Kubernetes 1.37 Preview: What’s New for Cluster Operators
Platform teams preparing for the Kubernetes 1.37 release (codenamed Garhwal) face a shift away from legacy cluster assumptions. With cgroup v1 support fading, IPVS mode in kube-proxy entering deprecation, and static pod config restrictions tightening, 1.37 reinforces cluster security and operational observability—headlined by the long-awaited graduation of metrics.k8s.io to stable.
Sandboxes Are Becoming the New Security Perimeter for AI Agents
As autonomous AI agents move from chat interfaces to executing arbitrary code, browsing external endpoints, and invoking cloud APIs, traditional security boundaries are collapsing. To prevent prompt injections, poisoned code execution, and indirect sandbox escapes, platform engineering teams are shifting security to the runtime level—leveraging lightweight microVMs, gVisor, Kata Containers, and the Kubernetes Agent Sandbox project to turn execution runtimes into the new security perimeter.
Kubernetes Storage Is Cloud-Native’s Hardest Scaling Problem
While Kubernetes abstracts compute and memory with elastic ease, persistent storage introduces physical boundaries around IOPS, latency, network topology, and node locality. As stateful databases and AI inference workloads scale across cloud-native clusters, managing data gravity through Container Storage Interface (CSI) volume expansion, shared vs. local storage trade-offs, and throughput capacity planning has become cloud computing’s toughest operational hurdle.
Kubernetes Just Got A Chatty New Assistant, And It Speaks Fluent YAML
Red Hat has introduced an open-source Model Context Protocol (MCP) server for Kubernetes and OpenShift, allowing AI coding assistants to interact directly with cluster resources using natural language. Unlike wrappers that execute command-line utilities, this Go-based tool connects directly to the Kubernetes API server, delivering high-performance, RBAC-enforced cluster troubleshooting and resource management.
How Sysdig Is Taking Cloud Security Headless for AI Agents
As attack windows shrink to machine speed, security operations are shifting from reactive dashboard triage to programmable, agent-driven workflows. Sysdig’s headless cloud security leverages the Model Context Protocol (MCP) to embed real-time CNAPP runtime telemetry directly into AI coding agents like Claude Code, Cursor, and Codex—enabling automated vulnerability prioritization, threat investigation, and contextual remediation directly within existing developer environments.
AWS Patches SDK Flaw That Let A Region Field Steal Credentials
Unvalidated input in regional endpoint templates across seven AWS SDKs allowed malformed region strings to redirect signed API requests to external servers. By manipulating URL parsing with @ and # separators during AssumeRoleWithWebIdentity calls, security researchers at Pi Inc. demonstrated how a single unvalidated input field could expose plaintext bearer tokens and lead to total production cloud compromise.
Talos 1.13 Adds VRF Routing and Live CPU Hot-Add for Kubernetes
Talos Linux treats Kubernetes nodes as API-managed appliances, eliminating SSH, shells, and package managers to ensure immutable node predictability. Discover how Talos 1.13 advances host-level management—introducing declarative Virtual Routing and Forwarding via VRFConfig and live udev CPU hot-add support to streamline multi-tenant bare-metal routing and rebootless VM scaling.
How Tigera Enforces Zero Trust on Kubernetes With Calico
Default flat networking inside Kubernetes clusters allows compromised workloads to freely navigate internal services and attempt lateral movement. Discover how Tigera leverages Calico to enforce Zero Trust security—combining default-deny posture, identity-aware microsegmentation, ordered policy tiers, and native flow log engines like Goldmane and Whisker to secure east-west cloud-native traffic.
Secure-by-Design Cloud Security: How Native Moves Security Into the Architecture
Detection-based cloud security tools leaves a critical exposure window where attackers can exploit misconfigurations before remediation occurs. On the Software Plaza podcast, Native co-founder Gal Ordo explains how shift-down security translates architectural policy intent directly into native cloud-provider primitives—enforcing secure-by-design boundaries across AWS, Azure, Google Cloud, and OCI to eliminate risks before deployment.
How Aiven Keeps Open-Source Data Infrastructure on Any Cloud
Operating open-source databases and event-streaming clusters in production often forces platform teams into a relentless cycle of patching, failover management, and broker scaling. Discover how Aiven provides a multi-cloud managed data platform across AWS, Azure, and Google Cloud—simplifying infrastructure operations for Apache Kafka, PostgreSQL, and ClickHouse while preserving open-source flexibility.
Why Kubernetes upgrades fail and how to automate them
Kubernetes releases a new minor version roughly every four months, leaving lagging clusters at risk of forced multi-version migrations. Discover why cluster upgrades fail—from hidden API deprecations and version skew to strict admission webhooks—and learn how platform engineering teams automate preflight checks, GitOps workflows, and progressive delivery gates to make upgrades routine.
Lumilens debuts with $700M war chest at $5.5B valuation
As massive AI training clusters hit copper interconnect limitations, silicon photonics startup Lumilens has emerged from stealth with over $700 million in Series C funding at a $5.51 billion valuation. Backed by Atreides Management and Bain Capital Ventures, Lumilens is already shipping its vertically integrated LumiCore optical platform directly into hyperscaler production data centers to eliminate scale-up and scale-out GPU networking bottlenecks.
