Allow loading remote contents and showing images to get the best out of this email.FAUN.dev's Kubernetes Weekly Newsletter
 
🔗 View in your browser.   |  ✍️ Publish on FAUN.dev   |  🦄 Become a sponsor
 
Allow loading remote contents and showing images to get the best out of this email.
Kaptain
 
#Kubernetes #Docker #DistributedSystems
 
 
📝 The Opening Call
 
 
Developers, brace yourselves—Kubernetes is morphing faster than ever with explosive pod resizing and a facelift on security guardrails, while AWS plays catch-up with snappy cross-account wizardry. Meanwhile, imagine AI smoothing out your Docker dance moves or adopting Argo's spellbinding workflows to give your CI/CD pipelines a rockstar edge. Dive in for more tech intrigue that challenges the status quo.


🌀 Multitenant Kubernetes: Kafkian SplitDNS Chronicles

🔒 AWS EKS's Security Snafu: Trend Micro's Eye-Opener

📚 GitOps Magic: Kubernetes with Nixidy & ArgoCD

💡 Kernel-level Insights: eBPF & Cilium's Tetragon

🎉 Kubernetes 1.33 Magic: Drama-Free Pod Resizing

🐧 nsenter: Your Backstage Pass to Kubernetes Nodes

🚪 Gateway API Awesomeness: Modernizing EKS Networking

🧪 The Ultimate K8s Home Lab Guide: DIY Dream

📦 Embedding AI Models: Docker’s Model Runner Meets OCI Artifacts

Kubernetes 2.0 Dream: Scaling Sans YAML Quirks


Read. Innovate. Then disrupt the norm.
Have a great week!
FAUN Team
 
 
⭐ Patrons
 
manageengine.com manageengine.com
 
Unify DevOps monitoring with end-to-end APM
 
 
See everything. Fix anything. Deliver more.Break down silos and gain deep visibility across your entire stack—from application code to infrastructure. ManageEngine Applications Manager empowers DevOps teams to detect issues faster, optimize performance, and deliver seamless digital experiences. Transform your operations Download now!
 
 
👉 Spread the word and help developers find you by promoting your projects on FAUN. Get in touch for more information.
 
ℹ️ News, Updates & Announcements
 
crn.com crn.com
 
AWS’ EKS Kubernetes ‘Critical Security’ Flaw Exposes Credentials, Says Trend Micro
 
 
Trend Micro blows the lid off Amazon's EKS snafu—misconfigured Kubernetes containers brazenly leaking AWS credentials. Cue privilege escalation chaos. AWS shrugs, hiding behind the "Shared Responsibility" mantra. Trend Micro, undeterred, sounds the alarm: secure those configurations, and embrace the gospel of least privilege.
 
 
f5.com f5.com
 
F5 Unleashes Innovation with Powerful New AI Capabilities on BIG-IP Next for Kubernetes on NVIDIA BlueField-3 DPUs
 
 
The Model Context Protocol (MCP) just crashed the party, turning heads and flipping tables with its focus on tailor-made AI setups. Enter AI factories and Neoclouds—souped-up cloud havens crafted to power-hungry AI demands. Handle with care, because these bad boys redefine what's possible.
 
 
aws.amazon.com aws.amazon.com
 
Amazon EKS Pod Identity streamlines cross account access
 
 
Amazon EKS Pod Identity just got an upgrade. Now you can tap into cross-account access using IAM role chaining. Forget intricate setups and tiresome code changes. Drop in source and target IAM roles, and let EKS juggle temp credentials at runtime. It's innovation doing a happy dance.
 
 
cloud.google.com cloud.google.com
 
GKE Data Cache, now GA, accelerates stateful apps
 
 
GKE Data Cache supercharges PostgreSQL on GKE. Imagine squeezing out 480% more transactions per second and slashing latency by 80%. It's like a balancing disk on steroids—Qdrant search gets a 10x boost, even without cramming everything into memory. Impressive, right?
 
 
kubernetes.io kubernetes.io
 
Changes to Kubernetes Slack
 
 
The Kubernetes gang will cling to their premium Slack status a while longer. But come 2025, free Slack will beckon. Discord’s got its eye on the scene too, whispering sweet promises of GitHub sync and other shiny toys.
 
 
itnext.io itnext.io
 
Kubernetes 1.33: Resizing Pods Without the Drama (Finally!)
 
 
Kubernetes 1.33 brings in-place pod vertical scaling, allowing you to adjust CPU and memory without restarting pods, a game-changer for seamless resource management in production workloads. This feature simplifies vertical pod autoscaling especially for stateful workloads like databases.
 
 
msn.com msn.com
 
F5, Inc Announces New Capabilities for F5 BIG-IP Next for Kubernetes
 
 
F5, Inc. announced new capabilities for F5 BIG-IP Next for Kubernetes in collaboration with NVIDIA Corporation. The F5 BIG-IP Next for Kubernetes will be accelerated with NVIDIA’s BlueField-3 DPUs and the NVIDIA DOCA software framework.
 
