How to Track Down the Real Cause of Sudden Latency Spikes
Sudden latency spikes rarely have a single cause. This blog shows how to uncover the real source using traces, histograms, and modern debugging signals.
Updates and recent posts about Sigstore.. Link
Link
@anjali shared a link, 1 week, 3 days ago
Customer Marketing Manager, Last9
Hidden Correlations Traditional Monitoring Misses
Last9 is built to work with high-cardinality telemetry, and we’ve been covering it in detail through our series. This piece looks at a familiar pain: issues that only show up for a specific tenant or deployment. Why does that context disappear in most monitoring setups?
Story Trending
@shurup shared a post, 1 week, 4 days ago
@palark
Helm 4 or Nelm? What's the difference
Helm 4.0.0 brought several new features to its users, such as Server-Side Apply support and kstatus-based resource watching.Nelm, an alternative to Helm created in werf, a CNCF Sandbox project, has been offering these capabilities even before. Nelm has many more new features for Kubernetes deploymen..
Link
@anjali shared a link, 2 weeks ago
Customer Marketing Manager, Last9
Which Observability Tool Helps with Visibility Without Overspend
A detailed look at observability platforms so you can choose tools that keep visibility high and costs steady as your systems scale.
Story Trending
@laura_garcia shared a post, 2 weeks ago
Software Developer, RELIANOID
🚀 RELIANOID at DevOpsDays Tel Aviv 2025
📅 December 11, 2025 • 📍 Tel Aviv, Israel What a week ahead! Our team is working full-throttle as we prepare to attend three major events in just a few days — and we’re thrilled to add DevOpsDays Tel Aviv to the list. We’ll be joining the community to share how RELIANOID helps DevOps and platform tea..
Story
@laura_garcia shared a post, 2 weeks, 1 day ago
Software Developer, RELIANOID
🛡️ RELIANOID at Black Hat Europe 2025
📅 December 8–11, 2025 • 📍 London, UK RELIANOID is heading to Black Hat Europe 2025, the premier global event for cutting-edge cybersecurity research and innovation. We’ll be in London showcasing how our high-performance ADCs, intelligent proxy architecture, and automated security capabilities help e..
Link
@anjali shared a link, 2 weeks, 1 day ago
Customer Marketing Manager, Last9
OTel Updates: Unroll Processor Now in Collector Contrib
The OTel unroll processor splits bundled log records into individual events. Now in Collector Contrib v0.137.0 for VPC and CloudWatch logs.
Story
@laura_garcia shared a post, 2 weeks, 2 days ago
Software Developer, RELIANOID
Tesco’s latest outage is a reminder: uptime IS the customer experience.
Shoppers across the UK faced checkout failures, broken order updates, and Clubcard access issues as Tesco’s digital platforms suffered “intermittent” instability. In modern retail, even brief disruptions damage trust, loyalty, and sales. At RELIANOID, we help retailers stay resilient with intelligen..
Link
@anjali shared a link, 2 weeks, 2 days ago
Customer Marketing Manager, Last9
Instrumentation: Getting Signals In
See how instrumentation in OpenTelemetry helps track app issues, know the difference between auto and manual methods, and when to use them.
Activity
@devopslinks added a new tool Syft , 2 weeks, 3 days ago.
At its core, sigstore removes many of the traditional barriers associated with code signing. Instead of managing long-lived private keys manually, sigstore supports keyless signing, where identities are issued dynamically using OpenID Connect (OIDC) providers such as GitHub Actions, Google, or Microsoft. This dramatically lowers operational complexity and reduces the risk of key compromise.
The sigstore ecosystem is composed of several key components:
- Cosign: A tool for signing, verifying, and storing signatures for container images and other artifacts. Signatures are stored alongside artifacts in OCI registries, rather than embedded in them.
- Fulcio: A certificate authority that issues short-lived X.509 certificates based on OIDC identities, enabling keyless signing.
- Rekor: A transparency log that records signing events in an append-only, tamper-evident ledger. This provides public auditability and detection of suspicious or malicious signing activity.
Together, these components allow anyone to verify who built an artifact, when it was built, and whether it has been tampered with, using publicly verifiable cryptographic proofs. This aligns closely with modern supply chain security practices such as SLSA (Supply-chain Levels for Software Artifacts).
sigstore is widely adopted in the cloud-native ecosystem and integrates with tools like Kubernetes, container registries, CI/CD pipelines, and package managers. It is commonly used to sign container images, Helm charts, binaries, and SBOMs, and is increasingly becoming a baseline security requirement for production software delivery.
The project is governed by the OpenSSF (Open Source Security Foundation) and supported by major industry players.
