account for.

• KISS vs DRY in Infrastructure as Code: Why Simple Often Beats Clever - a case in favor of keeping your IaC configuration simple and verbose instead of using multiple layers of abstractions and the wrapper tools.

Share

That’s all for now! Here’s a photo of an incredible human invention - a 24h vending machine in a random neighborhood of Wrocław where you can buy eggs whenever you need ‘em.

• Please, support the administrative needs of the “Come Back Alive” foundation. BTW, they have a limited series sale to support the foundation itself.

• UA Responders foundation that specializes on medicine.

Time Sensitive

• “Data Engineering and Data Science” book bundle by O’Reilly. Only 3 days left to grab it!

• “Software Architecture” book bundle by Pearson. 10 days left.

Subscribe on Telegram

Digest

• Cloudflare outage on November 18, 2025 - a postmortem from Cloudflare for their recent outage.

• Jenkins JVM monitoring with JMX remote - a small howto article about Jenkins monitoring.

• Always Be Ready to Leave (Even If You Never Do) - an article about job habits that would make you more efficient and more pleasant to work with.

• “What went well” is more than just a pat on the back - an article, the importance of the “what went well” part of your postmortems.

• Migrating from NGINX Ingress Controller to Kubernetes Gateway API Using - as you may know, Kubernetes Nginx Ingress won’t be developed anymore, so there’s an article on how to migrate from there. This article is from the DeadOps Telegram channel.

This is all for this time. See you in the next digest! Here’s a photo of snowy Wrocław!

• A fundraiser from DeepState for FPV drones.

• A fundraiser for optical FPV drones.

Time Sensitive

• Linux for Professionals by Apress on Humble Bundle.

Share

Digest

• Quick thoughts on the recent AWS outage - a column on what long-term learnings one could take away from the infamous AWS incident.

• How Many Pillars Of Observability Can You Fit On The Head Of A Pin? - an article from Charity Majors on the flaws of thinking about Observability in “pillars”.

• Kubernetes right-sizing with metrics-driven GitOps automation - a curious over-engineered solution for Kubernetes workloads right-sizing by AWS.

• Seventh-generation server hardware at Dropbox: our most efficient and capable architecture yet - Dropbox talks about their newest hardware and challenges they face running exabytes of storage on-premise.

• Ingress NGINX Retirement: What You Need to Know - community-managed Nginx Ingress will no longer be maintained after March 2026. Artifacts will still be available, but the project won’t get any fixes or updates.

That’s all for today, folks! I’m in a business trip, so there were fewer posts in the channel as it could be. But here’s a photo of Barcelona.

• A standing Monobank jar for FPV drones for a guy from my wife’s hometown (the jar is registered to her sister): https://send.monobank.ua/jar/4WLw91UqFe

Digest

• Thorsten Ball on Technical Blogging - a blog post about the importance of writing blog posts :)

• AWS Postmortem for the Oct 19th Outage - every time something happens in us-east-1, it’s prominent around the world. Here you can read about what happened in more details.

• Helm v4.0 Major Changes Summary - a sneak peek into what to expect from the new major release of Helm.

• On Hiring: Promote Stars, Not Strangers - a nice article about one’s approaches to hiring and promotions.

• Three Mighty Alerts Supporting Hugging Face’s Production Infrastructure - another sneak peek into the observability stack at Hugging Face.

• Reddit’s Engineering Excellence Survey - a story from Reddit engineers about their approach to DevEx survey.

• AWS to Bare Metal Two Years Later: Answering Your Toughest Questions About Leaving AWS - an update from OneUptime on their move away from AWS.

Share

• A permanent jar for FPV drones for the unit where a guy from my wife’s hometown is serving: https://send.monobank.ua/jar/4WLw91UqFe

• A friend of mine is raising money for a Starlink and a couple of power stations for the 5th heavy mechanized brigade and the 33rd mechanized brigade: https://send.monobank.ua/jar/3VEQNLAcia

Time Sensitive

• A Security books bundle on HumbleBundle. Available for 2 more weeks as of today.

• Python Programming book bundle by Pearson on HumbleBundle. Available for 17 more days.

Subscribe on Telegram

Digest

• One line of malicious npm code led to massive Postmark email heist - a supply-chain attack that took advantage of the growing popularity of MCPs.

• AWS API MCP Server v1.0.0 release - a new official MCP from AWS to interact with their API.

• AWS Knowledge MCP Server now generally available - another official MCP from AWS to interact with their documentation and blogs (honestly, AWS documentation is very confusing, so an MCP can really help it).

