Join us

ContentUpdates and recent posts about Kata Containers..
Link
@kaptain shared a link, 2 months, 1 week ago
FAUN.dev()

Dapr Deployment Models

Daprstarted as a humble Kubernetes sidecar. Now? It's a full-blownmulti-mode runtimethat runs wherever you need it,edge,VM, orserverless APIs. Diagrid’sCatalysttakes that further. It wraps Dapr in a fully managed API layer that’s detached from your app’s lifecycle. No infra lock-in, just token-based.. read more  

Dapr Deployment Models
Link
@kaptain shared a link, 2 months, 1 week ago
FAUN.dev()

v1.35: Job Managed By Goes GA

In Kubernetes v1.35,spec.jobControllerManagedByhits GA. That means full handoff of Job reconciliation to external controllers is now official. It unlocks tricks likeMultiKueue, where a single management cluster fires off Jobs to multiple worker clusters, without losing sight of what’s running where... read more  

Link
@kaptain shared a link, 2 months, 1 week ago
FAUN.dev()

Troubleshooting Cilium network policies: Four common pitfalls

Cilium’s Day 2 playbook covers the real work: dialing inL7 policy controls, tuningHubble observability, and wringing performance fromBPF. It's how you keep big Kubernetes clusters sane. The focus?Multi-tenant isolation,node-to-node encryption, and scaling cleanly withexternal etcdso the network does.. read more  

Link
@kaptain shared a link, 2 months, 1 week ago
FAUN.dev()

93% Faster Next.js in (your) Kubernetes

Next.js brings advanced capabilities to developers out-of-the-box, but scaling it in your own environment can be challenging due to uneven load distribution and high latency. Watt addresses these issues by leveragingSO_REUSEPORTin the Linux kernel, resulting in significantly improved performance met.. read more  

Link
@kaptain shared a link, 2 months, 1 week ago
FAUN.dev()

1.35: In-Place Pod Resize Graduates to Stable

In-Place Pod Resizehits GA in Kubernetes 1.35. You can now tweak CPU and memory on live pods without restarts. This is finally production-ready! What’s new since beta? It now handlesmemory limit decreases, doesprioritized resizes, and gives you betterobservabilitywith fresh Kubelet metrics and Pod e.. read more  

Link
@kaptain shared a link, 2 months, 1 week ago
FAUN.dev()

Avoiding Zombie Cluster Members When Upgrading to etcd v3.6

etcd v3.5.26 patches a nasty upgrade bug. It now syncsv3storefromv2storeto stop zombie nodes from corrupting clusters during the jump to v3.6. The core issue: Older versions let stale store states bring removed members back from the dead... read more  

Link
@kaptain shared a link, 2 months, 1 week ago
FAUN.dev()

Kubernetes OptimizationInPlace Pod Resizing,ZoneAware Routin

Halodoc cut EC2 costs and shaved latency by leaning into two Kubernetes tricks: In-place pod resizing(v1.33) lets them dial pod resources up or down on the fly, especially handy during off-peak hours. Zone-aware routingviatopology-aware hintskeeps inter-service traffic close to home (same AZ), skipp.. read more  

Kubernetes OptimizationInPlace Pod Resizing,ZoneAware Routin
Link
@kala shared a link, 2 months, 1 week ago
FAUN.dev()

Chinese AI in 2025, Wrapped

Chinese AI milestones in 2025: Big models from DeepSeek and others, AGI discussions at Alibaba, US-China chip war swings, Beijing's AI Action plan, and more. DeepSeek led the way with an open-source model, setting off a wave of Chinese companies going open-source. China's push for AGI and involvemen.. read more  

Link
@kala shared a link, 2 months, 1 week ago
FAUN.dev()

Review of Deep Seek OCR

DeepSeek-OCRflips the OCR script. Instead of feeding full image tokens to the decoder, it leans on an encoder to compress them up front, trimming down input size and GPU strain in one move. That context diet? It opens the door for way bigger windows in LLMs. Why it matters:Shoving compression earlie.. read more  

Link
@kala shared a link, 2 months, 1 week ago
FAUN.dev()

Evaluating AI Agents in Security Operations

Cotool threw frontier LLMs at real-world SecOps tasks using Splunk’s BOTSv3 dataset.GPT-5topped the chart in accuracy (62.7%) and gave the best results per dollar.Claude Haiku-4.5blazed through tasks fastest, just 240 seconds on average, maxing out tool integrations.Gemini-2.5-proflopped on both acc.. read more  

Evaluating AI Agents in Security Operations
Kata Containers is a Cloud Native Computing Foundation (CNCF) project designed to close the security gap between traditional Linux containers and virtual machines. Instead of sharing a single host kernel like standard containers, Kata Containers launches each pod or container inside its own lightweight virtual machine using hardware virtualization.

This approach dramatically reduces the attack surface and prevents container escape vulnerabilities, making Kata ideal for multi-tenant, untrusted, or sensitive workloads. Despite using VMs under the hood, Kata is optimized for fast startup times and integrates seamlessly with Kubernetes through the Container Runtime Interface (CRI), allowing it to be used alongside runtimes like containerd and CRI-O.

Kata Containers is commonly used in scenarios such as multi-tenant Kubernetes clusters, confidential computing, sandboxed AI workloads, serverless platforms, and agent execution environments where strong isolation is mandatory. It supports multiple hypervisors, including QEMU, Firecracker, and Cloud Hypervisor, and continues to evolve toward faster boot times, lower memory overhead, and better hardware acceleration support.