I've been spending the morning searching for viable alternatives for Bitnami's Redis Helm chart.
So far, the best option appears to just do it myself. There are not a lot of great options out there.
I've been spending the morning searching for viable alternatives for Bitnami's Redis Helm chart.
So far, the best option appears to just do it myself. There are not a lot of great options out there.
A grumpy ItSec guy walks through the office #2
devops0: dude, we've got so many roles in this cluster my terminal buffer runs out when I try to list them all.
devops1: bro, if it works, don't touch.
devops0: sure, but neither I nor anyone else on the project knows who can access what...
ItSec (walking by): just use rbac-tool and review this...
devops1: r... rba... what?
devops0: rbac-tool probably or smth
--
It's always a good moment to verify who can do what in your Kubernetes cluster.
For basic checks, use native kubectl:
1) Can "I" read secrets?
kubectl auth can-i get secrets
2) To check another identity's permissions (e.g., a ServiceAccount) run:
kubectl auth can-i get secrets --as=system:serviceaccount:somenamespace:someserviceaccount
However, this approach will not work for complex environments. There's a more effective way to do this with rbac-tool [2]. It gives you cluster-wide visibility with simple commands. Check this:
1) Who can do a specific thing? For example: who in the entire cluster can read Secrets?
rbac-tool who-can get secrets
2) Run an RBAC health check - global analysis with risk hints (wildcards in RBAC, overly broad permissions, cross-namespace binds, etc)
rbac-tool analysis
3) Visualize the mess - produce an interactive map of roles, bindings, etc:
rbac-tool visualize
This command writes a report to rbac.html in the current directory.
Alternatives to rbac-tool like rakkess [3] can offer similar "who can" insights, though it may not be actively maintained.
Stay (more) safe!
[1] https://kubernetes.io/docs/reference/kubectl/generated/kubectl_auth/kubectl_auth_can-i/
[2] https://github.com/alcideio/rbac-tool
[3] https://github.com/corneliusweig/rakkess
#Development #Reports
GitHub just got less independent · Microsoft is moving it even closer to its CoreAI team https://ilo.im/166261
_____
#Business #Microsoft #GitHub #CEO #AI #Repositories #DevOps #WebDev #Frontend #Backend
Aug 28, 10 AM PT / 1 PM ET – R Consortium webinar: Unlocking Collaborative Power with Git, GitHub CI/CD & LLMs in Pharma
Learn how pharma teams use GitHub Actions for automated QC, cut errors, and speed workflows—plus an LLM preview for QC edge cases.
Speakers: Ning Leng (Roche), Eli Miller (Atorus Research), and Ben Straub (GSK)
#Development #Guidelines
Betting against AI agents in 2025 · What already works in production today https://ilo.im/165vye
_____
#Programming #Engineering #AI #Agents #Automation #Production #DevOps #WebDev #Frontend #Backend
Messy Drupal deployments are stealing your time.
At Drupal GovCon, Bob McDonald will show you how to take it back.
One GitHub Actions workflow. Any host. No duplicate configs. No endless fixes. Just faster, cleaner deploys so you can focus on the work that matters.
Build smarter. Deploy faster. Sleep better.
My newsletter, "News From the Server Room", comes with a column on a specific topic, updates from my #DevOps membership community, and links to interesting engineering content.
Subscribe for free: https://monospacementor.com/devops-know-how/
So, I'm coming from Fortran mostly, moving to C++, and I've this explicitly vectorized Fortran code which runs column wise operations, e.g.:
a = input(:, 1) + input(:, 2)
Now, I'm wondering how to implement this the fastest using Rcpp/C++.
I can use (Rcpp)Armadillo to implement the implicit logic, or loop through vector elements. Since the overhead of flipping between the two is quite some work I would love someone's take up front.
A huge thank you to Elastic for supporting DevOpsDays London 2025!
Your partnership helps bring our amazing community together to share ideas, spark conversations, and inspire the future of DevOps.
We couldn’t do it without you!
https://3v-host.com/blog/how-to-build-a-kubernetes-cluster-from-three-vps-servers/
Learn how to build a Kubernetes cluster using three VPS servers! This step-by-step guide covers everything from server preparation to deploying your first application. Perfect for beginners looking to dive into container orchestration. #Kubernetes #VPS #DevOps
PSA: Python no longer behaves the same way in #Vercel Node 22.x images as it did in Node 18.x.
If you are using raw 'pip install -r requirements.txt' you'll need to switch over to 'source venv/bin/activate && pip install -r requirements.txt' or a similar pattern.
Took me a while to figure out last night.
Missed one of my past conference talks? Let’s fix that.
I’m sharing my favorites—packed with real-world advice, lessons, and a few laughs.
“DevSecOps with OWASP DevSlop” https://twp.ai/4ipX6g
Our Mastodon instance burningboard.net
Running on energy efficient arm64 CPU (Ampere Altra Q80-30) and just 16GB of RAM in a virtual machine.
Now running on latest Debain Linux 13 with Linux kernel 6.12.
For that little hardware footprint, it's quite performance, reliable and fast (with over 100 active users).
Just the media files are offloaded to S3 storage at our provider.
Join Torsten Hopf for this humorous, story-driven talk on a small app’s chaotic cloud journey—full of tempting tech, hard lessons, and costly mistakes Perfect for anyone navigating software architecture in the cloud.
Tickets: https://ti.to/devopsdays-london/2025
Protect user privacy while analyzing emotions. Learn how to build a fully local sentiment analysis service using Quarkus, LangChain4j, and Ollama—no API keys, no external dependencies. #LocalLLM #DevOps #Java
https://www.the-main-thread.com/p/sentiment-analysis-java-quarkus-langchain4j-local-llm
#introduction time. I'm Chopper Dave (pseudonym obviously) and have recently setup this #selfhosted instance.
I work in the IT sector, predominantly as a #sysadmin but dabble in #devops too.
In my free time I work on model kits. Airfix, Tamiya and #warhammer40k mainly. I play a lot of retro games and whittle away the hours working on the #homelab.
I like to post my creations and nature shots from my walks or gardening attempts.
Feel free to follow! Boosts appreciated but not required!
Migrating my last BIND DNS Server (resolver) to PowerDNS today. Already migrated the hidden-master and one of the primaries. Let's hope, that the final one also goes smooth and doesn't cause any issues