• Quiet Influence: A Guide to Nemawashi in Engineering - some Japanese wisdom on how to convey your ideas.

• Introducing New Features in KUBE-DC for Enhanced Private Cloud - a short video with the new features of Kube-DC (developed in Ukraine!)

• Kube-DC - the official website of the aforementioned Kube-DC with all the information and documentation.

• Terraform Actions: Deep-Dive - a new first-class citizen in Terraform to control imperative actions.

• Early return and goroutine leak - an example of goroutine leak and how to catch and fix it.

• Never start a goroutine without knowing how it will stop - some wisdom from Dave Cheney.

• How to Lead in a Room Full of Experts - a great article on the difference between a technical expert (aka senior engineer) and a technical leader.

• Availability Models - a nice overview of the different things that people mean when they say: “high availability”.

Share

That’s all for this issue, folks! Here’s a photo from one of the last warm weekends in Berlin.

Anyway, here’s digest:

Charity

• The UA Responders Foundation that specializes on the medical needs. DevOps Days Ukraine cooperates with them since the start of the full-scale invasion.

Share

Time Sensitive

An annual survey from DOU.ua about the Ukrainian tech market.

The survey is in Ukrainian.

Digest

• From Linux Primitives to Kubernetes Security Contexts - a great overview of how Kubernetes abstractions map to the underlying kernel features.

• Keda Monitoring With Prometheus and Grafana - some useful ready-to-use Grafana dashboards for the KEDA autoscaler.

• ServerlessHorrors - similar to the Kubernetes failure stories, but for serverless.

• cert-manager-mcp-server - an MCP (model context protocol) for Cert Manager that provides tools to work with the certificates.

• A video from my talk about a platform team pitfalls is available on YouTube now!

That’s all, folks! See you in a couple of weeks!

On a flip side, now I understand, why so many newsletters come on Monday: you have the whole weekend to prepare them!

DevOps Days Ukraine

We had our annual conference this Wednesday! If you were there, thank you; if you couldn’t manage to hop on, I’ll share the recordings with you, once they are available.

Charity

• We are helping our friends from the UkrOps Club to raise 100k UAH for the electronic warfare equipment. Right now, more than 50% of the goal is reached. You can donate on this Monobank Jar: https://send.monobank.ua/jar/6tomFnD5Rb
  

  Donate for EW

Time Sensitive

• Bitnami’s deprecation of their public images is postponed till 29th of September.

Digest

• Waitgroups: what they are, how to use them and what changed with Go 1.25 - an overview of some simplifications for WaitGroups in Go 1.25.

• Cloudflare Rearchitects Workers KV Following GCP Outage, Achieves 40x Performance Gain - an interesting article of how Cloudflare re-architectured their KV storage after the Google’s outage.

This is it for this digest. It’s small, because I didn’t post much into the channel lately. Hopefully, I’ll post more in the upcoming weeks.

• DOU.ua continues their fundraiser for the 3rd Assault Brigade. Here is more info (in Ukrainian). You can donate on this Monobank Jar.

• Musicians Defend Ukraine is a foundation that a friend of mine, who works in the music industry, created at the beginning of the full-scale invasion.

Subscribe now

Time Sensitive

• Linux Books Bundle by Pearson - 9 more days to grab!

• Software Architecture Books by O’Reilly - 16 more days available.

Digest

• Microservices are Mess without these Patterns - some patterns that are frequently used in system design.

• ESO Maintainer Update: We need help - a call for help from the maintainers of the External Secrets Operator - a popular tool to sync credentials from your secrets storage into Kubernetes.

• Announcing Crossplane 2.0 - a new major release of Crossplane is here with some notable (and really nice) changes!

• Note from Teemu, Tim, and Torin to the Open Policy Agent community - the team behind Open Policy Agent has joined Apple. The project itself if still under CNCF, so hopefully this is good news.

• 7 real S3 screw-ups I see all the time (and how to fix them) - people on Reddit share their tips on how to decrease the cost of AWS S3.

That’s all, folks!

But wait, here’s a bonus!

[Media] I Have No Mut and I Must Borrow is a must-read for all the enjoyers of Rust and old-school sci-fi!

Charity

• Our current ongoing fundraiser for 36th Marine Brigade: Monobank Jar - the goal is almost met, so let’s make the final push!

• We were raising funds for a workshop that maintains ground drones. The goal of that fundraiser is reached, but the Monobank Jar is still open, since those are recurrent expenses.

• DOU.ua continues their fundraiser for the 3rd Assault Brigade. Currently, a bit more than 50% of the goal is reached. More info (in Ukrainian). Monobank Jar for donations.

