Cloud infrastructure, DevOps, containers, platform operations, vulnerabilities, defensive guidance, and security advisories.
Cloudflare introduced optional OAuth scopes for Wrangler and the API MCP server, letting users grant only the permissions they need. This article explains the new consent flow, the difference between required and optional scopes, and how to adjust permissions during login.
Cloudflare has added a self‑serve option that lets you select your hypervisor and download the Cloudflare One Virtual Appliance straight from the dashboard, eliminating the need to locate asset URLs.
Kubernetes has published an AI policy that requires contributors to disclose AI usage, keeps humans accountable for code changes, and outlines how AI tools like Copilot and CodeRabbit can be used safely in the project.
The Kubernetes SIG etcd announced etcd v3.7.0, adding the long‑awaited RangeStream RPC, eliminating legacy v2store dependencies, and bringing a suite of performance, security, and usability improvements for cloud‑native workloads.
The Debian project announced Debian 12.15, the fifteenth and final point release of the oldstable Bookworm series. It bundles dozens of security patches, updates critical firmware tools like fwupd, and marks the end of official support for Debian 12, urging users to migrate to Debian 13 (Trixie).
Debian 12’s regular support ended on 12 July 2026. The Debian LTS team now provides security updates until 30 June 2028, adding ppc64el to the supported architectures. Learn what this means for users, how to identify unsupported packages, and why upgrading to Debian 13 (Trixie) is recommended.
The Kubernetes SIG‑etcd announced the first beta of etcd 3.7.0, featuring the long‑awaited RangeStream RPC, removal of legacy v2store code, and the end‑of‑life of version 3.4.
Kubernetes 1.36 adds an alpha counter metric, route_controller_route_sync_total, to the Cloud Controller Manager. The metric lets operators verify the new watch‑based route reconciliation feature gate and see how many route syncs actually occur.
Kubernetes 1.36 moves the Mixed Version Proxy (MVP) from Alpha to Beta and enables it by default, improving upgrade safety by transparently routing unknown‑resource requests to a capable API server.
The Headlamp Kubeflow plugin lets operators view and troubleshoot Kubeflow workloads—such as notebooks, pipelines, Katib experiments, training jobs, and Spark applications—directly from the general‑purpose Headlamp Kubernetes UI.
Writing Kubernetes controllers in Go often leads to confusion about when data is read from the API server versus a local cache. This guide explains the controller-runtime cache internals, the shift to RealFIFO, and how to optimize memory usage.
Kubernetes SIG Network has released Gateway API v1.6, moving TCP and UDP routing to standard status and introducing a new experimental XBackend resource for egress scenarios. This update expands the API’s coverage beyond HTTP to raw L4 traffic while separating experimental features into a distinct API group.
