Suggested Reads
1_r/devopsish
NASA and SpaceX misjudged the risks from reentering space junk
“Safety tends to not be on the front burner until it really needs to be on the front burner.”
2_News
Supreme Court guts agency power in seismic Chevron ruling
The ruling on the doctrine will weaken the impact of statues for a wide array policy areas.
Amazon Is Investigating Perplexity Over Claims of Scraping Abuse
Perplexity, the billion dollar AI company that has plagiarized us and other outlets, is now in hot water with Amazon for arguably illegal business practices.
Michigan’s $23B education deal
Michigan Democrats cap a 19-hour marathon session with approval of an education budget they say will put money back into classrooms. Some school groups opposed the plan, along with all Republicans.
RSA Conference 2024 Opening Keynote
RSA Conference 2024 Opening Keynote
Welcome to RSA Conference 2024, the perfect opportunity to connect with like-minded colleagues. Where people gather around a shared passion, great things can…
June 28, 2024 at 12:11PM
via Instapaper
Last Week in Kubernetes Development - Week Ending June 23 2024
Week Ending June 23, 2024
https://lwkd.info/2024/20240628
Developer News
Reminder: all jobs on the old test cluster must migrate or die by August 1. Here’s a table of unmigrated jobs. While you’re at it, start working on using --label-filter to revise how Prow runs your tests.
Release Schedule
Next Deadline: Docs Deadline for placeholder PRs, June 27th
The code freeze deadline has been extended from July 10th to July 24th, adding 2 weeks of time in lieu of the US holidays.
Featured PRs
125560 Add field management support to fake client-go typed client
This PR introduces a new feature by adding field management support to the fake client-go typed client. This enhancement allows developers to use fake.NewClientset() instead of fake.NewSimpleClientset() to create a clientset with managed field support. This improvement addresses issue where Server-Side Apply (and fieldmanagement) was missing in client-go/fake and is crucial for more accurate testing and simulation of Kubernetes API server behaviors in client-go. It ensures that the fake client mimics real client behaviors more closely, benefiting developers who rely on it for unit testing. For more details, refer to kubernetes/client-go#1184 and #99953.
KEP of the Week
KEP 4193: Bound service account token improvements
This (KEP) aims to bind Pod’s associated Node information into Kubernetes service account tokens, enhancing their security and traceability. By embedding the Node’s name and UID into the JWT tokens and including unique identifiers (JTIs), the KEP ensures robust identity verification and improves auditability. This includes extending the TokenRequest API to bind tokens to Node objects and modifying the TokenReview API to validate these tokens. These changes support mitigating replay attacks and improving the overall security posture of Kubernetes clusters by providing a clear, traceable link between tokens and their originating Node objects.
This KEP is tracked for beta release in the upcoming v1.31.
Other Merges
KUBE_EMULATED_VERSION env added to set emulated version of apiserver
Publishing rules to use go1.22.4 for all branches
Add Extra.DisableAvailableConditionController for Generic Control Plane setup in kube-aggregator
Switch PollWithContext to PollUntilContextTimeout
kubeadm adds the ControlPlaneKubeletLocalMode feature gate for running kubeadm with local kube-apiserver
Skip updating Pods which are in the scheduling cycle when SchedulingQueueHint is enabled
kubeadm allows usage of –yes flag with the –config flag
The .status.ready field is tracked faster when active Pods are deleted, specifically when a Job is failed
kubectl describe service now shows internal traffic policy and IP mode of a load balancer serivce
Improve memory usage of kube-apiserver by dropping the .metadata.managedFields field
Fix null lastTransitionTime in Pod condition when setting scheduling gate
Promotions
PDBUnhealthyPodEvictionPolicy to GA
ConsistentListFromCache to beta
HonorPVReclaimPolicy to beta
KubeProxyDrainingTerminatingNodes to GA
LogarithmicScaleDown to GA
RecursiveReadOnlyMounts to beta
Deprecated
Deprecated kubectl exec command execution without dash removed
Version Updates
Go upgraded to 1.22.4 for v1.27, v1.28 and v1.29
Subprojects and Dependency Updates
Kernel Module Management v2.1.1: normalize kernel versions, stop no-op controllers
cni v1.2.1: fix faulty json marshal behavior for embeds types
csi-driver-host-path v1.14.0 replace socat image with hostpathplugin image
prometheus v2.53.0: change GOGC threshold from 100 to 75; also v2.45.6
via Last Week in Kubernetes Development https://lwkd.info/
June 28, 2024 at 08:50AM
Chrome will distrust CA certificates from Entrust later this year
Over the years, Chrome has distrusted some CAs, and the Google browser is about to do that again with certificates from Entrust...
Has Facebook Stopped Trying?
Facebook has been overrun with AI spam and scams. Experts say Facebook has stopped asking them for help.
