Updates and recent posts about Sigstore..

Posts
Description

Link

@faun shared a link, 1 year, 2 months ago

FAUN.dev()

Cold-Starting LLMs on Kubernetes in Under 30 Seconds

RedesigningLLM cold start strategy sliced launch times from 10 minutes tounder 30 secondsby exploitingFUSEandobject storagefor on-demand GPU loading—a revelation for Kubernetes scaling... read more

Link

@faun shared a link, 1 year, 2 months ago

FAUN.dev()

The Next Evolution of DigitalOcean Kubernetes: Introducing Features that Unlock Superior Scalability for Growing Businesses

DigitalOceanjust cranked up the cluster game to a cool1,000nodes, injectedeBPF-based routingfor a performance boost, and rolled outManaged Ciliumto keep things rock steady. Scale orchestration? Now it's on rocket fuel... read more

Link

@faun shared a link, 1 year, 2 months ago

FAUN.dev()

Introducing kube-scheduler-simulator

kube-scheduler-simulatorlets you peek into the mind of Kubernetes’ scheduler. You can poke and prod at scheduling decisions without risking a real cluster meltdown. Add custom plugins like a pro, no sweat. Forget blindsiding surprises. The simulator mirrors production with eerie accuracy—sync resour.. read more

Link

@faun shared a link, 1 year, 2 months ago

FAUN.dev()

CKA Prep: CKA Exam Overview and Preparation Strategy

CKA exam:Juggle up to 6 Kubernetes clusters like a pro. Command rolling updates, Ingress, and persistent storage with flair. Imperative commands? Your secret weapon to snatch victory... read more

Link

@faun shared a link, 1 year, 2 months ago

FAUN.dev()

Google Cloud unveils AI-focused updates to Kubernetes Engine

Meet theCluster Director for GKE. This beast masters GPU/TPU clusters seamlessly, herding them with Kubernetes APIs like a rodeo star. Meanwhile, theGKE Inference Gatewayramps up AI model performance. It's like magic but real: Serving costs tumble by up to30%. Tail latency? Chopped by up to60%... read more

Link

@faun shared a link, 1 year, 2 months ago

FAUN.dev()

Optimize Gemma 3 Inference: vLLM on GKE 🏎️💨

GKE Autopilot's GPUmeans business—AI inference tasks don’t stand a chance. Just two arguments and, bam, you’ve unleashed NVIDIA's beastly Gemma 3 27B model, which chugs a massive46.4GB VRAM. ⚡️ Meanwhile, vLLM squeezes the models with bf16 precision, though optimization requires wrestling with algor.. read more

Link

@faun shared a link, 1 year, 2 months ago

FAUN.dev()

Kubernetes 1.33 – What you need to know

Kubernetes 1.33 shakes things up with game-changing updates.LIST streaming encodingtrims down API Server memory like a chef with a sharp knife. Deliberate deletion orders lock down security tighter than a drum. And get this:in-place updatesfor Pod resources ditch those annoying restarts! Finally, us.. read more

Link

@anjali shared a link, 1 year, 2 months ago

Customer Marketing Manager, Last9

Observability vs APM: What’s the Real Difference?

Observability goes beyond APM—it's not just about metrics, it's about understanding why things break, not just that they did.

Link

@anjali shared a link, 1 year, 2 months ago

Customer Marketing Manager, Last9

Logging vs Monitoring: What’s the Real Difference?

Logging and monitoring work together, but they’re not the same. Here’s how they help you understand, fix, and improve your systems.

Link

@anjali shared a link, 1 year, 2 months ago

Customer Marketing Manager, Last9

Debug Logging: A Comprehensive Guide for Developers

A clear guide to debug logging—what it is, how to use it well, and why it matters when you're trying to understand what your code is doing.

Sigstore is an open source initiative designed to make software artifact signing and verification simple, automatic, and widely accessible. Its primary goal is to improve software supply chain security by enabling developers and organizations to cryptographically prove the origin and integrity of the software they build and distribute.

At its core, sigstore removes many of the traditional barriers associated with code signing. Instead of managing long-lived private keys manually, sigstore supports keyless signing, where identities are issued dynamically using OpenID Connect (OIDC) providers such as GitHub Actions, Google, or Microsoft. This dramatically lowers operational complexity and reduces the risk of key compromise.

The sigstore ecosystem is composed of several key components:

- Cosign: A tool for signing, verifying, and storing signatures for container images and other artifacts. Signatures are stored alongside artifacts in OCI registries, rather than embedded in them.

- Fulcio: A certificate authority that issues short-lived X.509 certificates based on OIDC identities, enabling keyless signing.

- Rekor: A transparency log that records signing events in an append-only, tamper-evident ledger. This provides public auditability and detection of suspicious or malicious signing activity.

Together, these components allow anyone to verify who built an artifact, when it was built, and whether it has been tampered with, using publicly verifiable cryptographic proofs. This aligns closely with modern supply chain security practices such as SLSA (Supply-chain Levels for Software Artifacts).

sigstore is widely adopted in the cloud-native ecosystem and integrates with tools like Kubernetes, container registries, CI/CD pipelines, and package managers. It is commonly used to sign container images, Helm charts, binaries, and SBOMs, and is increasingly becoming a baseline security requirement for production software delivery.

The project is governed by the OpenSSF (Open Source Security Foundation) and supported by major industry players.