Show HN: Mercek – A Desktop IDE for AWS ECS
Hey HN
I’ve been using ECS for a while now and found it annoying having to log into the console everytime
I use Lens for Kubernetes but couldnt find an equivalent for ECS so i built one!
The project is open source as well
https://github.com/utibeabasi6/mercek
Comments URL: https://news.ycombinator.com/item?id=48404732
Points: 3
# Comments: 0 ⌘ Read more
Multiple redhat-cloud-services npm packages compromised (StepSecurity Blog)
StepSecurity is reporting
that a number of npm packages in the @redhat-cloud-services
scope include malware that runs automatically on every npm
install:
The payload is a multi-stage credential harvester that sweeps
GitHub Actions secrets along with AWS, GCP, Azure, Kubernetes,
HashiCorp Vault, npm, and CircleCI tokens, and it is purpose-built to
evade det … ⌘ Read more
Launch HN: Expanse (YC P26) – Unlock Wasted GPU Capacity
Hey HN, we’re Ismaeel, Eren, Yafet and Nikodem. We built Expanse ( https://expanse.sh/) to increase the effective capacity of your HPC/GPU clusters running schedulers/orchestrators like Kubernetes and SLURM. We read the source code, job submission script, and the hardware a workload is about to run on to predict what the job actually needs before the cluster sees it. We also flag failures we think are about to happen and surface line-level opt … ⌘ Read more
NVIDIA Talks Up “Expanding The Open-Source Horizon” Around AI & Kubernetes
KubeCon Europe is running this week in Amsterdam and NVIDIA used the event to talk up their open-source work around AI and newest open-source contributions… ⌘ Read more
Kubernetes Is Retiring Its Popular Ingress NGINX Controller
During last month’s KubeCon North America in Atlanta, Kubernetes maintainers announced the upcoming retirement of Ingress NGINX. “Best-effort maintenance will continue until March 2026,” noted the Kubernetes SIG Network and the Security Response Committee. “Afterward, there will be no further releases, no bugfixes, and no updates to resolve any security vu … ⌘ Read more
An architectural decision: Containers on bare metal or on virtual machines
Building and running modern applications begins with selecting Kubernetes distribution as a baseline. Once a platform team has selected its orchestration layer, one of the next architectural choices involves the deployment architecture where that cluster will… ⌘ Read more
Top 5 hard-earned lessons from the experts on managing Kubernetes
Kubernetes has transformed how modern organizations deploy and operate scalable infrastructure, and the hype around automated cloud native orchestration has made its adoption nearly ubiquitous over the past 10+ years. Yet behind the scenes, most teams… ⌘ Read more
Kgateway v2.1 is released!
Kgateway is an open source implementation of the Kubernetes Gateway API that unifies ingress, API gateway, service mesh, and AI gateway capabilities in a singular modular control plane. Built for performance and flexibility, it secures and… ⌘ Read more
AMD Enterprise AI Suite Announced: End-To-End AI Solution For Kubernetes With Instinct
The AMD ROCm blog just announced a new open-source AMD AI software project: the AMD Enterprise AI Suite as well as AMD Inference Microservices (AIMs)… ⌘ Read more
Helm Marks 10 Years With Release of Version 4
Major update introduces new features while maintaining Helm’s role in Kubernetes application management Key Highlights KubeCon + CloudNativeCon North America, ATLANTA, GA – November 12, 2025 – The Cloud Native Computing Foundation® (CNCF®), which builds sustainable… ⌘ Read more
CNCF Launches Certified Kubernetes AI Conformance Program to Standardize AI Workloads on Kubernetes
New initiative targets cloud native AI portability and reliability across environments Key Highlights KUBECON + CLOUDNATIVECON NORTH AMERICA, ATLANTA — Nov. 11, 2025 — The Cloud Native Computing Foundation® (CNCF®), which builds sustainable ecosystems for cloud… ⌘ Read more
Safely managing Cilium network policies in Kubernetes: Testing and simulation techniques
Network policy changes are among the most frequent operations in a Kubernetes cluster. They are also among the most delicate, as even a small mistake can lead to widespread traffic disruption. This tutorial walks through several… ⌘ Read more
Connecting distributed Kubernetes with Cilium and SD-WAN: Building an intelligent network fabric
Learn how Kubernetes-native traffic management and SD-WAN integration can deliver consistent security, observability, and performance across distributed clusters. The challenge of distributed Kubernetes networking Modern businesses are rapidly adopting distributed architectures to meet growing demands for… ⌘ Read more
CNCF embraces LFX Self Service for calendar management
The Cloud Native Computing Foundation (CNCF) has experienced remarkable growth since its inception, welcoming its first project, Kubernetes, on March 10, 2016. By 2025, the CNCF proudly supports over 200 active projects, generating thousands of meetings… ⌘ Read more
