Updates and recent posts about Sigstore..

Posts
Description

Link

@faun shared a link, 11 months, 1 week ago

FAUN.dev()

AWS Launches EKS Dashboard to Tackle Multi-Cloud Kubernetes Complexity

AWS has unleashed theAmazon EKS Dashboard—the ultimate tool for seeing your Kubernetes clusters in vivid color. It dishes up cost forecasts and keeps an eye on compliance, which is more than you can say for Google Cloud'sKHI, obsessed as it is with log inspection alone. AWS serves up the full pictur.. read more

Link

@faun shared a link, 11 months, 1 week ago

FAUN.dev()

How to create Cilium Cluster Mesh between K3s and Azure Kubernetes Service

Ciliummasterfully knits clusters, weaving on-prem K3s with privateAKSusing Azure Virtual WAN. Efficient load-balancing? Piece of cake... read more

Link

@faun shared a link, 11 months, 1 week ago

FAUN.dev()

FinOps in Action: Efficient AWS EKS Deployment with Terraform

Amazon EKStames Kubernetes chaos on AWS and dishes up power moves when you throwTerraforminto the ring. Terraform automates and locks down cluster management, letting you strut into cost-saving territory like a pro. Deploying EKS clusters through Terraform? That's your golden ticket toSpot Instances.. read more

Link

@faun shared a link, 11 months, 1 week ago

FAUN.dev()

Run Kubernetes Clusters for Less with Amazon EC2 Spot and Karpenter

Karpenterbrings some much-needed swagger toAWS EKSclusters with its clever auto-scaling tricks. It grabsEC2 Spot Instancesand slashes costs by a dazzling90%for stateless, flexible workloads. Imagine dynamic nodes practically springing to life, optimized compute horsepower unleashed, and interruption.. read more

Link

@faun shared a link, 11 months, 1 week ago

FAUN.dev()

A Year of Envoy Gateway GA: Building, Growing, and Innovating Together

Envoy Gatewayjust wrapped its rookie year, and it’s been anything but boring. Four major releases. Game-changing features. A community of builders that means business. Version 1.4? It roped in65 contributorsfrom54 companies, revamping the way cloud-native traffic flows. Meanwhile,Envoy Proxykeeps gr.. read more

Link

@faun shared a link, 11 months, 1 week ago

FAUN.dev()

Publishing AI models to Hub

Docker Model Runnerstruts out with new tricks:tag, push, and packagecommands. Want to pass around AI models like they're hot potatoes? Now you can. They're OCI artifacts now, slotting smoothly into your workflow like it was always meant to be... read more

Link

@faun shared a link, 11 months, 1 week ago

FAUN.dev()

From Kafka to Ray: Deploying AI and Stateful Workloads on AKS with Confidence

Azure's new AKS guides slice through the fog around deployingKafka,Apache Airflow, andRay. Spotlights shine onJVM tuningmagic for Kafka and a peek atKubeRaywrangling distributed Ray... read more

Link

@faun shared a link, 11 months, 1 week ago

FAUN.dev()

Connecting Applications to Self-Service Datastores

Self-service datastore delivery just got easier with Kubernetes init containers and mutating admission webhooks automating secrets provision and rotation securely, simplifying developer workflows and enhancing data security... read more

Link

@faun shared a link, 11 months, 1 week ago

FAUN.dev()

Azure Kubernetes Service (AKS) – eBPF-based networking & security + integration with Microsoft Sentinel

Banish premium woes.CiliumandTetragontake Kubernetes security and amp it up with instant insights and alerts inMicrosoft Sentinel—without costing you a dime. Forget kube-proxy. Harness eBPF magic for L7 inspection withEnvoy. Blend Cilium’s raw speed with Tetragon’s covert skills. Voilà—your cluster’.. read more

Link

@faun shared a link, 11 months, 1 week ago

FAUN.dev()

Introducing the Certified Cloud Native Platform Engineering Associate (CNPA): Community-Driven Certification for Platform Engineers

The CNPA cert isn't just a piece of paper—it's your ticket to proving you're a maestro of platform engineering. Think automation, observability, and making life easier for developers. Created by the CNCF and Linux Foundation, with a little help from over 50 tech visionaries, it's tailor-made for tho.. read more

Sigstore is an open source initiative designed to make software artifact signing and verification simple, automatic, and widely accessible. Its primary goal is to improve software supply chain security by enabling developers and organizations to cryptographically prove the origin and integrity of the software they build and distribute.

At its core, sigstore removes many of the traditional barriers associated with code signing. Instead of managing long-lived private keys manually, sigstore supports keyless signing, where identities are issued dynamically using OpenID Connect (OIDC) providers such as GitHub Actions, Google, or Microsoft. This dramatically lowers operational complexity and reduces the risk of key compromise.

The sigstore ecosystem is composed of several key components:

- Cosign: A tool for signing, verifying, and storing signatures for container images and other artifacts. Signatures are stored alongside artifacts in OCI registries, rather than embedded in them.

- Fulcio: A certificate authority that issues short-lived X.509 certificates based on OIDC identities, enabling keyless signing.

- Rekor: A transparency log that records signing events in an append-only, tamper-evident ledger. This provides public auditability and detection of suspicious or malicious signing activity.

Together, these components allow anyone to verify who built an artifact, when it was built, and whether it has been tampered with, using publicly verifiable cryptographic proofs. This aligns closely with modern supply chain security practices such as SLSA (Supply-chain Levels for Software Artifacts).

sigstore is widely adopted in the cloud-native ecosystem and integrates with tools like Kubernetes, container registries, CI/CD pipelines, and package managers. It is commonly used to sign container images, Helm charts, binaries, and SBOMs, and is increasingly becoming a baseline security requirement for production software delivery.

The project is governed by the OpenSSF (Open Source Security Foundation) and supported by major industry players.