Search results for: security


Notary Project completes its second audit!

Posted on January 21, 2025

Community post cross-posted on the OSTIF blog by Helen Woeste, Communications Manager, the Open Source Technology Improvement Fund OSTIF is proud to share the results of our second security audit of Notary Project. Notary Project is…


What is GitLab Runner?

Posted on January 17, 2025

Ambassador post by Natalia Granato, CNCF Ambassador GitLab Runner is an open-source application that runs jobs defined in your GitLab CI/CD pipelines. It can be installed on different platforms, including virtual machines, bare-metal servers, and Kubernetes….


Observing and monitoring Large Language Model workloads with Ray

Posted on January 16, 2025

Ambassador post by Swastik Gour Introduction The emergence of Large Language Models (LLMs) such as GPT-4, PHI2, BERT, and T5 revolutionized natural language processing, with these models empowering high-end applications, including chatbots, recommendation systems, and analytics….


Platform engineering at KubeCon + CloudNative NA 2024 in Salt Lake City

Posted on January 15, 2025

Ambassador post originally published on Medium by Mathieu Benoit, CNCF Ambassador KubeCon NA 2024 in Salt Lake City was a blast! Like always, I met with old friends, I made new friends and I had deep…


Securing public AWS Application Load Balancer (ALB) with OpenID Connect (OIDC)

Posted on January 14, 2025 | Badal Kumar + Siddhant Khisty

Member post originally published on the Devtron blog by Badal Kumar and Siddhant Khisty TL;DR: Learn how to secure your AWS Application Load Balancer (ALB) with OpenID Connect (OIDC) to enhance authentication, prevent unauthorized access and ensure…


Fuzzing the CNCF landscape in 2024

Posted on January 13, 2025 | Chris Aniszczyk + Adam Korczynski + David Korczynski

By Chris Aniszczyk (CNCF), Adam Korczynski (Ada Logics), David Korczynski (Ada Logics) CNCF maintains a high level of security for its projects by way of a series of initiatives such as security auditing, supply-chain assessments and…


CEL-ebrating simplicity: mastering Kubernetes policy enforcement with CEL

Posted on January 13, 2025 | Kevin Conner

Community post by Kevin Conner, Chief Engineer, Getup Cloud and co-author of Kubernetes in Action 2nd Edition As Kubernetes deployments grow in scale and complexity, policy enforcement becomes a critical aspect of maintaining secure and reliable…


Kubestronaut in Orbit: Sofonias Mengistu

Posted on December 31, 2024

Get to know Sofonias This week’s Kubestronaut in Orbit is Sofonias Mengistu, a DevOps Engineer at Gebeya.INC based in Addis Ababa, Ethiopia. With 14 years of IT experience—five of those dedicated to cloud-native technologies—Sofonias has led…


Cilium releases 2024 annual report 

Posted on December 30, 2024

Following a year of significant milestones in 2023, 2024 for Cilium was pivotal in that organizations are now leveraging the project to manage their entire Kubernetes networking stack. We are pleased to share the 2024 Cilium…


OpenTelemetry Collector completes fuzzing audit

Posted on December 30, 2024

Cross-posted from the OpenTelemetry blog by Adam Korczynski OpenTelemetry is happy to announce the completion of the Collector’s fuzzing audit sponsored by the CNCF and carried out by Ada Logics. The audit marks a significant step in the OpenTelemetry…