Kaptain

🔔 Announcement

We're thrilled to announce Humans Behind Code!

Humans Behind Code (HBC) is a project by FAUN, where developers meet other developers and learn about the people behind the tools, libraries, frameworks, and other projects they use to build their applications.

We interview developers and ask them about their projects, their motivations, their struggles, and their successes. It's about sharing knowledge and helping each other grow.

👉 If you're a Developer or a maintainer of a widely adopted Open Source project and you think it's worth talking about it and your experiences in building it, join Humans Behind Code!

Best,
Aymen from FAUN.

If you have any questions, just hit the reply button!

Sponsor FAUN and reach developers where they are, not where you want them to be.

Download our mediakit.

What the largest tech companies like Google and Facebook have discovered as they have grown their infrastructure is that traditional access control systems do not scale. Not only does the risk of a breach increase with each secret, but forcing developers to juggle hundreds of credentials to do their jobs limits productivity and encourages insecure workarounds.

The largest companies in the world have discovered that identity-based access is the way out of the dilemma.

This O'Reilly book will explain the concept of identity-based infrastructure access, and how it differs from more common older approaches based on secrets.

The plan of this tutorial is constructing an artificial application example consisting of a mixture of RabbitMQ message broker, wrapped in Helm package and maintained by Bitnami and very naive Rest API server connecting to RabbitMQ and sending/receiving messages.

This plan is nothing too unusual for software developers, like writing Node.js application and digging into npm packages for libraries or coding .Net Core application and searching nuget for the same purpose.

By @yurgenua

NordVPN 68% Black Friday discount is here!

👉 Access anything online without restrictions
👉 Add extra layers of security to your digital life
👉 Get the best online protection tools along with your NordVPN service.
👉 Get 3 months FREE with the 2-year plan

In this article, you will learn how to easily create a mutating webhook to intercept Kubernetes objects and modify them on the fly.

The mission to run any containerized application on any infrastructure makes security a challenge on Kubernetes.

Already adopted by 50+ industry giants like Amazon and Tencent, Volcano helps to manage and schedule batch jobs across different frameworks.

So In this article, you will learn about :

• What is a Scheduler?
• How to manually schedule pods in Kubernetes?
• Concept of Taints and Tolerations in Kubernetes.
• Concept of Node Affinity in Kubernetes.

Kubernetes v1.25 introduced Container Checkpointing API as an alpha feature. This provides a way to backup-and-restore containers running in Pods, without ever stopping them.

This feature is primarily aimed at forensic analysis, but general backup-and-restore is something any Kubernetes user can take advantage of.

Take a look at this brand-new feature and see how you can enable it in your clusters and leverage it for backup-and-restore or forensic analysis.

Docker team announced that Docker Hub can now help you distribute any type of application artifact.

• Before this announcement, you could only use Docker Hub to store and distribute container images — or artifacts usable by container runtimes. This became a limitation since container image distribution is just the tip of the application delivery iceberg.
• Nowadays, modern application delivery requires numerous types of artifacts: Helm charts, WebAssembly modules, Docker Volumes, SBOMs, OPA bundles and many other custom artifacts.
• Developers often share these with clients that need them since they add immense value to each project.
• Now, you can keep everything in one place without having to leverage multiple registries.

FAUN's Job Board offers an exceptional platform to connect with skilled developers, DevOps professionals, and software engineers who are eager to contribute to the success of your organization.

Post your job openings on FAUN's Job Board today and watch your talent pool grow.

Get started now .

✅ Encrypted file storage and sharing
✅ Access your files from any device
✅ Get access to all our services

Discount available until December 5th.

This book begins with a vanilla Kubernetes installation with built-in defaults.

You'll examine an abstract threat model of a distributed system running arbitrary workloads, and then progress to a detailed assessment of each component of a secure Kubernetes system.

• Understand where your Kubernetes system is vulnerable with threat modelling techniques
• Focus on pods, from configurations to attacks and defenses
• Secure your cluster and workload traffic
• Define and enforce policy with RBAC, OPA, and Kyverno
• Dive deep into sandboxing and isolation techniques
• Learn how to detect and mitigate supply chain attacks
• Explore filesystems, volumes, and sensitive information at rest
• Discover what can go wrong when running multitenant workloads in a cluster
• Learn what you can do if someone breaks in despite you having controls in place

Automated Terraform cloud and enterprise drift detection

Next-generation Cloud Native Gateway

A curated list of software and architecture related design patterns.

Cloud-native authorization for modern applications and APIs

Over 100 popular Kubernetes CRDs (CustomResourceDefinition) in JSON schema format.