Weekly news | 2024-09-25

news

• Artifact Hub becomes a CNCF incubating project.
• CFO of HashiCorp, Navam Welihinda, Steps Down.
• Clever 'GitHub Scanner' campaign abusing repos to push malware.
• Gaining access to anyone’s Arc browser without them even visiting a website.
• Kelsey Hightower: If governments rely on FOSS, they should fund it.
• Open source maintainers underpaid, swamped by security, going gray.
  • 2024 State of the Open Source Maintainer Report

toolings

• Grafana Tanka: configuration utility for Kubernetes powered Jsonnet.
• octo-sts: A GitHub App that acts like a Security Token Service (STS) for the Github API.
• Stack Auth: the open-source Auth0 & Clerk alternative.
• tfstate-worker: A Terraform HTTP Backend built using Cloudflare Workers with locking support!.
• winter-soldier: Scale down or delete unneeded workload after work hours based on conditions.

blogs

• Recorded Webinars:

  • How we moved our Insights application deployment from rok8s-scripts to ArgoCD
  • Kyverno policy reporter - unifying policy observability
  • GUAC Use Cases–beyond security
  • How to secure workload identities with SPIFFE, cert-manager, and trust-manager.

• PromQL cheat sheet: Must-know PromQL Queries.

• Making mass changes to Infrastructure as Code.
• Kubernetes CRD generation pitfalls.
• Kubernetes: How to avoid scheduling pods on certain nodes.
• Azure DevOps with OpenShift.
• Winter soldier: scale down Kubernetes made easy.
• Setting-up Complete Observability for Your Application with Kops.dev.
• Loft Labs CEO on the State of Kubernetes and vCluster - VMblog QA.
• Cloud native tech comics.