CVE-2024-9042: Command Injection affecting Windows nodes via nodes/*/logs/query API · Issue #129654Exploit Me, Baby, One More Time: Command Injection in Kubernetes Log Query | AkamaiMirantis Rockoon and the Github repositoryGoogle SRE podcast Security issue in Windows K8 nodes This one is important, so let’s get it out of the way right away. There’s a security issue with Kubernetes versions that allows takeover of all Windows nodes in a cluster. Mirantis launches Rockoon You probably knew that a Rockoon is a rocket attached to a balloon, right?! Well, I didn’t. According to Wikipedia a rockoon “is a sounding rocket that, rather than being lit immediately while still on the ground, is first carried into the upper atmosphere by a gas-filled balloon, then separated from the balloon and ignited. This allows the rocket to achieve a higher altitude, as the rocket does not have to move under power through the lower and…

Where have you been, Sascha?Portland startup kickoff 2025What is the state of Kubernetes in 2024 and how is 2025 going to look?A podcast recommendationNathan C Bowser’s Glow up podcast Where have you been, Sascha? Well, 2024 was the first year I’ve been sick to a degree I’ve never been before. It started right in January and by the time June rolled around, I had Legionnaires Disease, HMPV, RSV and COVID-19, spaced out by about two months each. It wasn’t fun, but finally I was back in shape in October to run Portland Marathon, but didn’t get to do that either due to a family emergency. But now everythings back to order! Portland startup kickoff 2025 So in the spirit of kicking things off I went to the 2025 Portland startup community kickoff event, and I found a who is who of the startup scene in the Pacific Northwest and Portland.…

Kubernetes 1.29 Mandala is outSWA – one year onCockroach on KubernetesA podcast recommendation Kubernetes 1.29 Mandala is out Hard to believe, but here we are, at the end of the year and we have a new K8 point release. This time, the thing is big. Lots of so-called KEPs, Kubernetes Enhancement Proposals. SWA – one year on I started this podcast one year ago and SWA at the time happened to have the largest meltdown of any airline on record. Subsequently, not only did they lose the business of passengers looking for more reliable airlines, they also had to pay a hefty settlement amount to the Dept. of Transportation. Cockroach on K8 A great article by Charlie Custer was published on the Cockroach blog. I keep coming back to talk about Cockroach because it’s a great database and my own installation experience when I tried it out a few years…

K8 1.28 is out – release name “Planternetes”Waleed Magdy’s Step-by-Step DevOps projectAWS shuts down EC2-ClassicAwesome Kubernetes ResourcesA podcast recommendationApropos of nothing – Netbox K8 Planternetes 1.28 is out  Back in in April, 2021, the Release Team merged a Kubernetes Enhancement Proposal (KEP) changing the Kubernetes release cycle from four releases a year (once a quarter) to three releases a year and that was basically both an admission that 4 releases a year was too fast for folks to keep up and also that COVID had an impact on people’s ability to contribute. So here we are with the third and last release of K8 for 2023! Waleed Magdy’s Step-by-Step DevOps project I don’t know about you, but when I read the following I’ll say out loud – “let’s go and do this!”.   “Let’s embark on a journey that transforms theoretical understanding into practical mastery. It’s time to connect the dots,…

K8 misconfig exposes Fortune 500s’ data Professionally, I work in the security space, and because of that, I’m always interested in hearing about security issues, risks, attacks, or anything really going on in that space. So right now my Infosec exchange feed is full of people traveling to Vegas, of course and a lot of activities directed towards finding and reporting on security issues. One of the most forward companies in the K8 security space is Aqua Security. The Reluctant Sysadmin’s Guide to Securing a Linux Server  Since we’re talking about security already, why not cover the basics in case you’re someone using a Linux server or workstation somewhere in your network. I am a huge fan of revisiting basics over and over again, just to make sure everyone is getting the same message, consistently and frequently. It deepens and freshens knowledge of any topic. Some call it wax on,…

Linux forklore everywhereA K8 book club500 Portainer templatesA podcast recommendation Linux forklore everywhereIn the last episode I talked about a change Red Hat is making, specifically not releasing RHEL sources like they used to. There are some nuances to that, so I would not have expected a careful take from Red Hat’s competitors, but what Oracle did was definitely surprisingly low. A K8 book clubWhen I see or hear of a good idea, I make a note in my Apple Notes and drag it out when the time comes. So with this, I present the K8 bookclub, hosted at https://www.santana.dev/book-club. The Kubernetes Book Club is a community group that discusses books about Cloud Native 500 Portainer templatesGo have at it. A podcast recommendationGive a listen to “For the long run” with Jonathan Levitt. He’s a runner, cyclist and podcast host from Boston, MA. This podcast is exploring the why behind…

Red Hat to Docker – hold my beer.Google accuses Microsoft of unfair practices in Azure cloud unitGoogle’s State of Kubernetes Cost Optimization reportA podcast recommendation Red Hat to Docker – hold my beer.In episode 7 I talked a little bit about the mishaps in communication that Docker had when they announced a switch to the subscription model. Corporate communications are hard, especially in the open source world. So now Red Hat has been in the news recently due to some communication missteps, as I am going to call them. Google accuses Microsoft of unfair practices in Azure cloud unitIt kind of always was obvious, but now Google made an official complaint. It goes something like this: “Hey, it’s kind of unfair that we need to pay a license fee to Microsoft for a VM running Windows on Google Cloud, but on Microsoft Azure, Microsoft does not need to pay itself…

K8sGPT — SRE superpowers through AI I am not sure if you heard, but AI is definitely the current thing. I think it was just today that I read that 92% of developers love the assistance that AI can give them. KubeVirt – running VMs on Kubernetes Containers, containers, containers!!! I am trying to speak this in Steve Ballmer’s voice, but nothing quite compares to the sweat-drenched level of enthusiasm when Ballmer fired up the crows. I was thinking of cloning his voice and having him say containers instead, but the thought of it creeped even me out. Microsoft releases its own Linux distribution for Azure You might have heard of CBL Mariner, the Linux distribution from Microsoft. It’s been the test balloon from Microsoft to hone in on the requirements of MSFT and build up a practice of building a Linux distribution that’s optimized for the cloud. A podcast…

Be cloud agnostic – this is the way, according to Gartner When it comes to the Cloud, the magic quadrant has hits all over the box, well except for the “Challenger” box. I am just kidding here, if you are familiar with the Gartner magic quadrant you know what companies look for is on the top right corner of the box. You’re leading and you’re the best. Amazon, Microsoft and Google are in that top right corner. However, when it comes to Cloud, Gartner seems to say it’s best to pick one cloud and have another ace in the hole, just in case another pandemic hits or something like that. Layoffs hit Red Hat as well 4% of the company, or about 800 people are being axed and they ask themselves – WHY? It’s a good question, given that in IBM’s recent Q1 2023 results, revenue for Red Hat grew…

Datadog bills a single customer $65M and we just need to know who Every once in a while, earnings calls are interesting and when this popped up, I naturally was curious as well. So transport yourself to the Datadog earnings call Q1/23 when Mark Murphy, a JPMorgan Chase Analyst comes off mute and asks this question, answered by David M. Obstler, Chief Financial Officer: Hetzner Cloud is hard to beat on price Here’s a treat from the folks of Servicestack, a specialist in comprehensive .NET Frameworks for building API first systems, who got ticked off by an $8 price increase at DigitalOcean. It’s just the little things that annoy us, isn’t’ it? Amazon Prime moving from Serverless backed by Lambda to monoliths running on VMs This is a great lesson learned article from the Amazon team showing how they designed a system only to find out that it hit a…