Zeropod v0.12.0 adds probes, Envoy Gateway migration

Zeropod, the CRIU‑based checkpointing shim for Kubernetes, just released v0.12.0. The update moves eBPF attachment back into the shim, making probes functional and enabling true cascade scale‑to‑zero, where idle pods are checkpointed to disk and automatically restored on demand. Upgrade without special ordering.

The post walks through replacing the deprecated ingress‑nginx controller with Envoy Gateway on an EKS cluster, showing how to consolidate to shared public and private Gateways, map nginx annotations to Gateway API resources, and handle cross‑namespace TLS. It includes Helm chart changes, Argo CD rollout steps, and common pitfalls to avoid.

Amazon Web Services embeds formal techniques, TLA+, the P language, property‑based testing, and fault injection, into its development pipeline. These methods surface subtle bugs early, validate aggressive optimizations, and improve reliability at massive scale, accelerating delivery of cost‑effective cloud services.

Building internal developer platforms through DIY automation layers hidden complexity onto engineering teams. As scripts outlive their creators, maintenance becomes a never‑ending burden, driving burnout and higher people costs compared to buying a pre‑engineered PaaS. The article shows why buying often beats building.

Large Language Models often hallucinate when generating Terraform for extensive private codebases, hundreds of modules and thousands of versions. The open‑source TerraShark skill trims token overhead and grounds AI output in HashiCorp best practices, dramatically lowering hallucination rates for complex IaC projects.

RedAccess scanned 380,000 publicly accessible vibe‑coded web assets and identified roughly 5,000 apps exposing sensitive corporate data, databases, API keys, PII, and internal docs, without any authentication. The findings expose how default‑public settings on AI‑assisted development platforms create a massive, undetected shadow‑IT risk for enterprises.

A custom scanner inspecting public S3 buckets uncovered 900 Terraform state files, with 41 containing active AWS access keys. The find highlights how misconfigured Terraform backends can expose live cloud credentials at scale.