Join us

ContentUpdates and recent posts about checkov..
Link
@faun shared a link, 9 months, 2 weeks ago
FAUN.dev()

Zendesk Streamlines Infrastructure Provisioning with Foundation Interface Platform

Zendeskhas tossed out the old playbook with itsFoundation Interface. Forget the guessing games of infrastructure provisioning; engineers now scribble their demands in YAML, and voilà—magic happens. Kubernetes operators step in, spinning these requests into Custom Resources. It’s self-service nirvana.. read more  

Zendesk Streamlines Infrastructure Provisioning with Foundation Interface Platform
Link
@faun shared a link, 9 months, 2 weeks ago
FAUN.dev()

Kubernetes Scaling Strategies

Horizontal Pod Autoscaler(HPA) cranks up pods based on CPU, memory, or custom quirks. A dream for stateless adventures, but you'll need a metrics server.Vertical Pod Autoscaler(VPA) fine-tunes CPU and memory for pods. Works like a charm for jobs where scaling out is sketchy, though it demands restar.. read more  

Kubernetes Scaling Strategies
Link
@faun shared a link, 9 months, 2 weeks ago
FAUN.dev()

Upcoming changes to the Bitnami catalog

Bitnamiclears out the virtual cobwebs by tucking its oldDebian-based imagesinto a digital time capsule, also known as theLegacy repository. It throws a friendly nudge to devs: get with the times and swap to the "latest" images. In production-ville, serious users should hitch a ride on theBitnami Sec.. read more  

Link
@faun shared a link, 9 months, 2 weeks ago
FAUN.dev()

Securing Kubernetes 1.33 Pods: The Impact of User Namespace Isolation

Kubernetes 1.33rolls out with a security upgrade. It flips the switch onuser namespacesby default, shoving pods into the safety zone as unprivileged users. Potential breaches? Curbed. But don't get too comfy—idmap-capable file systems and up-to-date runtimes are now your new best friends if you want.. read more  

Securing Kubernetes 1.33 Pods: The Impact of User Namespace Isolation
Link
@faun shared a link, 9 months, 2 weeks ago
FAUN.dev()

OpenShift LACP bonding performance expectations

Red Hat OpenShift and NIC bonding for high availability is getting popular in data centers. Consider layer2/layer2+3 configurations for balanced traffic distribution across bonded links. Layer3+4 hashing offers highest throughput but may lead to out-of-order packets due to 802.3ad non-compliance. It.. read more  

Link
@faun shared a link, 9 months, 2 weeks ago
FAUN.dev()

Automated Kubernetes Threat Detection with Tetragon and Azure Sentinel

Kubernetes security tools usually drop the ball. Enter the dynamic duo:Tetragonwielding eBPF magic for deep observability, and smart notifications for sniper-precise alerts.Fluent Bitpairs withAzure Logic Appsin an automated setup so you can hunt down threats in real-time. Not a drop of sweat needed.. read more  

Automated Kubernetes Threat Detection with Tetragon and Azure Sentinel
Link
@faun shared a link, 9 months, 2 weeks ago
FAUN.dev()

Kubernetes Observability with OpenTelemetry | A Complete Setup Guide

OpenTelemetrydelivers a full observability package for Kubernetes—traces, metrics, logs—all without handcuffs to a single vendor. Deployyour own OTEL Collectorson Minikube usingHelm charts. Dive into node and pod-level metrics and grab those can't-miss Kubernetes cluster events... read more  

Kubernetes Observability with OpenTelemetry | A Complete Setup Guide
Link
@faun shared a link, 9 months, 2 weeks ago
FAUN.dev()

The Evolution of Virtualization Platforms: The Rise of Managed Services and Local Providers’ Edge Against Hyperscalers

Cozystackwants local cloud providers to flex by deliveringKubernetes-based managed serviceswithout breaking a sweat. Who needs hyperscalers anyway? Built on open-source goodness, it ditches vendor lock-in, giving these providers the freedom to roll out next-gen infrastructures in style... read more  

The Evolution of Virtualization Platforms: The Rise of Managed Services and Local Providers’ Edge Against Hyperscalers
Link
@faun shared a link, 9 months, 2 weeks ago
FAUN.dev()

6 Design Principles for Edge Computing Systems

Edge systemseach have their eccentricities, needing solutions as unique as they are:Chick-fil-Aswears byKubernetesto herd its standard operations. TheAir Force, however, prizes nimbleness and ironclad security for deployments scattered across the globe. Smart edge management? It’s a mix ofInfrastruc.. read more  

6 Design Principles for Edge Computing Systems
Link
@faun shared a link, 9 months, 2 weeks ago
FAUN.dev()

Under the hood: Amazon EKS ultra scale clusters

Amazon EKScranked up its gear—you can now spin up clusters with a staggering100,000 nodesat your beck and call. That’s a cozy home for either1.6 million AWS Trainium chipsor800,000 NVIDIA GPUs. Welcome to the playground for ultra-scale AI/ML. Performance soars skyward by ditching old etcd consensus .. read more  

Under the hood: Amazon EKS ultra scale clusters
Checkov, created by Bridgecrew (now part of Palo Alto Networks), is an open source policy-as-code scanner for infrastructure-as-code frameworks. It analyzes Terraform, Kubernetes manifests, CloudFormation, Serverless, ARM, Docker, and other IaC formats to detect security, compliance, and configuration issues. Checkov uses a large library of built-in policies mapped to standards like CIS, PCI, SOC2, and NIST, and supports custom policies written in Python or YAML. It integrates seamlessly with CI pipelines, Git repos, and developer workflows, helping teams enforce secure-by-default cloud configurations before deployment. Its coverage, speed, and extensibility make it a flagship tool in cloud DevSecOps.