Updates and recent posts about Rancher..

Posts
Description

Link

@faun shared a link, 10 months, 2 weeks ago

FAUN.dev()

How I Scanned all of GitHub’s “Oops Commits” for Leaked Secrets

Truffle Security dropped a sharp new open-source tool that digs through GitHub’s public commit history looking forzero-commit force pushes—a tactic devs use to erase mistakes, usually secrets. Problem is, they don’t go quietly. By tapping into historical GitHub PushEvents via GH Archive, the tool h.. read more

Link

@faun shared a link, 10 months, 2 weeks ago

FAUN.dev()

You might not need tmux

A dev swapped outtmuxfor a slick combo:Zellij,SSH multiplexing, andsystemdsocket daemons. No more virtual splits. Just clean session persistence and tight remote control. This setup brings scrollback back where it belongs—your terminal’s native buffer. It plays nice with extras like theKitty graphi.. read more

Link

@faun shared a link, 10 months, 2 weeks ago

FAUN.dev()

Writing a basic service for GNU Guix

A developer walks through building acustom GNU Guix system serviceforkmonad—yes, the keyboard remapper—by wiring up a newservice-typethat plugs intoShepherdandaccount-service-type. To get there, they lift patterns from services likewesnothd, usemake-forkexec-constructorto spin up the daemon, and de.. read more

Link

@faun shared a link, 10 months, 2 weeks ago

FAUN.dev()

Automating infrastructure deployments in the Cloud with Terraform and Azure Pipelines

This Azure lab wires upTerraformwithAzure Pipelines CI/CDto spin up infrastructure and deploy a .NET Core app using IaC. It handles remote state with Azure Storage, automatesplanandapplyin pipelines, and swaps in config values via token replacement during deploy... read more

Link

@faun shared a link, 10 months, 2 weeks ago

FAUN.dev()

Cloudflare and the infinite sadness of migrations

A recent Cloudflare DNS outage traced back to legacy gear tangled with global config changes. Turns out, incomplete migrations can still pack a punch. Their newer topology system does support progressive rollouts—but running it side-by-side with the old one just made the blast radius bigger. System.. read more

Link

@faun shared a link, 10 months, 2 weeks ago

FAUN.dev()

Amazon DocumentDB Serverless is now available

Amazon DocumentDB Serverless is out of preview and ready to roll. It auto-scales compute and memory usingDCUsfor MongoDB-compatible clusters. No migration needed—just upgrade your existing instance and go. Available starting in version5.0, with per-second billing based on DCU burn. What’s new:Fixed.. read more

Link

@faun shared a link, 10 months, 2 weeks ago

FAUN.dev()

Supply chain attack compromises npm packages to spread backdoor malware

A fresh supply chain ambush—Scavenger—slipped into npm through the front door. Attackers phished maintainers of high-profile packages likeis,eslint-plugin-prettier, andsynckit, then dropped cross-platform JavaScript malware straight into the codebase. Real-time C2 channels included. They typosquatt.. read more

Link

@faun shared a link, 10 months, 2 weeks ago

FAUN.dev()

Zero Trust and Cloud-Native Windows

Microsoft’s moving the cheese again—this time steering Windows deep into the cloud. The old on-prem management playbook? Getting dusty. At the core:Intune, pushingZero Trustlike it means it. Identity-based access, always-on compliance, real-time config—no more trusting the device just because it’s .. read more

Link

@faun shared a link, 10 months, 2 weeks ago

FAUN.dev()

Creating a GitHub App based Azure DevOps Pipelines Service Connection

Azure DevOps made it easier to link up with GitHub—no more re-installing the Azure Pipelines GitHub App to kick things off. Teams can spin up aGitHub App–based service connectiondirectly from a dummy pipeline setup. The service connection comes GitHub App–authenticated out of the gate. Super handy .. read more

Link

@faun shared a link, 10 months, 2 weeks ago

FAUN.dev()

Beyond IAM access keys: Modern authentication approaches for AWS

AWS wants long-term IAM access keys gone. In their place:temporary creds via IAM roles,IAM Identity Center,CloudShell, andOIDC integrations. The push covers everything—CLI tools, local dev, compute, CI/CD, even old-school on-prem. The message is clear: rotate automatically, grant minimally, and sto.. read more

Rancher is a Kubernetes management platform originally created by Rancher Labs and now maintained by SUSE. It is designed to simplify the deployment, operation, and security of Kubernetes clusters at scale, whether they run on public cloud, private cloud, on-premises data centers, or at the edge.

At its core, Rancher provides a centralized control plane that allows teams to create, import, and manage multiple Kubernetes clusters from a single UI and API. It supports a wide range of Kubernetes distributions, including upstream Kubernetes, RKE / RKE2, K3s, and managed cloud services like EKS, GKE, and AKS.

Rancher focuses heavily on enterprise needs such as multi-cluster management, role-based access control (RBAC), authentication integration (LDAP, Active Directory, OIDC), policy enforcement, and cluster lifecycle management. It enables platform teams to enforce consistent configurations and security policies while allowing application teams to self-serve Kubernetes resources safely.

The platform also integrates tightly with the broader cloud-native ecosystem. Rancher provides built-in support for Helm, monitoring (Prometheus, Grafana), logging, and GitOps workflows, and works well alongside tools like Argo CD, Fleet, and Longhorn for storage.

Rancher is often used as the foundation for platform engineering initiatives, helping organizations standardize Kubernetes operations, reduce operational complexity, and safely scale containerized workloads across environments.