While setting up AWS’s managed Kubernetes service, many security administrators probably realized that true Zero Trust security wouldn’t be possible if outbound K8s traffic still must flow over the AWS backbone to ...

For years, the DevSecOps movement has operated on a foundational premise that if you detect a vulnerability, you triage it, patch it, and redeploy. This cycle assumes that our capability to remediate ...

Linkerd 2.20 maintainer Buoyant claims it has slashed control plane memory usage by 85% in this version. If you want a lean, mean cloud-native mesh, Linkerd is for you. This latest release ...

Minimus today announced it is making its entire catalog of hardened container images available for free without requiring an application developer to even register to download them ...

Upbound today revealed it has extended an instance of the open source control plane it developed to enable IT teams to manage inference engines running artificial intelligence (AI) models ...

GitOps won the deployment argument. Everything goes in Git, the cluster reconciles itself to match, and your repository becomes the one place that tells you what’s actually running. It’s clean and auditable ...

Google has created OpenRL to manage the fine-tuning of large language models (LLMs) in much the same way its Kubernetes container orchestrator streamlines the management of containers. An open source project from ...

A scalable CI/CD pipeline on GitLab and Google Kubernetes Engine starts with one decision: do you treat the pipeline as a delivery system you design, or as a YAML file you copy ...

I’ve spent the better part of the last few years on the receiving end of Kubernetes pages, both as an operator and as someone building tooling for platform teams. The pattern I’ve ...

Most Kubernetes admission webhooks treat security as binary: accept the configuration, or reject it. That binary thinking has matured an entire category of policy engines (OPA Gatekeeper, Kyverno, ValidatingAdmissionPolicy with CEL) that ...