Suggested Reads

Suggested Reads

54935 bookmarks
Newest
Security: Supply chain Security
Security: Supply chain Security
Security has always been a core focus of the project and that effort continues with upcoming features around supply chain security
·blog.argoproj.io·
Security: Supply chain Security
Announcing the latest AWS Heroes – June 2023 | Amazon Web Services
Announcing the latest AWS Heroes – June 2023 | Amazon Web Services
AWS Heroes dedicate their time to help others build better and faster on AWS. Heroes support and give back to the community in a variety of ways: contributing to open source projects, organizing AWS Community Days, speaking at conferences, leading workshops, mentoring builders, hosting meetups, and much more. Please welcome and say hello to our […]
·aws.amazon.com·
Announcing the latest AWS Heroes – June 2023 | Amazon Web Services
Bring your tailnet to VS Code
Bring your tailnet to VS Code
We’re releasing a Tailscale extension for Visual Studio Code, a text editor we hear is pretty popular. The new extension, now in beta, brings the magic of your tailnet even closer to your code and makes it easier than ever to share your local development over the internet for collaboration, testing, and experimentation.
·tailscale.com·
Bring your tailnet to VS Code
Blog: dl.k8s.io to adopt a Content Delivery Network
Blog: dl.k8s.io to adopt a Content Delivery Network
Authors : Arnaud Meukam (VMware), Hannah Aubry (Fast Forward), FredericoMuñoz (SAS Institute)We're happy to announce that dl.k8s.io, home of the official Kubernetesbinaries, will soon be powered by Fastly .Fastly is known for its high-performance content delivery network (CDN) designedto deliver content quickly and reliably around the world. With its powerfulnetwork, Fastly will help us deliver official Kubernetes binaries to usersfaster and more reliably than ever before.The decision to use Fastly was made after an extensive evaluation process inwhich we carefully evaluated several potential content delivery networkproviders. Ultimately, we chose Fastly because of their commitment to the openinternet and proven track record of delivering fast and secure digitalexperiences to some of the most known open source projects (through their FastForward program).What you need to know about this changeOn Monday, July 24th, the IP addresses and backend storage associated with thedl.k8s.io domain name will change.The change will not impact the vast majority of users since the domainname will remain the same.If you restrict access to specific IP ranges, access to the dl.k8s.io domaincould stop working.If you think you may be impacted or want to know more about this change,please keep reading.Why are we making this changeThe official Kubernetes binaries site, dl.k8s.io, is used by thousands of usersall over the world, and currently serves more than 5 petabytes of binaries eachmonth . This change will allow us to improve access to those resources byleveraging a world-wide CDN.Does this affect dl.k8s.io only, or are other domains also affected?Only dl.k8s.io will be affected by this change.My company specifies the domain names that we are allowed to be accessed. Will this change affect the domain name?No, the domain name (dl.k8s.io ) will remain the same: no change will benecessary, and access to the Kubernetes release binaries site should not beaffected.My company uses some form of IP filtering. Will this change affect access to the site?If IP-based filtering is in place, it’s possible that access to the site will beaffected when the new IP addresses become active.If my company doesn’t use IP addresses to restrict network traffic, do we need to do anything?No, the switch to the CDN should be transparent.Will there be a dual running period?No, it is a cutover. You can, however, test your networks right now to checkif they can route to the new public IP addresses from Fastly. You should addthe new IPs to your network's allowlist before July 24th. Once the transfer iscomplete, ensure your networks use the new IP addresses to connect tothe dl.k8s.io service.What are the new IP addresses?If you need to manage an allow list for downloads, you can get the ranges tomatch from the Fastly API, in JSON: public IP addressranges . You don't need any credentialsto download that list of ranges.What next steps would you recommend?If you have IP-based filtering in place, we recommend the following course ofaction before July, 24th :Add the new IP addresses to your allowlist.Conduct tests with your networks/firewall to ensure your networks can route tothe new IP addresses.After the change is made, we recommend double-checking that HTTP calls areaccessing dl.k8s.io with the new IP addresses.What should I do if I detect some abnormality after the cutover date?If you encounter any weirdness during binaries download, please open anissue .
·kubernetes.io·
Blog: dl.k8s.io to adopt a Content Delivery Network
White House critical infrastructure protection order is ‘outdated’ and needs rethinking, Cyberspace Solarium Commission says
White House critical infrastructure protection order is ‘outdated’ and needs rethinking, Cyberspace Solarium Commission says
A decade-old presidential directive that clarified how the private sector should protect critical infrastructure like power utilities and manufacturing plants has “become outdated and incapable of meeting today’s demands,” according to an influential cybersecurity policy organization.
·therecord.media·
White House critical infrastructure protection order is ‘outdated’ and needs rethinking, Cyberspace Solarium Commission says