ContentPosts from @kaptain..
Link
@kaptain shared a link, 6 days, 2 hours ago
FAUN.dev()

Buzzing Beyond Clouds: The Illustrated Children's Guide to Cilium

"Buzzing Beyond Clouds"continues the eBPF adventure with Obee as a Jedi bee, showcasing how Cilium powers networking, cluster mesh, observability, security, and service mesh in the Kubulous galaxy. Each chapter parallels Cilium's real-world functionalities, making complex concepts accessible to all .. read more  

Buzzing Beyond Clouds: The Illustrated Children's Guide to Cilium
Link
@kaptain shared a link, 6 days, 2 hours ago
FAUN.dev()

The Case for VM and Container Consolidation in 2026

With KubeVirt, enterprise platform teams can run VMs and containers on Kubernetes, so separate VM and container platforms remain a choice teams keep through habit... read more  

Link
@kaptain shared a link, 6 days, 2 hours ago
FAUN.dev()

Fixing Ghost Drops: How eBPF Rescued IPv6 Telemetry

In this walkthrough, you use eBPF to patch malformed flow-export packets before the host network stack drops them... read more  

Fixing Ghost Drops: How eBPF Rescued IPv6 Telemetry
Link
@kaptain shared a link, 6 days, 2 hours ago
FAUN.dev()

Runtime Observability and Enforcement for Opaque AI Agents with eBPF: Beyond Sandboxes and Approvals

Platform teams should verify side effects at the OS layer, separate from tool approvals and sandbox rules, because engineers cannot treat AI agent harnesses as security boundaries... read more  

Runtime Observability and Enforcement for Opaque AI Agents with eBPF: Beyond Sandboxes and Approvals
Link
@kaptain shared a link, 6 days, 2 hours ago
FAUN.dev()

Containers on fire: from container escapes to supply chain attacks

Kaspersky researchers explain how attackers use a compromised container to take over aKubernetescluster or host, with misconfigured APIs and permissions driving most escapes... read more  

Containers on fire: from container escapes to supply chain attacks
Link
@kaptain shared a link, 3 weeks ago
FAUN.dev()

What kubectl debug doesn’t tell you: The silent evidence gap

kubectl debugsessions leave almost no forensic trace: by design,EphemeralContainerStatushas nolastStateorrestartCount, so the exit code, session duration, target container, and debugger logs disappear from the Kubernetes API the moment anything else updates the pod. That breaks incident handoffs (th.. read more  

What kubectl debug doesn’t tell you: The silent evidence gap
Link
@kaptain shared a link, 3 weeks ago
FAUN.dev()

v1.36: Deprecation and removal of Service ExternalIPs

Kubernetes v1.36 deprecatesService.spec.externalIPsand starts the removal path, finally closing CVE-2020-8554, the trust-everyone hole the field has carried since the early days. The project has recommended disabling it via theDenyServiceExternalIPsadmission controller since v1.21, but SIG Network h.. read more  

Link
@kaptain shared a link, 3 weeks ago
FAUN.dev()

Mirantis has entered into an agreement to be acquired by IREN

Mirantis has agreed to an acquisition by IREN. The companies have announced no customer-facing product changes... read more  

Mirantis has entered into an agreement to be acquired by IREN
Link
@kaptain shared a link, 3 weeks ago
FAUN.dev()

Extending AI gateways with Rust

Every gateway ships with a set of built-in policies. Authentication. Rate limiting. Request routing. Prompt guards. These cover most use cases. But what about the ones they don’t cover? What if you need to add a custom header based on a database lookup? What if you need to transform a request body i.. read more  

Extending AI gateways with Rust
Link
@kaptain shared a link, 3 weeks ago
FAUN.dev()

When AI agents become contributors: How KubeStellar reached 81% PR acceptance

The KubeStellar Console team learned that AI coding agents improve after engineers build deterministic feedback loops into the codebase. Engineers who grant more autonomy give agents more room to guess, with no new correction signal... read more  

When AI agents become contributors: How KubeStellar reached 81% PR acceptance