Posts from FAUN.dev() members | The fastest way for busy developers to keep up with technologies 🚀

Updates from FAUN.dev()...

Posts
Description

Link

@faun shared a link, 4 months ago

FAUN.dev()

Kubernetes Image Builder Vulnerability Grants Root Access to Windows Nodes

A critical CVE-2025-7342 hauntsKubernetes Image Builder v0.1.44and earlier. It shipsNutanix/OVAimages with defaultWindows Administratorcreds intact. That slip-up invites root access on Windows nodes. Linux builds and other providers dodge this bullet. Mixed clusters run hot until images rebuild or p.. read more

Link

@faun shared a link, 4 months ago

FAUN.dev()

Centralized Amazon ECS task logging with Amazon OpenSearch

Amazon ECS tasks fire logs through a FireLens sidecar. Fluent Bit ships them into a shared Amazon OpenSearch Serverless domain. Cross-account IAM roles lock down access. The pipeline centralizes logs, unlocks full-text search, SQL and PPL queries, and slashes storage costs with on-demand indexing. .. read more

Link

@faun shared a link, 4 months ago

FAUN.dev()

A Mid-Year Look at CNCF Project Momentum

Cloud Native Computing Foundation’s mid-year report drops.Kubernetescommands 3,500+ authors.OpenTelemetryrockets to 1,884 contributors, snagging second in PR velocity.Backstageclimbs to 649.Argo(860) andFlux(156) lock GitOps in place.Kubeflowbreaks into the top 30 with 302. Trend to watch:Internal .. read more

Link

@faun shared a link, 4 months ago

FAUN.dev()

Deep dive into cluster networking for Amazon EKS Hybrid Nodes

EKS Hybrid Nodes corrals on-prem and edge servers as remote Kubernetes nodes over Direct Connect or VPN. It rides onCiliumorCalico, with BGP or static routes. For local load balancing, it spins upMetalLBat Layer 2/3. For NLB/ALB sync, it taps theAWS Load Balancer Controller. Workflows stay unified... read more

Link

@faun shared a link, 4 months ago

FAUN.dev()

Critical Container Registry Security Flaw: How Multi-Architecture Manifests Create Attack Vectors

ContainerHijack hijacksDocker Image Manifest V2 Schema 2. It taints images inDocker Hub,Amazon ECR,GCR. Scanners shrug. Signature checks buckle. Defenders deploypolicy-as-code admission controllers. They lock down Terraform ECR push policies.Falco rulesflag strange layers, ghost pushes, rogue proces.. read more

Link

@faun shared a link, 4 months ago

FAUN.dev()

Closing the gap: How KubeVirt, Kubernetes, and open ecosystems are reshaping virtualisation

KubeVirt spins up VMs inside Kubernetes clusters. It hooks intoPortworxfor stateful volumes. It tapsOpenShiftorRancherto match VMware’s arsenal. Declarative YAML meetsGitOpspipelines, unified schedulers and RBAC. Teams juggle VMs and containers on one toolchain. License bills shrink. Infra shift:Le.. read more

Link

@faun shared a link, 4 months ago

FAUN.dev()

Flux CD: D1 Reference Architecture

ControlPlane Enterprise for Flux CD drops thed1 reference architectureandDesign 1 Reference Architecture Guide. It packs production-grade playbooks for sprawling multi-tenant, multi-cluster setups. The repo flexes real code:GitHub fine-grained Personal Access Tokens,Kubernetes RBAC, and auto-promoti.. read more

Link

@faun shared a link, 4 months ago

FAUN.dev()

Scaling beyond IPv4: integrating IPv6 Amazon EKS clusters into existing Istio Service Mesh

Amazon EKS now powers IPv6 dual-stack VPC clusters. It doles out /80 prefixes via the VPC CNI flagsENABLE_V6_EGRESSandENABLE_V4_EGRESS. AWS ships an Istio multi-cluster playbook—single-VPC to multi-VPC. It rigs remote reader secrets and east-west gateways, fusing IPv4 and IPv6 for service discovery.. read more

Link

@faun shared a link, 4 months ago

FAUN.dev()

How To Deploy Fluent Bit in a Kubernetes-Native Way

Fluent Operator tapsCRDsto tameFluent Bitin Kubernetes. It channels inputs, filters, parsers, outputs into auto-generated configs. Then spins up the DaemonSet. TheFluent Bit Watcherwrapper hot-swaps configs on CRD tweaks. No pods restart... read more

Link

@faun shared a link, 4 months ago

FAUN.dev()

Kong Gateway Operator and KIC, understanding the differences

Kong offers three different helm charts for Kubernetes ingress, leveraging the new Gateway API. Kong Gateway Operator simplifies deployment and management by using CRDs instead of custom helm charts. Using GatewayClass and Gateway resources are essential for the operator to spin up dataplanes and co.. read more

FAUN.dev() is a developer-first platform built with a simple goal: help engineers stay sharp without wasting their time. It curates practical newsletters, thoughtful technical blogs, and useful developer tools that focus on signal over noise.

Created by engineers, for engineers, FAUN.dev() is where experienced developers turn to keep up with the fast-moving world of DevOps, Kubernetes, Cloud Native, AI, and modern programming. We handpick what matters and skip the fluff.

If it’s on FAUN.dev(), it’s worth your attention.

Beyond curation, we run a course marketplace (WIP) designed to keep developers current. These courses go deep into the subjects that shape real-world work—things like Kubernetes internals, modern DevOps workflows, cloud-native architecture, and using AI tools to build faster and smarter. It’s practical learning, taught by people who’ve done the work. Developers from companies like GitHub, Netflix, and Shopify already rely on FAUN.dev() to stay on top of their game. They trust us because we keep it real: no hype, no filler, just what you need to grow and do your best work. For sponsors and partners, FAUN.dev() offers access to a focused, engaged audience of technical professionals. This isn’t just another broad developer community—it’s a place where smart engineers go to get smarter. If you have something meaningful to offer them, you’ll be in good company. In short, FAUN.dev() is more than a content hub. It’s a place to grow, to learn, and to connect with what really matters in software today.