“And now we’ll read two chronicles…”
Ruth Graham@ruthgraham.bsky.social · 4mo agoNew from me: President Trump will contribute to a weeklong reading of the entire Bible next week. He recorded his contribution from the Oval Office, a passage from the book of II Chronicles. www.nytimes.com/2026/04/17/u...
Post the best picture of you pet you have ever taken
Katie Herrmann@katieherrmann.bsky.social · 4mo agopost the best picture you have ever taken of your pet (if you feel like it):
Missing my people this week at KubeCon in AMS! I’ll be there for NA in November and in Barcelona next year! #kubecon
For the first time maybe ever for me, I’ll be getting off a plane at SLC, and then getting back on the exact same plane to BNA.
Joint statement from Kubernetes Steering and Security Response Committees: In March 2026, Kubernetes will retire Ingress NGINX, a piece of critical infrastructure for about half of cloud native environments. This is an emergency. Please pay attention. kubernetes.io/blog/2026/01...
Ingress NGINX: Statement from the Kubernetes Steering and Security Response Committees
In March 2026, Kubernetes will retire Ingress NGINX, a piece of critical infrastructure for about half of cloud native environments. The retirement of Ingress NGINX was announced for March 2026, after...
kubernetes.io
First time back in Seattle after playing The Last Of Us 2, and I’m looking at it very differently
iOS 26 is suddenly announcing all notifications on my AirPods. I’ve definitely only enabled that for messages, and confirmed they’re turned off. This is massively annoying.
Let’s be clear about Trump’s obsession with Greenland: its not about security. If it truly were, they’d get creative about adding more US military bases and hardware as a NATO member, restrictions on shipping lanes, etc. This is about Trump wanting to leave a legacy with global map-making changes.
ACM now supports automated certificate management for Kubernetes #eks #kubernetes
ACM now supports automated certificate management for Kubernetes
<p>AWS Certificate Manager (ACM) now automates certificate provisioning and distribution for Kubernetes workloads through AWS Controllers for Kubernetes (ACK). Previously, ACM automated certificate management for AWS-integrated services like Application Load Balancers and CloudFront. However, using ACM certificates with applications terminating TLS in Kubernetes required manual steps: exporting certificates and private keys via API, creating Kubernetes Secrets, and updating them at renewal. This integration extends ACM's automation to any Kubernetes workload for both public and private certificates, enabling you to manage certificates using native Kubernetes APIs.<br> <br> With ACK, you define certificates as Kubernetes resources, and the ACK controller automates the complete certificate lifecycle: requesting certificates from ACM, exporting them after validation, updating Kubernetes Secrets with the certificate and private key, and automatically updating those Secrets at renewal. This enables you to use ACM exportable public certificates (launched in June 2025) for internet-facing workloads or AWS Private CA private certificates for internal services in Amazon EKS or other Kubernetes environments. Use cases include terminating TLS in application pods (NGINX, custom applications), securing service mesh communication (Istio, Linkerd), and managing certificates for third-party ingress controllers (NGINX Ingress, Traefik). You can also distribute certificates to hybrid and edge Kubernetes environments.<br> <br> This feature is available in all commercial, AWS GovCloud (US), and AWS China regions where ACM is available.<br> To learn more, visit the <a href="https://github.com/aws-controllers-k8s/acm-controller">Git hub link</a> or read our <a href="https://docs.aws.amazon.com/acm/latest/userguide/acm-exportable-certificates.html">documentation</a> and our <a href="https://aws.amazon.com/certificate-manager/pricing/">pricing page</a>. </p>
aws.amazon.com
With Cedar coming to the #CNCF sandbox, the authorization engine and policy language project seeks contributors to help create new language bindings. By @hjoslyn.bsky.social, feat. @micahhausler.com
All About Cedar, an Open Source Solution for Fine-Tuning Kubernetes Authorization
With Cedar coming to the CNCF sandbox, the authorization engine and policy language project seeks contributors to help create new language bindings.
bit.ly
Ah, Black Friday: the day I can identify and unsubscribe from every email list I never wanted to be on.
This is *exactly* what these things look like. Click the link for the animated version
meetar@fjord.style · 9mo agoI've been "enjoying" scintillating scotomas more often recently. They're difficult to describe, and images online don't really capture it. But the first thing I thought when I saw them was "I should make a shader of this" – so here's a demo, it's pretty close: meetar.github.io/scotoma/
Ignited a flame war in the family chat about whether Chex mix should include Corn Chex.
No AWS employee can read, copy, modify, or otherwise access customer content in Amazon EKS. Thats a pretty big claim, and one we're proud to announce to the world today. aws.amazon.com/blogs/securi...
Amazon Elastic Kubernetes Service gets independent affirmation of its zero operator access design | Amazon Web Services
Today, we’re excited to announce the Amazon Elastic Kubernetes Service (Amazon EKS) zero operator access posture. Because security is our top priority at Amazon Web Services (AWS), we designed an oper...
aws.amazon.com
#KubeCon Day 2 Recap 🚀 Yesterday's convos with AWS Open experts were invaluable. @micahhausler.com detailed the significance of upstream contributions, Mike Stefaniak shared the EKS approach to Agentic AI, and Jesse Butler explored developer tools and verification.
This is a truly significant announcement for organizations who want to know that Amazon EKS is secure to run their most sensitive workloads. aws.amazon.com/blogs/securi...
Amazon Elastic Kubernetes Service gets independent affirmation of its zero operator access design | Amazon Web Services
Today, we’re excited to announce the Amazon Elastic Kubernetes Service (Amazon EKS) zero operator access posture. Because security is our top priority at Amazon Web Services (AWS), we designed an oper...
aws.amazon.com
Reminder: #Kubernetes SIG Meet & Greet is Noon-2pm today at #Kubecon, in room B216. Grab a lunch downstairs, then come meet your SIG and/or learn where to contribute to Kubernetes. Take the "secret escalator" up from the back of the show floor. events.linuxfoundation.org/kubecon-clou...
This absolutely sucks for anyone flying to KubeCon. Fortunately for me I'll be driving this time, but what a mess. www.nytimes.com/2025/11/05/u...
Trump Officials to Cut Air Traffic at 40 Major Airports if Shutdown Continues
nytimes.com
TBH this is such a letdown with the date change. Speaking as an attendee, moving KubeCon from Oct to mid-November so close to re:Invent is such a drag (AWS is a diamond sponsor, haven’t been the last few years when KCNA was in Nov) events.linuxfoundation.org/kubecon-clou...
KubeCon + CloudNativeCon North America 2026 | LF Events
The Cloud Native Computing Foundation’s flagship conference gathers adopters and technologists from leading open source and cloud native communities.
events.linuxfoundation.org
Someone, somewhere once typoed my employer as AMOZON and now it shows up in my credit report.
I recently started an instagram account. They wait a full 4 weeks before asking “allow app to track?” I guess they found that people are reluctant to say yes when initially getting the app
