Cloudflare Adds Documentation Links to API 403 Errors
Cloudflare’s API now returns a documentation_url field in 403 Forbidden responses, pointing developers directly to the relevant endpoint docs and required roles.
Cloud & DevOps
Cloud platforms, containers, infrastructure, automation, deployment, observability, and modern operations.
How to Test Cloudflare Data Loss Prevention Profiles Without Routing Traffic Through Gateway
Cloudflare’s Data Loss Prevention (DLP) Test Scan feature lets Zero Trust customers evaluate DLP profiles on sample data without sending real traffic through the Gateway, providing instant feedback on detections, confidence levels, and OCR output.
Cloudflare launches API‑based CASB remediation policies for Microsoft 365 and Google Workspace
Cloudflare’s new CASB remediation policies let you automatically fix file‑sharing misconfigurations in Microsoft 365 and Google Workspace, or forward findings to any webhook, without manual triage.
How Cloudflare’s Wrangler and API MCP Server Now Support Optional OAuth Scopes
Cloudflare introduced optional OAuth scopes for Wrangler and the API MCP server, letting users grant only the permissions they need. This article explains the new consent flow, the difference between required and optional scopes, and how to adjust permissions during login.
Cloudflare One Virtual Appliance now downloadable directly from the dashboard
Cloudflare has added a self‑serve option that lets you select your hypervisor and download the Cloudflare One Virtual Appliance straight from the dashboard, eliminating the need to locate asset URLs.
Kubernetes Introduces AI-Assisted Contribution Policy
Kubernetes has published an AI policy that requires contributors to disclose AI usage, keeps humans accountable for code changes, and outlines how AI tools like Copilot and CodeRabbit can be used safely in the project.
etcd v3.7.0 introduces RangeStream, drops v2store remnants, and delivers major performance gains
The Kubernetes SIG etcd announced etcd v3.7.0, adding the long‑awaited RangeStream RPC, eliminating legacy v2store dependencies, and bringing a suite of performance, security, and usability improvements for cloud‑native workloads.
etcd 3.7.0‑beta.0 adds RangeStream, drops v2store, and marks v3.4 EOL
The Kubernetes SIG‑etcd announced the first beta of etcd 3.7.0, featuring the long‑awaited RangeStream RPC, removal of legacy v2store code, and the end‑of‑life of version 3.4.
Kubernetes v1.36 introduces the route_controller_route_sync_total metric in the Cloud Controller Manager
Kubernetes 1.36 adds an alpha counter metric, route_controller_route_sync_total, to the Cloud Controller Manager. The metric lets operators verify the new watch‑based route reconciliation feature gate and see how many route syncs actually occur.
Kubernetes 1.36 Introduces Mixed Version Proxy as a Default Beta Feature
Kubernetes 1.36 moves the Mixed Version Proxy (MVP) from Alpha to Beta and enables it by default, improving upgrade safety by transparently routing unknown‑resource requests to a capable API server.
Headlamp Plugin Brings Kubeflow Resources into a Unified Kubernetes UI
The Headlamp Kubeflow plugin lets operators view and troubleshoot Kubeflow workloads—such as notebooks, pipelines, Katib experiments, training jobs, and Spark applications—directly from the general‑purpose Headlamp Kubernetes UI.
How controller-runtime Cache Works and Why It Matters for Performance
Writing Kubernetes controllers in Go often leads to confusion about when data is read from the API server versus a local cache. This guide explains the controller-runtime cache internals, the shift to RealFIFO, and how to optimize memory usage.