 
👉 Enjoyed this?Read more news on FAUN.dev/news
 
🐾 From FAUNers
 
faun.pub faun.pub
 
Modernizing EKS Networking with AWS Gateway API Controller
 
 
The Kubernetes Gateway API leaves the outdated Ingress API in the dust, handling an array of protocols—HTTP, gRPC, TCP, TLS—like it's child’s play. And don't overlook the AWS Gateway API Controller. Partnered with Amazon VPC Lattice, it streamlines service-to-service chatter, even if your setup resembles a map of spaghetti junctions across clusters and accounts.
 
 

👉 Got something to share? Create your FAUN Page and start publishing your blog posts, tools, and updates. Grow your audience, and get discovered by the developer community.

 
⭐ Sponsors
 
faun.dev faun.dev
 
🚀 Meet "This Week’s Human": A New Way to Celebrate Builders
 
 
Each week, we’ll spotlight one person from our community — a developer, DevOps engineer, SRE, AI/ML/data person, open source maintainer, or someone building cool things behind the scenes.

We’ll share who they are and where you can follow or connect with them. Not a sponsored feature. Just good people doing good work!

🔔 Read more!
 
 
👉 Spread the word and help developers find you by promoting your projects on FAUN. Get in touch for more information.
 
🔗 Stories, Tutorials & Articles
 
helpnetsecurity.com helpnetsecurity.com
 
Kernel-level container insights: Utilizing eBPF with Cilium, Tetragon, and SBOMs for security
 
 
eBPF, Cilium's Tetragon, and SBOMs are the dream team for exposing real-time kernel-level drama inside containers. When these powers combine, they hunt down surprise breaches like Log4Shell with a sleuth's precision. Bonus: they shave off 20% from CPU usage while they're at it.
 
 
matduggan.com matduggan.com
 
What Would a Kubernetes 2.0 Look Like
 
 
Kubernetes rewrites the rulebook on infrastructure. Suddenly, scaling isn't a headache—it's an art. But then there's YAML. With its peculiar quirks and knack for screwing up, it feels more like a punchline than a solution. Enter Helm and its template circus, juggling dependencies with all the grace of a three-legged mule. Maybe it's time to trade that chaos for HCL or some built-in remedy. Because Kubernetes doesn't do messy.
 
 
docker.com docker.com
 
State of App Dev: Security
 
 
Security isn’t just for the IT crowd anymore. Everyone's on duty. Only 1% of developers bother to look the other way. A mere 20% of organizations throw money at outsiders to handle it. The real trip wire? Planning. It derails teams faster than you'd believe.
 
 
tech.aufomm.com tech.aufomm.com
 
GitOps for Kubernetes With Nixidy and ArgoCD
 
 
Nixidy turns Kubernetes YAMLs into sleek, declarative Nix setups. It offers a robust, repeatable config flow—even for those complex Helm charts. Spice up your deployment by pairing ArgoCD with encrypted secrets via sops-secrets-operator. Now you can wrangle sensitive data in Git with style—and security.
 
 
docker.com docker.com
 
Why Chose OCI Artifacts for AI Model Packaging
 
 
Docker Model Runner injects LLMs into OCI artifacts, seamlessly marrying model delivery with container rituals. No need to invent custom toolchains. Think uncompressed "layers"—they're the secret sauce for faster, sharper, more efficient Model-Runner magic. It's not just a change; it's a quantum leap for AI devs everywhere.
 
 
subnetsavy.com subnetsavy.com
 
The Ultimate Guide to Running Kubernetes in a Home Lab
 
 
K3s and MicroK8s shine in makeshift home labs with minimal hardware. Throw in Longhorn for storage and Velero for backup bliss. Now that's a recipe for tech nirvana.
 
 
williamlam.com williamlam.com
 
Interesting Kubernetes application demos
 
 
Kubeapps is your backstage pass to deploying and controlling K8s apps with style. Dive into a treasure chest of Helm charts ready to roll. For those looking to jazz up a demo, unleash Kubedoom or Kubevaders. Obliterate pods for stress-testing, or just because you can. Craving some retro-futuristic fun? Check out Eric Jadi's fascinating project: wrangle K8s workloads through Minecraft.
 
 
til.simonwillison.net til.simonwillison.net
 
Publishing a Docker container for Microsoft Edit to the GitHub Container Registry
 