Applying RBAC to databases on Kubernetes: Practical, real-world examples
Introduction Role-Based Access Control (RBAC) is one of the most important security features in any cloud native platform. It determines who can do what inside the Kubernetes Cluster, helping teams give the right access to the… ⌘ Read more
Kyverno vs Kubernetes policies: How Kyverno complements and completes Kubernetes policy types
Originally posted on Nirmata.com on October 1, 2025 How Kyverno extends and integrates with Kubernetes policies With the addition of ValidatingAdmissionPolicy and MutatingAdmissionPolicy in Kubernetes, do you still need Kyverno? This post answers the question by… ⌘ Read more
Automating stateful apps with Kubernetes Operators
Member post originally published on the Middleware blog by Keval Bhogayata, covering Automating Stateful Apps with Kubernetes Operators. If you’ve ever had issues with scaling databases or automating upgrades in Kubernetes, Operators can help by saving… ⌘ Read more
KubeCon + CloudNativeCon North America 2025 Co-Located Event Deep Dive: Cloud Native + Kubernetes AI Day
Cloud Native & Kubernetes AI Day is welcoming the AI/ML and High Performance Computing (HPC) communities. Since 2022 there have been multiple dedicated events (Batch / HPC and Cloud Native AI days) but given the overlap… ⌘ Read more
KubeCon + CloudNativeCon North America 2025 Co-Located Event Deep Dive: Data on Kubernetes Day
Data on Kubernetes Day (DoK Day) began as a virtual event in 2021 and became an official co-located event for KubeCon + Cloud Native Con in 2023. Since then, it has been a staple at both… ⌘ Read more
A blueprint for zero-trust AI on Kubernetes
LLMs and AI are everywhere these days. Everyone wants to build the next big thing, ship it fast, and maybe even cash out and chill for the rest of their lives. The problem? Most open source… ⌘ Read more
Karmada v1.15 Released! Enhanced Resource Awareness for Multi-Template Workloads
Karmada is an open multi-cloud and multi-cluster container orchestration engine designed to help users deploy and operate business applications in a multi-cloud environment. With its compatibility with the native Kubernetes API, Karmada can smoothly migrate single-cluster… ⌘ Read more
Auditing user activity in pods and nodes with the Security-Profiles-Operator
Kubernetes’ native audit logs are essential for tracking control plane activities, but they fail to capture what happens inside a container or on the host node itself during kubectl debugging sessions. This creates a security and… ⌘ Read more
Managing Kubernetes Workloads Using the App of Apps Pattern in ArgoCD-2
Managing a cloud native infrastructure at scale is no longer just about deploying single applications – it’s about organizing environments, defining clear boundaries and keeping everything version-controlled, consistent, automated and easily managed within a simple and… ⌘ Read more
KubeCon + CloudNativeCon North America 2025 Co-Located Event Deep Dive: Kubernetes on Edge Day
The inaugural Edge Day launched as a co-located event at KubeCon + CloudNativeCon EU in 2022, recognizing that data at the edge is here to stay. Once called the ‘Internet of Things’ and later ‘Industry 4.0,’… ⌘ Read more
Announcing H1 2026 KCDs
We’re excited to announce the first wave of Kubernetes Community Days (KCDs) for 2026! These community-organized events bring together local practitioners, adopters, and contributors to connect and share cloud native knowledge. What’s New in 2026 This… ⌘ Read more
Autonomous Testing of etcd’s Robustness
As a critical component of many production systems, including Kubernetes, the etcd project’s first priority is reliability. Ensuring consistency and data safety requires our project contributors to continuously improve testing methodologies. In this article, we describe… ⌘ Read more
Solving Kubernetes Multi-tenancy Challenges with vCluster
Understanding Multi-tenancy When we are building Internal Developer Platforms (IDP) for our customers Kubernetes is often a solid choice as the robust core of this platform. This is due to its technical capabilities and the strong… ⌘ Read more
I wore a Kubernetes shirt, in public, by accident, and now I feel dirty and ashamed. 😢
My Journey to KubeCon + CloudNativeCon 2024: A Story of Volunteering and Growth
My name is Oscar Ayra and I am from Lima, Peru. In 2024, I had the privilege of being part of the volunteer team at Kubernetes Community Days (KCD) Lima. It was an enriching experience where… ⌘ Read more
基於 Kubernetes 事件驅動的自動縮放
KEDA 是一種基於事件驅動的自動伸縮工具，能夠解決 Kubernetes 原生 HPA 在靈活性和複雜性上的不足。KEDA 支持多種事件源（如 Prometheus、Kafka、RabbitMQ 等），可根據實際需求動態調整 Pod 副本數量，甚至將副本數縮減至 0，從而優化資源利用率並降低成本。通過 ScaledObject 對象，KEDA 能夠靈活配置伸縮策略，快速響應負載變化，實現高效擴展 ⌘ Read more
