{"@attributes":{"version":"2.0"},"channel":{"title":"Mark Chmarny","link":"https:\/\/blog.chmarny.com\/","description":"Recent content on Mark Chmarny","generator":"Hugo -- gohugo.io","language":"en","managingEditor":"Mark Chmarny","lastBuildDate":"Mon, 08 Jun 2026 08:00:00 -0700","item":[{"title":"Staying Relevant Through Inflection Points","link":"https:\/\/blog.chmarny.com\/posts\/staying-relevant-through-inflection-points\/","pubDate":"Mon, 08 Jun 2026 08:00:00 -0700","guid":"https:\/\/blog.chmarny.com\/posts\/staying-relevant-through-inflection-points\/","description":"

Working for the leading AI company, people tend to ask you what AI means for their careers. Usually, they want to hear one of two extremes: “this changes nothing” or “we’re all doomed”. To be honest, I appreciate both. A lot of what I have spent learning over two plus decades is now just a prompt away. Hard-earned debugging skills and deep technical knowledge can be generated by a model in seconds. It’s uncomfortable to watch. But having your knowledge become cheap doesn’t mean you<\/em> become irrelevant. There is a huge gap between those two statements.<\/p>"},{"title":"DevPulse: Community Health Analytics for the Rest of Us","link":"https:\/\/blog.chmarny.com\/posts\/devpulse-community-health-analytics-for-the-rest-of-us\/","pubDate":"Tue, 17 Mar 2026 08:00:00 -0700","guid":"https:\/\/blog.chmarny.com\/posts\/devpulse-community-health-analytics-for-the-rest-of-us\/","description":"

If you maintain an open source project, you’ve probably wondered: who’s actually contributing? Are we retaining contributors or burning through a revolving door? Is one person carrying the whole project? These questions matter.<\/p>\n

Commercial platforms answer these questions well. They do come with trade-offs though. Hosted analytics means sending your potentially private repo contributor data to a third party. Pricing models often assume enterprise budgets. And for a maintainer running a project with a handful of repos and no funding, the friction of setting up yet another SaaS integration is enough to never bother.<\/p>"},{"title":"AI Cluster Runtime: Reproducible Configs for GPU-Accelerated Kubernetes Clusters","link":"https:\/\/blog.chmarny.com\/posts\/ai-cluster-runtime-reproducible-configs-for-gpu-accelerated-kubernetes\/","pubDate":"Thu, 12 Mar 2026 09:30:00 -0700","guid":"https:\/\/blog.chmarny.com\/posts\/ai-cluster-runtime-reproducible-configs-for-gpu-accelerated-kubernetes\/","description":"

GPU Kubernetes is hard. Aligning kernels, drivers, container runtimes, operators, and Kubernetes versions is a version compatibility minefield. A single misconfigured component can take down an entire GPU fleet, and root cause analysis can take days. Typically, these known-good configurations live as tribal knowledge in “runbooks” and internal pipelines, not as portable, reproducible artifacts.<\/p>"},{"title":"Reputation scoring for open source contributors: what reputer measures and why","link":"https:\/\/blog.chmarny.com\/posts\/reputer-scoring-contributor-reputation\/","pubDate":"Sat, 21 Feb 2026 00:00:00 +0000","guid":"https:\/\/blog.chmarny.com\/posts\/reputer-scoring-contributor-reputation\/","description":"

Every dependency you install, every pull request you merge, carries an implicit trust decision. You trust that the person behind the commit is who they claim to be, that their account hasn’t been compromised, and that their contribution is genuine. Most of the time, that trust is warranted. But supply chain attacks like the xz utils backdoor<\/a> remind us that trust without verification is a vulnerability.<\/p>"},{"title":"About Mark Chmarny","link":"https:\/\/blog.chmarny.com\/about\/","pubDate":"Sun, 03 Nov 2024 00:00:00 +0000","guid":"https:\/\/blog.chmarny.com\/about\/","description":"

Builder, architect, and strategist dedicated to simplifying how developers interact with complex systems. Currently serving as a Principal Cloud Architect in NVIDIA\u2019s DGX Cloud organization, Mark focuses on bridging the gap between cutting-edge AI hardware and the cloud-native ecosystem. His mission is to enable optimized, validated, and reproducible GPU-accelerated infrastructure in Kubernetes for everyone.<\/p>"},{"title":"Leaving Cruise; why I'm still excited about AI platforms","link":"https:\/\/blog.chmarny.com\/posts\/leaving-cruise\/","pubDate":"Fri, 16 Feb 2024 19:12:38 -0800","guid":"https:\/\/blog.chmarny.com\/posts\/leaving-cruise\/","description":"

