Webnode.dev

Vývojáři z Webnode na síti :)

[Nandkishor @devops_nk]

Pod Affinity & Anti-Affinity are powerful Kubernetes scheduling features that control where pods run.

✅ Pod Affinity tells Kubernetes:
"Schedule this pod close to specific pods."
Useful when services frequently communicate and you want lower latency.

❌ Pod Anti-Affinity tells Kubernetes:
"Do not schedule this pod near similar pods."
Useful for spreading replicas across nodes to improve high availability and fault tolerance.

Example:
If a node fails and all replicas are on the same node, your application goes down. Anti-Affinity prevents that by distributing replicas across multiple nodes.

Affinity = Keep related workloads together
Anti-Affinity = Spread workloads apart

A simple scheduling rule that can improve both performance and reliability.

[Milan Felix Šulc @xf3l1x]

Na @Pehapkari jsem mluvil o AI DevStacku, ktery je AI-ready, funguje skvele v @OrbStack. Mate tak pripraveny stack na nejruznejsi prototypovani.

Budu rad, kdyz mrknete na video (https://t.co/bNYd20rp01) a taky na Github (https://t.co/17SKv3G08o).

[International Cyber Digest @IntCyberDigest]

‼️🚨 BREAKING: Another supply chain attack. 700+ GitHub repositories flagged, including PHP and Node.js projects. The malicious script was planted across all of them. When a developer installs the package, the script silently downloads a Linux file from GitHub, hides it under the name /tmp/.sshd (so it looks like a normal system file), and runs it in the background. It also skips security checks on the download and hides any error messages.

8 PHP packages on Packagist (the main PHP code library) were confirmed infected. The attacker hid the script inside a JavaScript config file (package.json) instead of the PHP one (composer.json), so PHP developers reviewing their code would not notice it. The biggest risk is to devdojo/wave (6,400 stars) and devdojo/genesis (9,100 installs), both popular Laravel project templates. Developers who use these templates run the bad script the moment they install dependencies.

The same payload was also dropped into GitHub Actions (automated build pipelines) under a fake step called "Dependency Cache Sync," meaning it could infect company build servers too. Packagist removed the bad packages, but the auto-updating versions (dev-main, dev-master, 3.x-dev) can quietly come back if the original repos stay infected.

IOCs:
GitHub account parikhpreyash4
repo systemd-network-helper-aa5c751f
drop path /tmp/.sshd
command fragments curl -skL and chmod +x /tmp/.sshd.

[Tom Dörr @tom_doerr]

Self-hosted automation for the entire TLS certificate lifecycle

https://t.co/oYn3IPegsY

[LearnKube @learnk8s]

Kor is a tool to discover unused Kubernetes resources

Currently, Kor can identify and list unused:

- ConfigMaps
- Secrets
- Services
- ServiceAccounts
- Deployments
- Statefulsets
- Roles

➤ https://t.co/CYO48yrlbC

[Rohit Ghumare @ghumare64]

Learn DevOps by playing games 🎮

1. Kubernetes
https://t.co/6Xz5Bb3ugA

2. DevOps
https://t.co/JzrPfmPrWs

2. Linux
https://t.co/hT6Xkaa7D8

3. Git
https://t.co/Ay4nXTApkm

4. Python
https://t.co/mGAMKY2dWp

5. 25+ programming languages
https://t.co/TI3vAufdjO

[Vojtěch Mareš @vojtechmares_]

Spravuju si GitOps repozitář pomocí Claude Code.

Napsal jsem si pre-stop hook, aby si vše validoval pomocí kubectl a argocd CLI a vše bylo 'zelené' (synced & healthy) než skončí.

Funguje to skvěle, fixnulo si to bug, o kterém jsem ani nevěděl a nemusel jej vůbec řešit. ❤️👌

[Alexandre Daubois @alexdaubois]

#PHP streams have a built-in notification system.

Set a callback in the stream context. Get called on CONNECT, MIME_TYPE, FILE_SIZE, PROGRESS, COMPLETED.

Download progress bars. In pure PHP. No curl_setopt. No ReactPHP.

This callback has existed since PHP 5.2!

[What's New on AWS (Unofficial) @awswhatsnew]

Amazon CloudWatch now supports OpenTelemetry metrics in public preview

Amazon CloudWatch now supports native OpenTelemetry (OTel) metrics in public preview, enabling you to send metric... https://t.co/XlslLd8JGe

[Ayaan 🐧 @twtayaan]

🚨 AWS DevOps Agent is finally here!

On March 31, 2026, AWS DevOps Agent became generally available.

This is actually a big deal.

It can:

→ Generate CI/CD pipelines
→ Debug failed deployments
→ Suggest infrastructure changes
→ Analyze logs and incidents
→ Help with Terraform & CloudFormation
→ Recommend cost optimizations
→ Explain AWS architecture issues

Basically, it’s like having a junior DevOps engineer inside AWS.

DevOps is slowly becoming AI-assisted operations.

Source: https://t.co/PMNbPPF4lW

[Tom Dörr @tom_doerr]

Kubernetes security learning cluster

https://t.co/EcMynenWfS

[Kemo @delalick]

https://t.co/EQv0P4wY1O showed what was wrong with PHP.

haPHPiness shows what's right.

67 features from PHP 5.4 → 8.5 that genuinely make developers happy. Code examples, version info, the works.

https://t.co/Ukmn4vHGvh

#PHP #phpc

[argoproj @argoproj]

Secrets management in GitOps finally has a clear path forward 🔐

Kostis Kapelonis is breaking down the new Argo CD 3.x recommendation for handling secrets in Kubernetes — and comparing all the popular solutions: sealed-secrets, SOPS, External Secrets Operator, CSI drivers, and more.

"GitOps and Secrets: State of the Union" — happening now at #KubeConEU in G102-103.

[Brent @brendt_gd]

This has potential to be huge

[Darryl Ruggles @RDarrylR]

AWS now offers #ArgoCD as a managed capability directly inside the Elastic Kubernetes Service (EKS) console, which quietly removes a lot of the setup and maintenance overhead that comes with self-hosting it. If you're running #GitOps workflows on #EKS, this is worth knowing about.

The article below covers the full path from spinning up an EKS cluster with Terraform to enabling ArgoCD through the console. There are no Helm installs involved and no manual pod management is required. The article also discusses some of the tradeoffs with this setup including where the managed option falls short.

Shrihari Haridas has provided clear steps and screenshots for the setup. Check it out if your team wants low-maintenance GitOps on EKS without getting buried in the initial setup work.

https://t.co/m8F7fajygi

[Vojtěch Mareš @vojtechmares_]

O Ingress-NGINXu a jeho koci jsem se rozepsal na blogu.

Jednak že bude končit (https://t.co/CiVaAinjdo) a pak čím jsem ho nahradil (https://t.co/qfnvHzfT04).

[Tom Dörr @tom_doerr]

SRE agent for root cause investigation

https://t.co/C5m90v13R5

[Kubernetes @kubernetesio]

The Kubernetes Dashboard was officially retired and archived on January 21, 2026.

To continue providing a modern, extensible web UI for the community, the project now recommends transitioning to Headlamp.

Now under SIG UI, Headlamp is a user-friendly tool for managing and troubleshooting your clusters.

Check out the project and docs here:
🔗 https://t.co/7e4hDAOJFd

[What's New on AWS (Unofficial) @awswhatsnew]

Amazon RDS now supports backup configuration when restoring snapshots

Amazon Relational Database Service (RDS) and Amazon Aurora now offer greater flexibility for restore o... https://t.co/UI0aQmcgKM