A Deep Dive Into Sensitive Data Detection — Static code analysis is more and more applied in workflows to detect and rectify potential code defects, ensuring code quality and security. The earlier static analysis is integrated, the more reduced maintenance costs and security risks. …

It is more and more popular to define settings for applications, microservices, or Kubernetes resources with configuration files like YAML (Yet Another Markup Language). Although it is convenient, it can also put companies at huge risk if sensitive information like database passwords and API keys the YAML files contain is…

Explore usages of Go Closure, understand its internal implementation, and avoid traps — Go closure is a fascinating feature that allows functions to capture and carry their surrounding context. This enables the creation of dynamic, self-contained functions, known as closures. They are widely used for callback functions, memoization, and encapsulating private states. By applying closure, developers can achieve concise and flexible code. However…

yq already has abundant operators that cover most scenarios, but sometimes some unique operators are still needed, such as in scenarios with generic operations like sort, has, contains, or in complex scenarios where we must write complex expressions that frequently combine multiple operators. Take the insert operator as an example…

Let’s go through the yq source code to better understand it — As one of the best tools for processing YAML files, yq is very “active” in cloud developers' toolboxes. However, the usage, syntax, and test of yq operators still confuse many users, especially when handling complex YAML files, where writing yq expressions is extremely hard. …

A comprehensive overview of the Go 1.20 and 1.21 API enhancements — Go is soon striding to the 1.21 era while I still use Go 1.19 locally. I think upgrading every six months is too frequent, but following closely on the new versions and trying the new features can always ensure a smooth transition once you switch to the latest version. I…

With the higher application complexity and growing distributed deployments, real-time observability and troubleshooting capability are in greater requirement. eBPF offers an excellent option with safe and efficient technology, balancing security, flexibility, and performance. Observability in eBPFs eBPFs obtain system-level details by inserting code into the Linux kernel dynamically, avoiding the frequent switching between…

Explore details on anonymous struct and interface — When reading through Kubernetes open-source code, we will always see those familiar faces and anonymous fields. admission.Request in controller-runtime is a struct including anonymous fields. type Request struct { admissionv1.AdmissionRequest } Anonymous field is unique and a feature shared by Go and Rust only, but not languages like Python or…

ChatGPT facilitates Kubernetes coding but with drawbacks — ChatGPT is taking the world by storm. Overnight, developers, designers, and product managers, or we can say, people from all over the world, are constantly testing its features and challenging its limit. I am one of those who dip their toes into the pool to see how ChatGPT can help…