Today marks a bittersweet moment as I say goodbye to Cruise<\/a>. When I joined the company seven months ago, my mission was to scale the AV services worldwide and to modernize the AV and Cloud service developer platforms. Despite the unexpected challenges following the October incident<\/a>, my journey at Cruise has been incredibly enriching, teaching me the true essence of resilience, adaptability, and commitment to excellence.<\/p>"},{"title":"Provenance, transparency, and context, the three aspects of software supply chain security you can implement today","link":"https:\/\/blog.chmarny.com\/posts\/provenance-transparency-context-3-aspects-of-s3c-you-can-implement-today\/","pubDate":"Wed, 14 Jun 2023 08:57:57 -0700","guid":"https:\/\/blog.chmarny.com\/posts\/provenance-transparency-context-3-aspects-of-s3c-you-can-implement-today\/","description":"

The practice of Secure Software Supply Chain (S3C) can get complex at times. Fortunately though, a large portion of the key things we can do to secure our software delivery pipelines are actually pretty easy. This post covers three concepts you can implement today:<\/p>"},{"title":"Software supply chain data fatigue and what I\u2019ve learned from SBOM, vulnerability reports","link":"https:\/\/blog.chmarny.com\/posts\/automating-software-supply-chain-security\/","pubDate":"Wed, 11 Jan 2023 07:09:34 -0800","guid":"https:\/\/blog.chmarny.com\/posts\/automating-software-supply-chain-security\/","description":"

If you are doing any vulnerability detection in your software release pipeline today, you are already familiar with the volumes of data these scanners can generate. That dataset gets significantly larger when you add things like license scanning and Software Bill of Materials<\/a> (SBOM) generation. That volume of data gets further compounded with each highly-automated pipeline you operate. This can quickly lead to what I refer to as a Software Supply Chain Security (S3C) data fatigue, as many vulnerabilities you\u2019ll discover you simply can\u2019t do anything about. There is an actionable signal in there actually, it\u2019s just hard to find it in the midst of all the noise.<\/p>"},{"title":"Twitter follower status monitoring made easy using TweeThingz","link":"https:\/\/blog.chmarny.com\/posts\/twitter-follower-activity-monitoring-using-tweethingz\/","pubDate":"Sun, 30 Jan 2022 09:13:38 -0800","guid":"https:\/\/blog.chmarny.com\/posts\/twitter-follower-activity-monitoring-using-tweethingz\/","description":"

Twitter does provide notifications for when new users start following you. It does now however provide any notifications when users stop following you. Now, there is an ample of web sites out there who do provide that service, in most cases though, they cost money, and ask you for a complete access to your Twitter account.<\/p>"},{"title":"Reproducible OpenID connect to GCR for GitHub Actions workflows using Terraform","link":"https:\/\/blog.chmarny.com\/posts\/reproducible-github-workflow-openid-connect-for-gcp-using-terraform\/","pubDate":"Sat, 29 Jan 2022 16:12:38 -0800","guid":"https:\/\/blog.chmarny.com\/posts\/reproducible-github-workflow-openid-connect-for-gcp-using-terraform\/","description":"

The recently introduced by GitHub support for OpenID Connect<\/a> (OIDC) tokens in GitHub Actions<\/a> allows workflows to mint new tokens and then exchange those tokens for short-lived OAuth 2.0 or JWT tokens. These tokens can be used to access and manage Cloud resources. This is all done without the need to store the traditional long-lived service account keys in a form of GitHub secrets.<\/p>"},{"title":"Multi Region REST Service on GCP using GitHub Template","link":"https:\/\/blog.chmarny.com\/posts\/multi-region-rest-service-on-gcp\/","pubDate":"Wed, 05 Jan 2022 15:43:56 -0800","guid":"https:\/\/blog.chmarny.com\/posts\/multi-region-rest-service-on-gcp\/","description":"

I learn best by doing. And recently, most of the projects I’ve been building are either REST or gRPC-base services deployed as container images into Cloud Run on GCP. That means that I increasingly find myself recreating a lot of the same infra and app deployment flows.<\/p>"},{"title":"Medium to GitHub using Hugo - Why and How I Migrated my Blog","link":"https:\/\/blog.chmarny.com\/posts\/medium-to-hugo-why-and-how\/","pubDate":"Mon, 03 Jan 2022 13:51:00 +0000","guid":"https:\/\/blog.chmarny.com\/posts\/medium-to-hugo-why-and-how\/","description":"

