Angular OpenTelemetry Setup and Troubleshooting
Learn how to set up OpenTelemetry in your Angular app and troubleshoot common issues with tracing, instrumentation, and export configuration.
Updates and recent posts about Sigstore.. Link
Link
@faun shared a link, 1Â year ago
FAUN.dev()
Anubis and caddy-docker-proxy
CKANfaced a barrage: 60 requests per second, courtesy of some mischief-maker in Brazil. EnterAnubis. With its SHA256 challenge, it cut through the chaos like a hot knife through warm Brazilian pĂŁo de queijo. Now, plugging Anubis intocaddy-docker-proxypractically did itself. The proxy auto-configures.. read more Â
Link
@faun shared a link, 1Â year ago
FAUN.dev()
v1.33: From Secrets to Service Accounts: Image Pulls Evolved
Kubernetes drops ephemeral KSA tokens into the mix for image pulls, putting long-lived credentials in the rearview mirror. Granular access? Absolutely rocks. Compliance? Consider it handled... read more Â
Link
@faun shared a link, 1Â year ago
FAUN.dev()
1.33: Volume Populators Graduate to GA
Kubernetes v1.33unleashesvolume populatorsfor all to enjoy. Custom resources now power data sources. Say goodbye to pesky resource leaks, mishmash configurations, and sleepy metrics. Prepare for a wild ride of flexibility... read more Â
Link
@faun shared a link, 1Â year ago
FAUN.dev()
The state of Kubernetes jobs in 2025 Q1
North American Kubernetes salariestook a 6% nosedive, settling at an average$165,288. Meanwhile, Europe enjoyed a tidy 4% uptick. Remote work? Holding steady at68%. No surpriseâPythonremained the darling of coding languages, getting a nod in62%of job posts, whileDockerwasn't far behind, gracing57%of.. read more Â
Link
@faun shared a link, 1Â year ago
FAUN.dev()
Impromptu disaster recovery
K3s reconciler threw a fit. A botched YAML reformat doubled up resources and obliterated the authorâs cluster, courtesy of the clumsy hands of language models. Itâs a vivid postcard from the island of LLM limitations. Luckily, Hetznerâs system rebuild stepped in to save the day. But it wasnât painle.. read more Â
Link
@faun shared a link, 1Â year ago
FAUN.dev()
The Kubernetes Gateway API through beginnerâs eyes
Gateway API, the sassy heir to Ingress, jugglesL4 & L7 protocolslike it was born for it. Tosses out those annoying, vendor-specific annotations to clean up Kubernetes networking. On a whim, I swapped an external cronjob for aKubernetes CronJobâbecause tinkering is a blast, and, let's face it, automa.. read more Â
Link
@faun shared a link, 1Â year ago
FAUN.dev()
How to build small and secure Docker images for Rust (FROM scratch)
This Dockerfile allows for the creation of minimal and secure Docker images for Rust projects. It utilizes multi-stage builds to avoid unnecessary dependencies and reduces the size of the final image... read more Â
Link
@faun shared a link, 1Â year ago
FAUN.dev()
v1.33: Streaming List responses
Kubernetesunleashed a game-changer:streaming encoding for List responses. What used to hog70-80GBnow zips by on a sleek3GB. That's a20x improvementin memory conservation. Say goodbye to those aggravating Out-of-Memory errors. This upgrade tackles mammoth datasets while babysitting your cluster's sta.. read more Â
Link
@faun shared a link, 1Â year ago
FAUN.dev()
Uberâs Journey to Ray on Kubernetes
Uber tossed manual ML resource wrangling for a slick Kubernetes-Ray duo, amping up scalability and slashing inefficiencies.With dynamic resource pools, elastic sharing, and smart scheduling, they rev up utilization and demolish GPU wasteâno micromanaging required... read more Â
At its core, sigstore removes many of the traditional barriers associated with code signing. Instead of managing long-lived private keys manually, sigstore supports keyless signing, where identities are issued dynamically using OpenID Connect (OIDC) providers such as GitHub Actions, Google, or Microsoft. This dramatically lowers operational complexity and reduces the risk of key compromise.
The sigstore ecosystem is composed of several key components:
- Cosign: A tool for signing, verifying, and storing signatures for container images and other artifacts. Signatures are stored alongside artifacts in OCI registries, rather than embedded in them.
- Fulcio: A certificate authority that issues short-lived X.509 certificates based on OIDC identities, enabling keyless signing.
- Rekor: A transparency log that records signing events in an append-only, tamper-evident ledger. This provides public auditability and detection of suspicious or malicious signing activity.
Together, these components allow anyone to verify who built an artifact, when it was built, and whether it has been tampered with, using publicly verifiable cryptographic proofs. This aligns closely with modern supply chain security practices such as SLSA (Supply-chain Levels for Software Artifacts).
sigstore is widely adopted in the cloud-native ecosystem and integrates with tools like Kubernetes, container registries, CI/CD pipelines, and package managers. It is commonly used to sign container images, Helm charts, binaries, and SBOMs, and is increasingly becoming a baseline security requirement for production software delivery.
The project is governed by the OpenSSF (Open Source Security Foundation) and supported by major industry players.
