Join us

ContentUpdates and recent posts about Sigstore..
Link
@faun shared a link, 9 months, 2 weeks ago
FAUN.dev()

Kali Linux can now run in Apple containers on macOS systems

Cybersecurity professionals can now launch Kali Linux in a virtualized container on macOS Sequoia using Apple's new containerization framework. Apple announced a new framework at WWDC 2025, allowing Apple Silicon hardware to run isolated Linux distros in a virtualized environment. There are limitati.. read more  

Link
@faun shared a link, 9 months, 2 weeks ago
FAUN.dev()

Cloud native is not just for hyperscalers

CNCF just dropped anAI workload conformance program, built like the Kubernetes one—so AI tools play nice across clusters. Portability, meet your referee. It’s tightening the loop betweenOpenTelemetry and OpenSearch, turning ad-hoc hacks into actual cross-project coordination. AndBackstage and GitOp.. read more  

Cloud native is not just for hyperscalers
Link
@faun shared a link, 9 months, 2 weeks ago
FAUN.dev()

MariaDB Kubernetes Operator 25.08.0 Adds AI Vector Support and Disaster Recovery Enhancements

MariaDB Kubernetes Operator 25.08.0 drops some real upgrades. First up:physical backups. Now supported through native MariaDB tools and Kubernetes CSI snapshots—huge win if you're dealing with chunky datasets and tight recovery windows. It alsodefaults to MariaDB 11.8, which brings in anative vect.. read more  

MariaDB Kubernetes Operator 25.08.0 Adds AI Vector Support and Disaster Recovery Enhancements
Link
@faun shared a link, 9 months, 2 weeks ago
FAUN.dev()

How I eliminated networking complexity

A fresh pattern’s gaining traction:Docker + Tailscale sidecarsreplacing old-school reverse proxies and clunky VPNs. Each service runs as its ownmesh-routed node, containerized and independent. The trick?Network namespace sharing.App containers hook into the Tailscale mesh with no exposed ports, no .. read more  

Link
@faun shared a link, 9 months, 2 weeks ago
FAUN.dev()

AI inference supercharges on Google Kubernetes Engine

Google Cloud's pushingGKEbeyond container orchestration, framing it as an AI inference engine. Meet the new crew: theInference Gateway(smart load balancer, talks models and hardware),custom compute classes, and aDynamic Workload Schedulerthat tunes for both speed and spend. The setup handles GPU an.. read more  

Link
@faun shared a link, 9 months, 2 weeks ago
FAUN.dev()

Kubernetes Will Solve YAML Headaches with KYAML

Kubernetes is eyeing a YAML remix. Version 1.34 may bring inKYAML—a stricter, YAML-compatible subset built to cut down on sloppy configs and sneaky formatting bugs. KYAML keeps the good parts: comments, trailing commas, unquoted keys. But it dumps YAML’s whitespace drama. Existing manifests and Hel.. read more  

Kubernetes Will Solve YAML Headaches with KYAML
Link
@faun shared a link, 9 months, 2 weeks ago
FAUN.dev()

Kubernetes Observability: Pillars, Tools & Best Practices

Kubernetes observability isn’t just about catching metrics or tailing logs. It’s about stitching togethermetrics, logs, and tracesto see what’s actually happening—across services, over time, and through the chaos. Thing is, Kubernetes doesn’t come with this built in. So teams hack together toolchai.. read more  

Link
@faun shared a link, 9 months, 2 weeks ago
FAUN.dev()

Cloudera Acquires Taikun for Managing Kubernetes and Cloud

Cloudera acquired Taikun for seamless deployment of data and AI workloads in any environment. This move reinforces Cloudera's commitment to flexibility and innovation in managing complex IT infrastructures... read more  

Link
@faun shared a link, 9 months, 2 weeks ago
FAUN.dev()

Introducing Headlamp AI Assistant

Headlamp just dropped an AI Assistant plugin that foldsLLM-driven actions and queriesstraight into the Kubernetes UI. It taps intocontext-aware promptsto spot issues, restart deployments, and hunt down flaky pods—without leaving the interface. System shift:This pushes Kubernetes toward intent-based.. read more  

Link
@faun shared a link, 9 months, 2 weeks ago
FAUN.dev()

How We Saved $1.22 Million Annually on GCP Costs in a Few Simple Steps

Arpeely chopped$140K/monthoff their cloud bill using a surgical mix of GCP tricks. Committed Use Discounts (CUDs) for high-availability services? Check. Smarter Kubernetes HPA configs? Definitely. Archiving old BigQuery data into GCS Archive? That one alone slashed storage costs 16x. The real kicker.. read more  

How We Saved $1.22 Million Annually on GCP Costs in a Few Simple Steps
Sigstore is an open source initiative designed to make software artifact signing and verification simple, automatic, and widely accessible. Its primary goal is to improve software supply chain security by enabling developers and organizations to cryptographically prove the origin and integrity of the software they build and distribute.

At its core, sigstore removes many of the traditional barriers associated with code signing. Instead of managing long-lived private keys manually, sigstore supports keyless signing, where identities are issued dynamically using OpenID Connect (OIDC) providers such as GitHub Actions, Google, or Microsoft. This dramatically lowers operational complexity and reduces the risk of key compromise.

The sigstore ecosystem is composed of several key components:

- Cosign: A tool for signing, verifying, and storing signatures for container images and other artifacts. Signatures are stored alongside artifacts in OCI registries, rather than embedded in them.

- Fulcio: A certificate authority that issues short-lived X.509 certificates based on OIDC identities, enabling keyless signing.

- Rekor: A transparency log that records signing events in an append-only, tamper-evident ledger. This provides public auditability and detection of suspicious or malicious signing activity.

Together, these components allow anyone to verify who built an artifact, when it was built, and whether it has been tampered with, using publicly verifiable cryptographic proofs. This aligns closely with modern supply chain security practices such as SLSA (Supply-chain Levels for Software Artifacts).

sigstore is widely adopted in the cloud-native ecosystem and integrates with tools like Kubernetes, container registries, CI/CD pipelines, and package managers. It is commonly used to sign container images, Helm charts, binaries, and SBOMs, and is increasingly becoming a baseline security requirement for production software delivery.

The project is governed by the OpenSSF (Open Source Security Foundation) and supported by major industry players.