Хорошо проиллюстрированная статья "Kubernetes: Security Contexts", объясняющая назначение, специфику и отличия Pod Security Context и Security Context.

В официальной документации этому вопросу посвящен раздел "Configure a Security Context for a Pod or Container".

Container security fundamentals part 4: Cgroups – четвертая статья из цикла статей [1,2,3] про безопасность контейнеров от Rory McCune.

Автор затрагивает такие важные темы как:

– почему cgroups необходимы в контейнерах
– принципы работы cgroups
– использование cgroups для ограничения ресурсов
– использование cgroups для предотвращения fork bomb (DoS атак)
– использование cgroups для доступа к Linux devices

We're live! This is the first version (with a lot more in the backlog!), but you can already explore, create, and share your projects.

Welcome: https://crowdfind.us

https://crowdfind.ai news 🙂

1. We introduced AI assistant for Project and Idea creating and polish - https://youtu.be/suMTrbUkwy8

2. We also introduced AI assistant to find right specialists with skills and responsibilities if you still thinking whom you needed on a project - https://youtu.be/OlSlGt1EuCs

3. Today we launched the "Discussion" section in projects - where people can leave the feedbacks and start discussion about the projects!

Hi, we have a lot of updates such teams, chat, news and so on. Check it: https://crowdfind.ai !

today we launched referrsme on productHunt; Let's vote for us 🙂
https://www.producthunt.com/posts/referrsme

Please, be aware! Hashicorp changed his licence to BSL. It's not Open Source anymore...
https://www.theregister.com/2023/08/11/hashicorp_bsl_licence/

State of DevOps Russia 2023

🆕 OpenTF + end-to-end encryption for state files

This feature has been blocked in Terraform since 2014. OpenTF makes it possible.

https://twitter.com/brikis98/status/1696453969118113902

⚠️ The encryption feature is experimental for now; an official RFC is coming soon.

P.S. GitHub stars:
▪️ Terraform → 38.7k
▫️ OpenTF → 22k and you can help here 👇
https://github.com/opentffoundation/manifesto 😃

#OpenTF

А мы тут начали пилить форк tfenv! Ставьте нам звездочки!
https://github.com/opentofuutils/tofuenv

поехали!

https://hackernoon.com/how-to-make-aws-opensearch-publicly-accessible-without-nginx-proxy

The first tofuenv (OpenTofu version manager.) v1.0 release is now available! For the past few weeks, our team (Me, Nikolai Mishin and Anastasiia Kozlova) has been working on the fork. We worked hard to improve the usability of fundamental tofuenv features, add some new capabilities, and, of course, fixed some bugs that we found in the original tfenv tool.

You can download v1.0 release from GitHub or install it via brew or yay. Please try the release and share your feedback, it will be really useful for the feature of the project.

https://medium.com/@kvendingoldo/tofuenv-v1-0-is-now-available-87d893ef3d19

My new article about AWS Verified Access and Google AuthN.
https://hackernoon.com/how-to-use-terraform-to-configure-aws-verified-access-with-an-oidc-google-provider

Hello there,

You've probably heard about tofuenv, an OpenTofu version manager inspired by tfenv. Many people have asked about Terraform support, and we are finally ready to announce that a successor for tfenv and tofuenv is in the works. tenv is the name we gave to this instrument. This tool will be able to handle both Terraform and OpenTofu binaries. Also, because it is no longer bash, no dependencies are necessary, as we converted the codebase to Golang.

Please contribute to tenv (https://github.com/tofuutils/tenv) and award us stars. The release date will be announced soon.

Hi folks,
The tofuutils crew is dropping a new release for tenv: https://github.com/tofuutils/tenv


tenv, is Golang based application, that means that you don't depend on shell or other environment dependencies anymore. Also, its successor of tofuenv/tfenv.

We encourage you to make use of it, share any issues you encounter, and even contribute to its improvement. Your support and stars ⭐️ would be greatly appreciated! We're all ears for your feedback!

We saved all tfenv/tofuenv features and added some new. It's an active, not dead development. We'll be glad to hear your wishes about new features and implement them in next releases.