 
Edit hits GitHub's Container Registry like a buzzsaw, powered by Docker. Built for Apple Silicon, it rides Alpine like a speed demon. No fuss, just raw efficiency.
 
 
medium.com medium.com
 
A Journey Through Kafkian SplitDNS in a Multitenant Kubernetes Offering
 
 
SCHIP faced off with tenant demands for serverless Kafka. Their weapon of choice? A crafty DNS trick using CoreDNS and a few clever node-local DNS adjustments. They kept multitenancy alive and kicking without wearing out the ops team. Nice move.
 
 
linuxadmin.blog linuxadmin.blog
 
NSEnter and Kubernetes
 
 
nsenter is your backstage pass to a Kubernetes node. It plays with Linux namespaces, crashing through isolation walls for a direct look inside. Summon it with PID 1 and proper permissions, and you're deep in the node's core. No middleman required.
 
 
docker.com docker.com
 
How We Designed Model Runner and What’s Next
 
 
Docker's just unleashed a new gadget with Desktop 4.40. Meet the Model Runner, your ticket to running AI models on your local machine. Imagine it as the Peacekeeper of container-host diplomacy. It’s powered by llama.cpp and can ride GPUs like a pro skater. Oh, and it plays nice with the OpenAI API. Models strut their stuff at /models endpoints, mirroring images in Docker's world. Get ready for some heavy-duty AI magic.
 
 
cncf.io cncf.io
 
End to End Argo-Workflow for CI/CD
 
 
Argo Workflows isn't just another tool; it sings for Kubernetes-native CI/CD. It juggles complex workflows as DAGs, brings dynamic execution to life with CRDs and parameters. Got a weekly CI? Automate it with CronWorkflows. Secure those Docker pushes using Kubernetes secrets, and let shared volumes harmonize task coordination. It's like magic for your clusters.
 
 

👉 Got something to share? Create your FAUN Page and start publishing your blog posts, tools, and updates. Grow your audience, and get discovered by the developer community.

 
⚙️ Tools, Apps & Software
 
github.com github.com
 
gamemann/XDP-Proxy
 
 
A stateless, high-performance NAT-like proxy that attaches to the XDP hook in the Linux kernel using (e)BPF for fast packet processing. This proxy forwards packets based on configurable rules and performs source-port mapping, similar to IPTables and NFTables.
 
 
github.com github.com
 
raesene/eathar
 
 
This is a program designed to quickly pull some interesting security related information from Kubernetes clusters. There are a couple of categories of checks that have been implemented so far.
 
 
github.com github.com
 
Iliabuleh/azflow
 
 
A CLI tool to detect and analyze cross–availability-zone pod-to-pod network traffic in Kubernetes using Cilium Hubble.
 
 
github.com github.com
 
portainer/kubesolo
 
 
Ultra-lightweight Kubernetes
 
 

👉 Spread the word and help developers find and follow your Open Source project by promoting it on FAUN. Get in touch for more information.

 
🤔 Did you know?
 
 
GitHub’s main Rails monolith—run by tens of thousands of tests—relies on its open‑source Scientist gem (introduced around 2014–2016) for safe production-level refactoring. Rather than swapping code wholesale, Scientist executes both old and new code paths in production, silently comparing results under real load. Only when the candidate code matches in output and performance does GitHub fully adopt it—mitigating risk in critical system updates without disrupting developer workflows.
 
 
🤖 Once, SenseiOne Said
 
 
"In software, speed is a feature, but too often we trade clarity for velocity without understanding it means sacrificing tomorrow's simplicity."
— Sensei
 

(*) SenseiOne is FAUN.dev’s work-in-progress AI agent

 
😂 Meme of the week
 
 
 
 
❤️ Thanks for reading
 
 
👋 Keep in touch and follow us on social media:
- 💼LinkedIn
- 📝Medium
- 🐦Twitter
- 👥Facebook
- 📰Reddit
- 📸Instagram

👌 Was this newsletter helpful?
We'd really appreciate it if you could forward it to your friends!

🙏 Never miss an issue!
To receive our future emails in your inbox, don't forget to add community@faun.dev to your contacts.

🤩 Want to sponsor our newsletter?
Reach out to us at sponsors@faun.dev and we'll get back to you as soon as possible.
 

Kaptain #482: AWS EKS Flaw Exposes Credentials, Kubernetes 1.33 Resizing Pods & F5 AI Innovations
Legend: ✅ = Editor's Choice / ♻️ = Old but Gold / ⭐ = Promoted / 🔰 = Beginner Friendly

You received this email because you are subscribed to FAUN.dev.
We (🐾) help developers (👣) learn and grow by keeping them up with what matters.

You can manage your subscription options here (recommended) or use the old way here (legacy). If you have any problem, read this or reply to this email.