Free Republic

The US Cybersecurity and Infrastructure Security Agency (CISA) left open a GitHub repository named “Private-CISA” containing plain-text passwords, private keys, tokens, and secrets – with obvious file names like “external-secret-repo-creds.yaml” and “AWS-Workspace-Firefox-Passwords.csv” – for six months. GitGuardian researcher Guillaume Valadon, fresh off a recent talk on Kubernetes secret leaks, found the public repository on May 14, and told The Register that he “quickly understood that the leak was bad and that time was running out. A national agency having 844 MB of production infrastructure material in a public GitHub repository for six months is as serious as a secrets leak...

The Kubernetes community has released the latest version of Cluster API at version number 1.12 and it is described as a “significant update” for developers. A Kubernetes “sub-project” focused on providing declarative APIs and tooling to simplify provisioning, upgrading and operating multiple Kubernetes clusters, Cluster API was started by the Kubernetes Special Interest Group (SIG) Cluster Lifecycle. The Cluster API project uses Kubernetes-style application programming interfaces (APIs) and patterns to automate cluster lifecycle management for platform operators. The industry standard has been focused on immutable infrastructure for many years now, but, in v1.12 of Cluster API, we can enjoy the...