Time Sensitive

• “SQL and Databases” bundle by O’Reilly. You still have 3 days to grab them!

• “Learn Programming” software bundle by Zenva. Also, 3 days left for grabs!

Digest

• Supercharging Development With Dapr and mirrord - an article that shows you how to do some local development with Dapr and mirrord (it’s like Telepresence)

• Migrating the Jira Database Platform to AWS Aurora - a migration story from Atlassian

• Our Experience with Amazon Aurora Blue/Green Deployments - another story about AWS Aurora from Klaviyo. This time about its blue/green functionality

• Upcoming changes to the Bitnami catalog - Bitnami kind of sunsets their free offering for Docker images and Helm charts. The `latest` tag will still be available, but “stable” releases are moved under the paywal. Old artifacts are going to be moved to the archive repository. Check your dependencies!

• Making Postgres 42,000x slower because I am unemployed - an invert story of Postgres optimization! If you know, how to make it slow, there’s a probability that you’d know how to make it faster.

• META will let job candidates use AI during the interview - an interesting discussion on Reddit about allowing the candidates to use AI during technical interviews. Plus, apparently META is going to do that as well.

• StackOverflow Developer Survey 2025 - self-explanatory.

• Disposable Code Is Here to Stay, but Durable Code Is What Runs the World - an interesting article by Charity Majors, in which she elaborates on the idea of “disposable vs durable” code, AI, and what it all means to the industry.

• Cloud Native PG - a good way to run PostgreSQL in Kubernetes.

Share

That’s all for today, folks! Here’s an XKCD strip, that illustrates the recent Bitnami changes.

Charity

These two weeks we are raising funds for a workshop that repairs unarmed ground vehicles aka ground drones. The money goes to tools and materials. You can donate on this Monobank Jar

Donations Jar

Digest

• WIZ Cloud Security Championship - monthly cyber security challenges with a leader board.

• Writing Code Was Never The Bottleneck - an essay about the problems that AI doesn’t solve in software engineering.

• CTOs Reveal How AI Changed Software Developer Hiring in 2025 - a collection of short interviews not with just CTOs, but other industry leaders about what they pay attention to, when interviewing candidates in the era of AI.

• The company that created Kafka is replacing it with a new solution - LinkedIn is apparently working on a new distributes messaging solution.

• Figma’s $300k Daily AWS Bill Isn’t the Scandal You Think It Is - an article about that reviews that Figma’s cloud spending is not that out of hand, despite the number itself being huge.

• I shouldn’t have to read installer code every day - yet another fair criticism of Helm.

Bonus: If you enjoyed the article about Helm, and also wonder, how to make tame this beast, you may want to add some tests into your arsenal. Some time ago, I wrote two articles about that Part I: Problem statement and Part II: Implementation. Hope, you’d enjoy them too!

That’s all for today! See you in the next digest! I do not have a pretty photo for this one, so here’s a weather map for tomorrow.

Yet, you can always subscribe to the Telegram channel and get these great articles as they come (or rather as I catch up with my reading backlog).

Subscribe on Telegram

Charity

DOU.ua raises 20M UAH for drones for the 3rd Assault Brigade. You can donate to the Monobank Jar directly.

They also have a dedicated page for this fundraiser (in Ukrainian). Or you can open a helper’s jar in Monobank to get some prizes and such. You can find more info here (in Ukrainian).

Digest

• Apple quietly makes running Linux containers easier on Macs - it seems like Apple has finally realized that their main customers are the Tech companies.

• Everything You Need to Know About Cache Strategies - a short explainer of various caching strategies that can help you to prepare to an interview.

• 16 billion passwords exposed in record-breaking data breach: what does it mean for you? - some initial details of yet another data leak. In reality, there are fewer credentials exposed than as the title claims, but who doesn’t like loud titles?

• AI Reliability Engineering: Welcome to the Third Age of SRE - an article by Denys Vasyliev about the new challenges for SREs who take care of AI services.

• How We Load Test Argo CD at Scale: 1,000 vClusters with GitOps on Kubernetes - a case study of how much Argo can take.

• Ktea - a TUI tool for Kafka written in Go.

• Kafka-UI - a web interface for Kafka with similar functionality (can run locally in Docker).

• Writing Toy Software Is A Joy - an article on the joy of writing software for fun (and learning!).

  ---

  That’s all for this time. Here’s an autogenerated a picture of a fan, because it was 35+ degree Celsius in Berlin in the last two days, and also I like it how AI depicts home appliances that defy laws of physics.

