TLDR DevOps 2025-02-26

Designs API systems, and the evolution of these systems to meet ever-growing needs
Transforms its monolith into a flexible architecture across a burgeoning supergraph
Advances their API strategy to build great products through consistent, resilient, contract-focused APIs.
Simplifies API orchestration with GraphQL federation in achieving Netflix's world-famous performance outcomes.

📱

News & Trends

Announcing the Kubernetes “Shift Down” Security Paper (2 minute read)

The CNCF Kubernetes Policy WG has released the Shift Down Security paper, which offers guidance on using cloud-native technologies like Policy as Code to prevent misconfigurations and automate security across applications.

Claude 3.7 Sonnet and Claude Code (5 minute read)

Claude 3.7 Sonnet is Anthropic's most advanced model, featuring hybrid reasoning for quick or deep-thinking responses, with enhanced coding capabilities and fine-grained API control over response depth. Alongside its release, Anthropic introduced Claude Code, an agentic coding tool enabling developers to automate substantial engineering tasks directly from the command line.

🚀

Four Methods to Access Azure Key Vault from Azure Kubernetes Service (AKS) (20 minute read)

This post covers different methods for accessing Azure Key Vault secrets within Azure Kubernetes Service (AKS). These approaches include using Azure Identity, Secrets Store CSI driver, Dapr, and the External Secrets Operator to securely manage and retrieve secrets for applications running in AKS.

ClickHouse Reports 25% Performance Gain after Migrating Cloud Workloads to AWS ARM Instances (2 minute read)

In this post, ClickHouse shares its successful migration strategy to AWS Graviton instances, which resulted in a 25% performance improvement. The migration involved adapting a mixed-instance strategy, handling ARM-specific compatibility issues, and optimizing autoscaling, which collectively helped improve performance and reduce costs.

How Core Git Developers Configure Git (13 minute read)

Git developers adjust certain configuration settings for a better user experience, improving branch sorting, diffs, fetch behavior, push tracking, and merge conflict handling. Many of these settings could be defaults, but Git maintains a conservative approach, leaving them user-configurable.

🧑‍💻

Snowflake Cost Savings Calculator (Sponsor)

SaaS leaders know Snowflake costs add up. Stop the blizzard and cut those costs! Qrvey optimizes analytics queries by combining multiple data sources into single dashboards, minimizing data warehouse queries. Most SaaS customers save over 50%. Try the free Snowflake Cost Calculator today to see how much you can save.

fly-to-podman (GitHub Repo)

fly-to-podman migrates Docker containers, images, and volumes to Podman while preserving container data and configurations.

Dropshot (GitHub Repo)

Dropshot is a general-purpose crate for exposing REST APIs from a Rust program.

🎁

Miscellaneous

Kubernetes Best Practices I Wish I Had Known Before (9 minute read)

This post provides a comprehensive guide to essential Kubernetes best practices, covering topics such as resource management, security, monitoring, automation, and deployment strategies. It aims to help users avoid common pitfalls and optimize their Kubernetes workflows with practical tips and tools.

Kubernetes Gets a New Resource Orchestrator in the Form of Kro (10 minute read)

Kro is a new open-source tool developed collaboratively by AWS, Google, and Microsoft to simplify Kubernetes deployment and management by grouping resources into reusable units using a structured YAML format. It automates dependencies and offers a more efficient alternative to Helm and Kustomize, reducing Kubernetes complexity for developers and operations teams.

⚡

Automate pull request descriptions in Azure DevOps with Azure OpenAI (9 minute read)

This blog demonstrates how to automate pull request descriptions in Azure DevOps using Azure OpenAI's large language models, specifically GPT-4o, to summarize code changes.

How Meta is translating its Java codebase to Kotlin (38 minute podcast)

In this post, Meta's Mobile Infra Codebases Team discusses their migration of tens of millions of lines of Android code from Java to Kotlin on the Meta Tech Podcast, detailing challenges like nullability and generating idiomatic code for internal frameworks.

Extending Falco for Bitcoin (4 minute read)

In this post, Sysdig demonstrates Falco's extensibility by creating a plugin to monitor real-time Bitcoin transactions, showcasing its ability to detect suspicious wallet activity through customizable rules.

Love TLDR? Tell your friends and get rewards!

Share your referral link below with friends to get free TLDR swag!

Want to advertise in TLDR? 📰

If your company is interested in reaching an audience of devops professionals and decision makers, you may want to advertise with us.

Want to work at TLDR? 💼

Apply here or send a friend's resume to jobs@tldr.tech and get $1k if we hire them!

If you have any comments or feedback, just respond to this email!

Thanks for reading,
Kunal Desai & Martin Hauskrecht

Manage your subscriptions to our other newsletters on tech, startups, and programming. Or if TLDR DevOps isn't for you, please unsubscribe.