$ tail -f topics/infra.log
Daily updates from the platform-engineering layer - Kubernetes, Terraform, Linux, Arch, and the tools that run production.
42 updates across 6 projects this week.
One calm review of what shipped across Infrastructure - the commits, releases, and security advisories that matter. Every Monday, with security advisories same-day. Free, unsubscribe in one click.
We'll start you on the top Infrastructure projects - refine anytime. · Read a sample issue →
HashiCorp
HashiCorp's orchestration stack shipped fresh nightly snapshots across Nomad's driver, autoscaler, and pack layers, giving teams early access to in-flight improvements before stable releases.
read --wire →
Kubernetes
KOps flipped authorization to RBAC by default [ref:14], surfaced hidden addon failures through readiness probes [ref:13], and unlocked Cilium's no-masquerade mode on ENI [ref:15], while test-infra split Kueue's multikueue testing into baseline and extended coverage [ref:10].
read --wire →
Go
Go's regexp package just got a critical fix for script lookups that was causing collisions in Unicode handling.
read --wire →
Linux
The kernel closes critical buffer overflow vulnerabilities in Lenovo and Wacom HID drivers before the 7.1 release hardens.
read --wire →
Arch Linux
Arch dropped python-watchgod entirely while signstar's crypto tooling gets a breaking refactor that tightens its type system.
read --wire →
HashiCorp
HashiCorp's Azure provider is tightening concurrency controls while Google Cloud gains bulk data query capabilities across compute resources.
read --wire →
Kubernetes
Five core Kubernetes subsystems merged the same OpenTelemetry dependency bump overnight, standardizing observability instrumentation across auth, scheduling, and admission layers.
read --wire →
Go
The dev.simd branch is merging back into master with ARM64 Neon support and SIMD optimizations, while gopls patches an out-of-bounds panic that's crashing Windows builds.
read --wire →
Linux
Linux is shipping a fundamental fix to how the kernel tracks packets bouncing through the network scheduler, closing a hole that let mirred and netem create infinite loops across CPUs.
read --wire →
Arch Linux
MariaDB 12.3.2 is now available in extra-testing, signaling the start of a coordinated push to move critical infrastructure packages through the release pipeline.
read --wire →
HashiCorp
Static IP assignments were being silently ignored on Podman containers, forcing them onto DHCP despite explicit configuration.
read --wire →
Kubernetes
Kubernetes just formalized a new working group for workload and topology-aware scheduling [ref:1] while test infrastructure simultaneously tightened cost controls after a Lambda Cloud budget blowout.
read --wire →
Go
Go 1.27 documentation shipped to x/website this morning with cleaned-up release notes, and the team is moving fast to deprecate legacy typeparams APIs before the next major version.
read --wire →
Arch Linux
Chromium Embedded Framework graduates to stable after vetting, while core boot infrastructure tightens cryptsetup integration and systemd dependency handling.
read --wire →
HashiCorp
Terraform's Azure provider is shipping a breaking change in 5.0 that converts address_space from a List to a Set, forcing configuration rewrites for anyone managing local network gateways.
read --wire →
Kubernetes
Kubernetes test infrastructure is splitting Kueue's slowest E2E jobs into parallel shards to fix timeout cascades, while kops enters its 1.36 alpha cycle with improved scheduling and offline volume expansion support.
read --wire →
Go
Go's x509 certificate verification just got exponentially faster for domains with large SAN lists, eliminating a pathological case that scaled by hostname labels times certificate entries.
read --wire →
Linux
Three critical stability patches merged overnight address cache hash bounds, ftrace key leaks, and a fatal memory corruption bug in kunit that's already crashing CHERI-capable systems.
read --wire →
HashiCorp
HashiCorp's Terraform Enterprise Go client unlocked atomic provider set management and registry provider lookup by ID, completing the API surface teams need for no-code infrastructure.
read --wire →
Kubernetes
Kubernetes is tearing down obsolete test infrastructure while shipping critical control plane upgrades and new conditional authorization capabilities.
read --wire →