Subscribe now

Charity

There is a big ongoing fundraiser by DOU.ua for reconnaissance drones for the 3rd Assault Brigade. They have a dedicated website for it with more information (available in Ukrainian). Also, here’s a Monobank jar for direct donations:

• https://send.monobank.ua/jar/AGK8qiQwQX

Time Sensitive

• “Machine Learning AI and Bots” O’Reilly - 6 days left.

• “Cybersecurity and Forensics” by Pearson - also 6 days left.

• “Coding for Curious” by No Starch - 13 days left

Surveys

• 2025 Stack Overflow Developer Survey - an important global analysis of the industry! Make sure to add your voice there!

• DOU Salary Survey (in Ukrainian) - an important survey for the Ukrainian Tech industry. They also include voices of the Ukrainians abroad.

Digest

• How Big Technical Changes Happen at Slack - a truly timeless article by Slack on how they adapt new technologies. If you read a single article from this whole list, let it be this one!

• AI: What is the MCP? - a general overview of what is an MCP (model-context-protocol) with some code examples by Arseniy Zinchenko.

• AI: writing an MCP server for VictoriaLogs - the continuation of the previous article with a more concrete example. BTW, make sure to subscribe to Arseniy’s Subtack!

• Wardley Maps & Pace Layering for Senior Tech Leads and Engineering Leaders - another great blog from Alex Ewerlöf. He usually writes about higher-level topics, though.

• How we migrated onto K8s in less than 12 months - a story of how Figma migrated to Kubernetes with realistic timeframes.

• A postmortem from the recent Google API outage

Share

That’s all for now, folks! See y’all in about two weeks!

• It was a CatOps birthday this week! The channel has turned 8 years old 🎉
  For this occasion, we have opened a support-jar for Hospitallers!

• A fundraiser to buy a truck trailer for an UAV unit.

Subscribe now

Digest

• Rate Limiting in 1 diagram and 252 words - a short explainer of how rate limiting works with the list of some commonly used algorithms.

• Researchers Expose New Intel CPU Flaws Enabling Memory Leaks and Spectre v2 Attacks - the Spectre vulnerability for CPU is back. This time, an attacker can use eBPF to leak secrets.

• How PostgreSQL Works: Internal Architecture Explained - another explainer. This time about PostgreSQL. Apart from some minor nitpicks, this is a very good article to get a glimpse of how PostgreSQL works.

• On Describing Not Explaining - a real-life example of how to reason about incidents not by trying to guess, what could cause it, but by reasoning of what has actually happened.

• Kubeshark - a network analysis tool for Kubernetes.

• Ksniff - a Kubectl plugin to capture traffic.

• Hubble - an observability tool for Cilium.

• Capturing Network Traffic from a Kubernetes Pod with Ephemeral Debug Containers - how to run tcpdump in a debug container.

• How to TCPdump in Kubernetes - a hands-on lab regarding the topic above.

Share

That’s all for now. This has been a short digest, but at least it came out after two weeks, and not a month.

Substack does not allow more than 5 options for a poll, so I had to bisect the results a bit.

Subscribe now

Charity

We were mostly closing ad-hoc requests in these couple of weeks, but those units require continuous support nevertheless.

• Hospitallers. Website in English. Website in Ukrainian.

• A vehicle for the 5th Separate Storm Brigade

Time Sensitive

• Just one more day to acquire the DevOps 2025 books bundle by O’Reilly!

Digest

• Multi-platform Docker images with GoReleaser and GitHub Actions - a how-to article with a self-explanatory name.

• Use GitHub Container Registry (GHCR) to host your Helm Charts - a short guide of how to host your Helm charts in the GitHub registry (which is OCI compliant).

• Cost Exporter - a little tool I’ve created to expose the cost metrics from AWS Cost Explorer in the Prometheus format. CloudWatch integration is coming!

• 5 Simple Ways to Level Up Your Communication - at some point in your career, communication becomes crucial. This article provides some practical advices on how to become better in it.

• How we structure on-call rotations at Datadog - an article on how oncall is handled in DataDog.

• A way to pass arbitrary values in a Helm named template as parameters - GH answer number one, and the answer number two. The idea is the same, the second comment builds on top of the first one.

• Incident Report: Spotify Outage on April 16, 2025 - a public postmortem of the Spotify’s recent outage.

• Kubernetes v1.33 Fixes a 10-Year-Old Image Pull Loophole - the loophole is about pulling images. While it could have always been easy to mitigate, it’s nice that things like this one are fixed event after all these years.

• The whole playlist from KubeCon 2025 Europe!

Share

That’s all for now, folks! Please, do not forget to participate in my small poll!

Here’s a random photo of Berlin.