Join us

ContentUpdates and recent posts about Rancher..
Link
@devopslinks shared a link, 3 months, 2 weeks ago
FAUN.dev()

Migrating to Hetzner - We saved 76% on our cloud bills

DigitalSociety ditched AWS and DigitalOcean. Swapped the comfort of cloud for full control onHetzner, built onTalos Linux. PostgreSQL? Now running onCloudNativePG. Traffic flows throughIngress NGINXwithExternalDNShandling the names. The payoff: monthly costs dropped from $449.50 to under $100. ARM v.. read more  

Migrating to Hetzner - We saved 76% on our cloud bills
Link
@devopslinks shared a link, 3 months, 2 weeks ago
FAUN.dev()

Hosting Remote MCP Server on Azure Container Apps (ACA) using Streamable HTTP transport mechanism

A fresh setup shows how to runModel Context Protocol (MCP) servers over HTTPinsideAzure Container Apps—stateless, serverless, and ready for real-time jobs like live forex conversion. It pipes in a live API fallback, adds caching, and speaksJSON-RPC 2.0overPOST. You can spin it up withBicep templates.. read more  

Hosting Remote MCP Server on Azure Container Apps (ACA) using Streamable HTTP transport mechanism
Link
@devopslinks shared a link, 3 months, 2 weeks ago
FAUN.dev()

CVE-2025-49844 - The Redis CVSS 10.0 vulnerability and how we responded

Report URI closed the door on Redis CVE-2025-49844 fast. They rolled out ACL-based command blocks and jumped to Redis8.2.2, now running on a freshRedis Sentinel-based HA setup. To prove the fix stuck, they ran command counter checks and layered in enforced blocking rules—then pushed it all out fleet.. read more  

CVE-2025-49844 - The Redis CVSS 10.0 vulnerability and how we responded
Link
@kaptain shared a link, 3 months, 2 weeks ago
FAUN.dev()

A fully functional Kubernetes cluster with 1 million active nodes.

Pushing Kubernetes to 1M nodes isn’t just hardware—it's architectural judo. Networking flips to exclusive IPv6.Less chatter, more breathing room. etcd hits a wall.Write throughput stalls at scale, so they swap it out. Entermem_etcd, a Rust-built replacement pushing over 1M buffered writes per second.. read more  

A fully functional Kubernetes cluster with 1 million active nodes.
Link
@kaptain shared a link, 3 months, 2 weeks ago
FAUN.dev()

Debug Builds with Visual Studio Code

Docker droppedBuildx debuggingfor VS Code. Set breakpoints in your Dockerfiles. Peek into image layers. Even jump into an interactive shell mid-build. It runs on theDebug Adapter Protocol, so editors likeNeovimandJetBrains IDEscan join the party too... read more  

Debug Builds with Visual Studio Code
Link
@kaptain shared a link, 3 months, 2 weeks ago
FAUN.dev()

Announcing Istio 1.27.2

Istio 1.27.2 locks down TLS secret access in Gateway API mode. Now, both the namespace and service account have to match. No more half-matching your way in. It also drops the install order dependency betweenistioctl’s pilot and CNI. You can now install those in whatever order your chaos-loving soul .. read more  

Announcing Istio 1.27.2
Link
@kaptain shared a link, 3 months, 2 weeks ago
FAUN.dev()

Connect Codex to MCP Servers via MCP Toolkit

OpenAI Codex just leveled up. It now hooks into Docker’sModel Context Protocol (MCP) Toolkit, which means it can tap directly into 200+ infrastructure tools—likeNeo4j graph databases—as if they were built-in features. With MCP, Codex doesn’t just code. It runs containers, spins up data models, eats .. read more  

Connect Codex to MCP Servers via MCP Toolkit
Link
@kaptain shared a link, 3 months, 2 weeks ago
FAUN.dev()

Hardened Images: crafted by humans, protected by AI

Docker just wired anAI guardrailstraight into its Hardened Image (DHI) pipeline. It scans upstream diffs, catches regressions before they ship, and stops bad logic in its tracks. Case in point: it flagged a logic bug that slipped past the usual coding copilots. A real fix landed upstream. Win for cu.. read more  

Hardened Images: crafted by humans, protected by AI
Link
@kaptain shared a link, 3 months, 2 weeks ago
FAUN.dev()

How to Allocate Kubernetes Resource Ownership

Resource ownership in Kubernetes isn’t just a nice-to-have anymore—it’s turning into table stakes. Teams are usingnamespaces, RBAC, labels, quotas, and admission controllersto draw clear lines around who owns what, how much they can use, and what rules they follow. Tools likeKyverno,LimitRanges, and.. read more  

How to Allocate Kubernetes Resource Ownership
News FAUN.dev() Team
@kaptain shared an update, 3 months, 2 weeks ago
FAUN.dev()

Mirantis Launches Pelagia for Enhanced Ceph Management on Kubernetes

Rook Pelagia Kubernetes Ceph

Mirantis introduces Pelagia, an open source tool to streamline Ceph storage management on Kubernetes, advancing automation and integration with GitOps workflows.

Rancher is a Kubernetes management platform originally created by Rancher Labs and now maintained by SUSE. It is designed to simplify the deployment, operation, and security of Kubernetes clusters at scale, whether they run on public cloud, private cloud, on-premises data centers, or at the edge.

At its core, Rancher provides a centralized control plane that allows teams to create, import, and manage multiple Kubernetes clusters from a single UI and API. It supports a wide range of Kubernetes distributions, including upstream Kubernetes, RKE / RKE2, K3s, and managed cloud services like EKS, GKE, and AKS.

Rancher focuses heavily on enterprise needs such as multi-cluster management, role-based access control (RBAC), authentication integration (LDAP, Active Directory, OIDC), policy enforcement, and cluster lifecycle management. It enables platform teams to enforce consistent configurations and security policies while allowing application teams to self-serve Kubernetes resources safely.

The platform also integrates tightly with the broader cloud-native ecosystem. Rancher provides built-in support for Helm, monitoring (Prometheus, Grafana), logging, and GitOps workflows, and works well alongside tools like Argo CD, Fleet, and Longhorn for storage.

Rancher is often used as the foundation for platform engineering initiatives, helping organizations standardize Kubernetes operations, reduce operational complexity, and safely scale containerized workloads across environments.