Michigan Central And The Impact On Corktown | Detroitisit
Having Reopened the One Time Train Station on June 6 - How is it Fairing?
zackees/transcribe-anything: Input a local file or url and this service will transcribe it using Whisper AI. Completely private and Free
zackees/transcribe-anything: Input a local file or url and this service will transcribe it using Whisper AI. Completely private and Free 🤯🤯🤯
USES WHISPER AI Over 300+⭐'s because this program this app just works! This whisper front-end app is the only one to generate a speaker.json file which…
June 27, 2024 at 12:31PM
via Instapaper
COVID-19 cases hospitalizations climb in US during summer: Where Michigan stands
COVID-19 cases, hospitalizations climb in US during summer: Where Michigan stands
Cough, cough. Sniff, sniff. Summer typically is not the season for respiratory infections, but it is the time when people get together for reunions, barbecues and graduation parties, plus celebrate weddings and travel.
Tags:
June 27, 2024 at 12:14PM
Tom Callaway on LinkedIn: Can you be more open than open source? When it comes to software, the…
Can you be more open than open source? When it comes to software, the answer is clearly no, and this has been a big part of why open source has worked so well.… | 16 comments on LinkedIn
Here we go! | Music industry giants allege mass copyright violation by AI firms
Suno and Udio could face damages of up to $150,000 per song allegedly infringed.
I’m Just a Simple Macintosh User, Asking a Bazillion Dollar Company for a Better Way To Move Tasks Between Lists in Reminders
Every summer, I take some time with Apple's updated stock apps. Many of them are quite good, and meet the needs for the vast majority of users. I fully understand that sometimes you and I are not the vast majority of users, and that third-party apps can often better fit our needs. Every year, I [...]
Microsoft blamed for million-record theft from Geisinger
Probe: Worker at speech-recog outfit Nuance wasn't locked out after firing
Researchers upend AI status quo by eliminating matrix multiplication in LLMs
Running AI models without floating point matrix math could mean far less power consumption.
CVE-2024-5806: Progress MOVEit Transfer Authentication Bypass Vulnerability
Progress Software has patched a high severity authentication bypass in the MOVEit managed file transfer (MFT) solution. As MOVEit has been a popular target for ransomware gangs and other threat actors, we strongly recommend prioritizing patching of this vulnerability.
How Developers Can Head Off Open Source Licensing Problems
Even the frontend isn't immune to problems with open source licensing. Find out what developers can do to avoid potential headaches.
Now if everyone else that doesn’t have a feed type application would do the same too | Google dropping continuous scroll in search results
Continuous scroll launched in Google mobile search in October 2021 and on desktop in December 2022.
A robots.txt file is no way to tell researchers what to do | Upholding Our Public Content Policy and Updating Our robots.txt file
Microsoft removes documentation for switching to a local account in Windows 11
But most Microsoft account sign-in workarounds for Windows 11 continue to work.
Mozilla is trying to push me out because I have cancer – CPO
Steve Teixeira, said to be CEO-in-waiting, now sues Firefox maker for discrimination, retaliation
Supreme Court tosses out claim Biden administration coerced social media companies to remove content
The court overturned an injunction that would have limited contacts between government officials and social media companies on a wide range of issues.
Nvidia CEO Jensen Huang addresses rising competition at first shareholder meeting since stock surge
Since last year's meeting, Nvidia has been on a historic run.
Joint guidance exploring memory safety in critical open source projects 508c
June 26, 2024 at 12:22PM
via Instapaper
ID Verification Service for TikTok Uber X Exposed Driver Licenses
ID Verification Service for TikTok, Uber, X Exposed Driver Licenses
Subscribe Join the newsletter to get the latest updates. 🖥️ 404 Media is a journalist-owned website. Sign up to support our work and for free access to this…
June 26, 2024 at 11:32AM
via Instapaper
%2Fcdn.vox-cdn.com%2Fuploads%2Fchorus_asset%2Ffile%2F25503643%2FDSCF7817_Enhanced_NR_2.jpg?width=92&height=&ar=&mode=&format=avif&dpr=2)
Windows on Arm finally has legs
Windows on Arm finally has legs
Photo by Chris Welch / The Verge When I first used the Arm-powered Surface Pro X in 2019, I loved the hardware but disliked the software experience. Everything…
June 26, 2024 at 10:59AM
via Instapaper
Linux geeks cheer as Arm wrestles x86
AlmaLinux and upstream kernel support for Raspberry Pi 5, plus a forthcoming high-performance Arm64 Tuxedo laptop
GrimResource - Microsoft Management Console for initial access and evasion — Elastic Security Labs
Elastic researchers uncovered a new technique, GrimResource, which allows full code execution via specially crafted MSC files. It underscores a trend of well-resourced attackers favoring innovative initial access methods to evade defenses.