Join us

ContentUpdates and recent posts about Sigstore..
Link
@faun shared a link, 10 months ago
FAUN.dev()

The Evolution of Virtualization Platforms: The Rise of Managed Services and Local Providers’ Edge Against Hyperscalers

Cozystackwants local cloud providers to flex by deliveringKubernetes-based managed serviceswithout breaking a sweat. Who needs hyperscalers anyway? Built on open-source goodness, it ditches vendor lock-in, giving these providers the freedom to roll out next-gen infrastructures in style... read more  

The Evolution of Virtualization Platforms: The Rise of Managed Services and Local Providers’ Edge Against Hyperscalers
Link
@faun shared a link, 10 months ago
FAUN.dev()

Building scalable secrets management in hybrid cloud environments

GitGuardian's 2024 reportsounds the alarm:23 million secrets slipped through leaks in 2023. A whopping 70% hung around for months. Talk about a security nightmare! EnterHashiCorp VaultandAkeyless. These tools mastered the multi-cloud juggling act and automated secrets management. Result? A satisfyin.. read more  

Building scalable secrets management in hybrid cloud environments
Link
@faun shared a link, 10 months ago
FAUN.dev()

Kubernetes Scaling Strategies

Horizontal Pod Autoscaler(HPA) cranks up pods based on CPU, memory, or custom quirks. A dream for stateless adventures, but you'll need a metrics server.Vertical Pod Autoscaler(VPA) fine-tunes CPU and memory for pods. Works like a charm for jobs where scaling out is sketchy, though it demands restar.. read more  

Kubernetes Scaling Strategies
Link
@faun shared a link, 10 months ago
FAUN.dev()

Zendesk Streamlines Infrastructure Provisioning with Foundation Interface Platform

Zendeskhas tossed out the old playbook with itsFoundation Interface. Forget the guessing games of infrastructure provisioning; engineers now scribble their demands in YAML, and voilà—magic happens. Kubernetes operators step in, spinning these requests into Custom Resources. It’s self-service nirvana.. read more  

Zendesk Streamlines Infrastructure Provisioning with Foundation Interface Platform
Link
@faun shared a link, 10 months ago
FAUN.dev()

GitOps continuous delivery with ArgoCD and EKS using natural language

ArgoCD MCP Serverteams up withAmazon Q CLIto shake up Kubernetes with natural language controls. Finally, GitOps that even the non-tech crowd can handle. Kiss those roadblocks goodbye. No more brain strain from Kubernetes. Now, plain language syncs apps, reveals resource trees, and checks health sta.. read more  

GitOps continuous delivery with ArgoCD and EKS using natural language
Link
@faun shared a link, 10 months ago
FAUN.dev()

Under the hood: Amazon EKS ultra scale clusters

Amazon EKScranked up its gear—you can now spin up clusters with a staggering100,000 nodesat your beck and call. That’s a cozy home for either1.6 million AWS Trainium chipsor800,000 NVIDIA GPUs. Welcome to the playground for ultra-scale AI/ML. Performance soars skyward by ditching old etcd consensus .. read more  

Under the hood: Amazon EKS ultra scale clusters
Link
@faun shared a link, 10 months ago
FAUN.dev()

6 Design Principles for Edge Computing Systems

Edge systemseach have their eccentricities, needing solutions as unique as they are:Chick-fil-Aswears byKubernetesto herd its standard operations. TheAir Force, however, prizes nimbleness and ironclad security for deployments scattered across the globe. Smart edge management? It’s a mix ofInfrastruc.. read more  

6 Design Principles for Edge Computing Systems
Link
@faun shared a link, 10 months ago
FAUN.dev()

Post-Quantum Cryptography in Kubernetes

Kubernetes v1.33quietly rides thepost-quantum securitywave, thanks to Go 1.24's hybrid key exchanges. Watch out for version mismatches, though—those could sneakily downgrade your defenses... read more  

Story
@laura_garcia shared a post, 10 months ago
Software Developer, RELIANOID

🚨 Is Your Business Ready for a Cyber Crisis? 🚨

A cyberattack can strike at any time—causing operational disruption, financial loss, and reputational damage. Preparing for and effectively managing a cyber crisis is no longer optional—it's essential. At RELIANOID, we help businesses build robust cyber resilience through advanced solutions and expe..

Blog Preparing and Managing a Cyber Crisis RELIANOID
Link
@anjali shared a link, 10 months ago
Customer Marketing Manager, Last9

Monitor Nginx with OpenTelemetry Tracing

Instrument NGINX with OpenTelemetry to capture traces, track latency, and connect upstream and downstream services in a single request flow.

Nginx_opentelemetry
Sigstore is an open source initiative designed to make software artifact signing and verification simple, automatic, and widely accessible. Its primary goal is to improve software supply chain security by enabling developers and organizations to cryptographically prove the origin and integrity of the software they build and distribute.

At its core, sigstore removes many of the traditional barriers associated with code signing. Instead of managing long-lived private keys manually, sigstore supports keyless signing, where identities are issued dynamically using OpenID Connect (OIDC) providers such as GitHub Actions, Google, or Microsoft. This dramatically lowers operational complexity and reduces the risk of key compromise.

The sigstore ecosystem is composed of several key components:

- Cosign: A tool for signing, verifying, and storing signatures for container images and other artifacts. Signatures are stored alongside artifacts in OCI registries, rather than embedded in them.

- Fulcio: A certificate authority that issues short-lived X.509 certificates based on OIDC identities, enabling keyless signing.

- Rekor: A transparency log that records signing events in an append-only, tamper-evident ledger. This provides public auditability and detection of suspicious or malicious signing activity.

Together, these components allow anyone to verify who built an artifact, when it was built, and whether it has been tampered with, using publicly verifiable cryptographic proofs. This aligns closely with modern supply chain security practices such as SLSA (Supply-chain Levels for Software Artifacts).

sigstore is widely adopted in the cloud-native ecosystem and integrates with tools like Kubernetes, container registries, CI/CD pipelines, and package managers. It is commonly used to sign container images, Helm charts, binaries, and SBOMs, and is increasingly becoming a baseline security requirement for production software delivery.

The project is governed by the OpenSSF (Open Source Security Foundation) and supported by major industry players.