Why not Medium<\/h2>\n

My main reason for migrating off Medium was the paywall<\/a> Medium introduced while back. I actually understand why they did it. The unlimited access price: $5\/month ($50\/year) is too high, but still, I get it.<\/p>\n

For me though, the objective was to allow readers to easily discover and read my posts. I don’t want my readers to experience any friction. Forcing the reader to deal with the frustrating Medium up-sell pop-ups just to read my post was just unnecessary.<\/p>"},{"title":"Custom news scraper using free services from GitHub, Firebase, and Sengrid","link":"https:\/\/blog.chmarny.com\/posts\/custom-news-scraper-using-free-services-from-github-firebase-sengrid\/","pubDate":"Mon, 05 Apr 2021 01:09:03 +0000","guid":"https:\/\/blog.chmarny.com\/posts\/custom-news-scraper-using-free-services-from-github-firebase-sengrid\/","description":"

Increasing large amount of technical news I read come from the posts shared on Hacker News or on Twitter. While both of these services have search options<\/a>, neither of these seem to be advanced enough to narrow my searches at the desired level or to setup automatic delivery.<\/p>"},{"title":"Complexity can be learned but abstractions come at a long-term cost","link":"https:\/\/blog.chmarny.com\/posts\/complexity-can-be-learned-but-abstractions-come-at-long-term-cost\/","pubDate":"Tue, 30 Mar 2021 19:35:48 +0000","guid":"https:\/\/blog.chmarny.com\/posts\/complexity-can-be-learned-but-abstractions-come-at-long-term-cost\/","description":"

All complexity needs to be abstracted, right? This reductionist statements misses nuance around the inherent cost\/benefit tradeoffs, especially when you consider these over time.<\/p>\n

Don\u2019t get me wrong, there often are good reasons for additional layers to make things simpler (grow adoption, lowering toil, removing friction, etc.). Still, these layers come at the long-term cost that\u2019s often is not a part of the evaluation process.<\/p>"},{"title":"How I learned Dapr building tweet sentiment processing pipeline","link":"https:\/\/blog.chmarny.com\/posts\/how-i-learned-dapr-building-tweet-sentiment-processing-pipeline\/","pubDate":"Sun, 10 May 2020 00:05:16 +0000","guid":"https:\/\/blog.chmarny.com\/posts\/how-i-learned-dapr-building-tweet-sentiment-processing-pipeline\/","description":"

I recently joined the Office of CTO in Azure at Microsoft and wanted to ramp up on one of the open source projects the team has built there called Dapr. Dapr describes itself<\/a> as:<\/p>\n

\n

A portable, event-driven runtime that makes it easy for developers to build resilient, microservice stateless and stateful applications that run on the cloud and edge and embraces the diversity of languages and developer frameworks.<\/p>"},{"title":"Renaissance of custom vertical solution","link":"https:\/\/blog.chmarny.com\/posts\/renaissance-of-custom-vertical-solution\/","pubDate":"Wed, 19 Feb 2020 18:49:19 +0000","guid":"https:\/\/blog.chmarny.com\/posts\/renaissance-of-custom-vertical-solution\/","description":"

We are entering a period where custom, highly-optimized, vertical solutions are becoming viable option again. This is a good news for ISVs with proven domain expertise and skilled development resources.<\/p>\n

Why do I think so? We now have:<\/p>\n

    \n
  1. Plethora of feature-rich developer frameworks, message queues, scalable data stores, and even lower-level components in the OSS community with great documentation and a large number of use-case validation<\/li>\n
  2. Growing number of custom solution companies (more than just ISVs) with existing deep vertical\/domain expertise who are also increasingly now investing in hiring and training strong development teams<\/li>\n
  3. Virtually every Cloud provider offering either a raw Kubernetes service or managed container execution platform which (regardless how you feel about these technologies) creates ubiquitous surface area that can be addressed with a single solution<\/li>\n<\/ol>\n

    Yes, there still are many ways in which these custom development efforts can fail. Still, as one who has started their professional career developing custom software, I\u2019m glad to see how these kinds of efforts are becoming cost effective again and increasingly represent a viable option for differentiation and real business value delivery.<\/p>"},{"title":"How to debug container image content","link":"https:\/\/blog.chmarny.com\/posts\/how-to-debug-container-image-content\/","pubDate":"Tue, 27 Aug 2019 22:20:44 +0000","guid":"https:\/\/blog.chmarny.com\/posts\/how-to-debug-container-image-content\/","description":"