iFLYTEK Wins CNCF End User Case Study Contest for Scalable AI Infrastructure Breakthroughs with Volcano
Company to present large-scale Kubernetes model training success at KubeCon + CloudNativeCon China 2025 Hong Kong, China — 10 June 2025 — The Cloud Native Computing Foundation® (CNCF®), which builds sustainable ecosystems for cloud native software,… ⌘ Read more
OIDC: Integrate Kubernetes authentication with Azure AD via OIDC (Part IV)
You want to authenticate Kubernetes users by integrating it with Azure AD using OIDC. This setup involves configuring the following … ⌘ Read more
Kubeflow Advances Cloud Native AI: a glimpse into KubeCon + CloudNativeCon Europe 2025
The Kubeflow community is rapidly growing due to its contributions to advancing AI by streamlining the AI/ML experience in Kubernetes. Kubeflow provides a composable ecosystem for implementing end-to-end solutions for AI/ML. Kubeflow includes the following projects:… ⌘ Read more
Securing Kubernetes Traffic with Calico Ingress Gateway
Kubernetes, Envoy, GatewayAPI, cert-manager, CNI, Calico If you’ve managed traffic in Kubernetes, you’ve likely navigated the world of Ingress controllers. For years, Ingress has been the standard way of getting our HTTP/S services exposed. But let’s… ⌘ Read more
一文讀懂 K8S StatefulSet 原理
爲什麼需要 StatefulSet在使用 Kubernetes 部署服務時，通常會選擇 Deployment 資源對象。由 Deployment 創建的 Pod 實例是完全相同的，它們在啓動時沒有順序要求，並且通常掛載相同的存儲卷。因此，客戶端訪問任意一個 Pod，返回的結果是一致的。這類服務被稱爲 無狀態服務。然而，如果嘗試使用 Deployment 部署如 MySQL、Redis 等數據庫服務 ⌘ Read more
不會吧？你還在手動編輯 ~–ssh-config？
一個簡單高效的 SSH 和 Kuberenetes 連接管理工具在實際工作中經常需要遠程服務器和 Kubernetes，對於我這種 CLI 選手，不太喜歡一些圖形化工具，尤其是工具之間會有不兼容和遷移成本的問題。但當服務器和集羣的數量多了之後，通過編輯文本的方式管理連接信息，非常不方便且容易出錯。所以，我打造了 ConfigForge，一個專爲 macOS 用戶設計的開源 SSH 和 Kubern ⌘ Read more
Streamlining application deployment on Kubernetes at RBC Capital Markets: A journey with FluxCD
As we learned from the first blog in our series, RBC has taken a holistic approach on our cloud journey, as it enables technologies across our enterprise. In today’s post, we’re going to share how Capital Markets… ⌘ Read more
A milestone for lightweight Kubernetes: k0s joins CNCF sandbox
Member post originally published on the Mirantis blog by Prithvi Raj We are excited to announce that k0s, our lightweight, zero dependencies, and fully open-source Kubernetes distribution, has officially joined the Cloud Native Computing Foundation (CNCF) as a Sandbox project!… ⌘ Read more
Introducing k0rdent v0.3.0: Smarter observability, smoother operations
In my previous blog I wrote a detailed version describing how k0rdent eases platform engineering at scale. For those of you who are unaware, k0rdent is a Kubernetes-native distributed container management environment (DCME) designed to help… ⌘ Read more
Announcing Kyverno Release 1.14!
TL;DR We are excited to announce the release of Kyverno 1.14.0, marking a significant milestone in our journey to make policy management in Kubernetes more modular, streamlined, and powerful. This release introduces two new policy types… ⌘ Read more
How to install and run Minikube with Rootless Podman on ARM-based MacBooks
minikube provides a local Kubernetes cluster on macOS, Linux, and Windows. minikube’s primary goals are to be the best tool for local Kubernetes application development and to support all Kubernetes features that fit into that environment…. ⌘ Read more
The Kubernetes Surgeon’s Handbook: Precision Recovery from etcd Snapshots
TL;DR: Precision Recovery from etcd in 5 Steps This guide walks you through surgical resource recovery from etcd snapshots without triggering a full cluster restore. Whether you’re troubleshooting accidental deletions or forensic debugging, this lightweight and… ⌘ Read more
Announcing OpenReports: Standardized Kubernetes Reporting
The Kubernetes ecosystem, while powerful, is a sprawling landscape of tools. As organizations scale their deployments, ensuring compliance and security becomes paramount. But how do you effectively track and report on your Kubernetes policies and scanners… ⌘ Read more
Understanding Kubernetes Gateway API: A Modern Approach to Traffic Management
Traffic management in Kubernetes can be complex, especially with modern applications composed of multiple services like frontends, APIs, and backends spread across hybrid and multi-cloud environments. As these environments grow, ensuring secure, efficient, and reliable communication… ⌘ Read more
Announcing Vitess 22
The Vitess maintainers are happy to announce the release of version 22.0.0, along with version 2.15.0 of the Vitess Kubernetes Operator. This release is the first to benefit from a 6-month-long development cycle, after our recent… ⌘ Read more
️ Hacking and Securing Kubernetes: A Deep Dive into Cluster Security
Disclaimer: This document is for educational purposes only. Exploiting systems without authorization is illegal and punishable by … ⌘ Read more