    When dealing with file permissions in a non-root image or building apps that include static content (like css or templates), I sometime get an error resulting from the final image content mismatch with my expectations.<\/p>\n

    Most of the time the errors are pretty obvious, simple fix and rebuild will do. Sometimes though, you want to take a look into the image and understand what the actual layout looks like in there.<\/p>"},{"title":"How to run containerized workloads in GCE VM","link":"https:\/\/blog.chmarny.com\/posts\/how-to-run-containerized-workloads-in-gce-vm\/","pubDate":"Wed, 21 Aug 2019 22:10:24 +0000","guid":"https:\/\/blog.chmarny.com\/posts\/how-to-run-containerized-workloads-in-gce-vm\/","description":"

    While the idea of a serverless platform and long running workloads does seem somewhat “unnatural” at first, smart people are already working on that (looking at you @Knative<\/a> community). In the meantime, a simple approach is sometimes all you may need.<\/p>"},{"title":"Using Flick buttons with Cloud Run on GCP","link":"https:\/\/blog.chmarny.com\/posts\/using-flick-buttons-with-cloud-run-on-gcp\/","pubDate":"Mon, 03 Jun 2019 12:41:23 +0000","guid":"https:\/\/blog.chmarny.com\/posts\/using-flick-buttons-with-cloud-run-on-gcp\/","description":"

    A co-worker recently told me about flic.io<\/a> buttons. These button caught my attention because they can include triggers for single, double, or hold click and can be easily wired up to all kinds of actions.<\/p>\n

    I instantly thought of of a few really interesting applications. To start with though, I wanted to create a simple service that would allow me to push the custom data defined on each button over HTTP to Cloud PubSub. That in turn would then connect me to the many more actuation options through GCP APIs and services that connect to Cloud PugSub.<\/p>"},{"title":"My Sessions at Google Next 2019","link":"https:\/\/blog.chmarny.com\/posts\/my-sessions-at-google-next-2019\/","pubDate":"Sun, 07 Apr 2019 16:30:01 +0000","guid":"https:\/\/blog.chmarny.com\/posts\/my-sessions-at-google-next-2019\/","description":"

    Next week, April 9\u201311, Google will be hosting this year\u2019s Cloud Next Conference<\/strong><\/a> in San Francisco. The conference is already sold out, but there will be a livestream<\/a> from keynotes and video available shortly after the sessions.<\/p>\n

    This year, we have a lot of content to share, and I have the privilege of presenting in four sessions<\/a>\u200a\u2014\u200aand hope to do at least six live demos.<\/p>"},{"title":"Knative - Serverless on Your Own Terms","link":"https:\/\/blog.chmarny.com\/posts\/knative-serverless-on-your-own-terms\/","pubDate":"Fri, 29 Mar 2019 02:42:02 +0000","guid":"https:\/\/blog.chmarny.com\/posts\/knative-serverless-on-your-own-terms\/","description":"

    I had a chance to speak at the Cloud Conf 2019 in Turin, Italy. The conference has double its audience from last year, had a spectacular venue, and large selection of topics. I spoke in the #serverless track on using Knative as a means to serverless where you want it and on your own terms. Stressing the importance of portability and demonstrating the key features that the Kantive community has already delivered.<\/p>"},{"title":"Knative momentum continues\u2026","link":"https:\/\/blog.chmarny.com\/posts\/knative-momentum-continues\/","pubDate":"Mon, 10 Dec 2018 19:02:44 +0000","guid":"https:\/\/blog.chmarny.com\/posts\/knative-momentum-continues\/","description":"\n

    I wrote a new post<\/a> on Google blog on the momentum behind the Knative<\/a> project. How it the community reached another adoption milestone, doubling the number of its contributors. Also, another data point underscoring the Knative momentum is the month-over-month contributions which have increased over 45% since the 0.1 release, now representing more than a dozen of different companies.<\/p>"},{"title":"My Keynote at SpringOne","link":"https:\/\/blog.chmarny.com\/posts\/my-keynote-at-springone\/","pubDate":"Sat, 29 Sep 2018 18:59:14 +0000","guid":"https:\/\/blog.chmarny.com\/posts\/my-keynote-at-springone\/","description":"

    I had an opportunity to keynote at this year\u2019s SpringOne<\/a> conference in DC on Serverless, Kubernetes<\/a>, and more specifically Knative<\/a>.<\/p>\n