Micah Hausler

Micah Hausler

@micahhausler.com

Security and Kubernetes @ AWS

1.1K followers413 following356 posts

Micah Hausler
@micahhausler.com
Aaron Rupar@atrupar.com

Leavitt begins the press briefing: "Could you hear our 'amen' in there? We just had a little loud prayer as a team. In this holy week, President Trump and the First Lady are joining in prayer with Christians celebrating the resurrection of our lord and savior, Jesus Christ."

Micah Hausler reposted

kat cosgrove
@kat.lol

Joint statement from Kubernetes Steering and Security Response Committees: In March 2026, Kubernetes will retire Ingress NGINX, a piece of critical infrastructure for about half of cloud native environments. This is an emergency. Please pay attention. kubernetes.io/blog/2026/01...

kubernetes.ioIngress NGINX: Statement from the Kubernetes Steering and Security Response CommitteesIn March 2026, Kubernetes will retire Ingress NGINX, a piece of critical infrastructure for about half of cloud native environments. The retirement of Ingress NGINX was announced for March 2026, after...
Micah Hausler
@micahhausler.com

iOS 26 is suddenly announcing all notifications on my AirPods. I’ve definitely only enabled that for messages, and confirmed they’re turned off. This is massively annoying.

Micah Hausler
@micahhausler.com

Let’s be clear about Trump’s obsession with Greenland: its not about security. If it truly were, they’d get creative about adding more US military bases and hardware as a NATO member, restrictions on shipping lanes, etc. This is about Trump wanting to leave a legacy with global map-making changes.

Micah Hausler reposted

🤖 EKSBot
@eksbot.bsky.social

ACM now supports automated certificate management for Kubernetes #eks #kubernetes

aws.amazon.comACM now supports automated certificate management for Kubernetes<p>AWS Certificate Manager (ACM) now automates certificate provisioning and distribution for Kubernetes workloads through AWS Controllers for Kubernetes (ACK). Previously, ACM automated certificate management for AWS-integrated services like Application Load Balancers and CloudFront. However, using ACM certificates with applications terminating TLS in Kubernetes required manual steps: exporting certificates and private keys via API, creating Kubernetes Secrets, and updating them at renewal. This integration extends ACM's automation to any Kubernetes workload for both public and private certificates, enabling you to manage certificates using native Kubernetes APIs.<br> <br> With ACK, you define certificates as Kubernetes resources, and the ACK controller automates the complete certificate lifecycle: requesting certificates from ACM, exporting them after validation, updating Kubernetes Secrets with the certificate and private key, and automatically updating those Secrets at renewal. This enables you to use ACM exportable public certificates (launched in June 2025) for internet-facing workloads or AWS Private CA private certificates for internal services in Amazon EKS or other Kubernetes environments. Use cases include terminating TLS in application pods (NGINX, custom applications), securing service mesh communication (Istio, Linkerd), and managing certificates for third-party ingress controllers (NGINX Ingress, Traefik). You can also distribute certificates to hybrid and edge Kubernetes environments.<br> <br> This feature is available in all commercial, AWS GovCloud (US), and AWS China regions where ACM is available.<br> To learn more, visit the <a href="https://github.com/aws-controllers-k8s/acm-controller">Git hub link</a> or read our <a href="https://docs.aws.amazon.com/acm/latest/userguide/acm-exportable-certificates.html">documentation</a> and our <a href="https://aws.amazon.com/certificate-manager/pricing/">pricing page</a>.&nbsp;</p>

Micah Hausler reposted

P(aul) Frazee
@pfrazee.com

This is *exactly* what these things look like. Click the link for the animated version

Dark Cartographer@fjord.style

I've been "enjoying" scintillating scotomas more often recently. They're difficult to describe, and images online don't really capture it. But the first thing I thought when I saw them was "I should make a shader of this" – so here's a demo, it's pretty close: meetar.github.io/scotoma/

Micah Hausler
@micahhausler.com

This posture is a product of the deep thought, time, and effort we put into how we build and operate our service, and is a great example of how all customers of Amazon EKS benefit from AWS's commitment to continuous innovation and protecting our customer's data.

Micah Hausler reposted

The New Stack
@thenewstack.io

#KubeCon Day 2 Recap 🚀 Yesterday's convos with AWS Open experts were invaluable. @micahhausler.com detailed the significance of upstream contributions, Mike Stefaniak shared the EKS approach to Agentic AI, and Jesse Butler explored developer tools and verification.

Micah Hausler
@micahhausler.com

This is a truly significant announcement for organizations who want to know that Amazon EKS is secure to run their most sensitive workloads. aws.amazon.com/blogs/securi...

aws.amazon.comAmazon Elastic Kubernetes Service gets independent affirmation of its zero operator access design | Amazon Web ServicesToday, we’re excited to announce the Amazon Elastic Kubernetes Service (Amazon EKS) zero operator access posture. Because security is our top priority at Amazon Web Services (AWS), we designed an oper...
Micah Hausler
@micahhausler.com

TBH this is such a letdown with the date change. Speaking as an attendee, moving KubeCon from Oct to mid-November so close to re:Invent is such a drag (AWS is a diamond sponsor, haven’t been the last few years when KCNA was in Nov) events.linuxfoundation.org/kubecon-clou...

events.linuxfoundation.orgKubeCon + CloudNativeCon North America 2026 | LF EventsThe Cloud Native Computing Foundation’s flagship conference gathers adopters and technologists from leading open source and cloud native communities.
Micah Hausler
@micahhausler.com

I recently started an instagram account. They wait a full 4 weeks before asking “allow app to track?” I guess they found that people are reluctant to say yes when initially getting the app

Micah Hausler
@micahhausler.com

A nice side effect to last night’s eclipse was that you could see the Milky Way with the naked eye! This is a long-exposure shot captured during totality. #astrophotography

Micah Hausler@micahhausler.com

The Sept 7th total lunar eclipse, viewed from Karamoja, Uganda #astrophotography

Micah Hausler
@micahhausler.com

Still learning how to edit, but I’m pretty pleased with the result! #astrophotography

Micah Hausler@micahhausler.com

Not bad for a first night shooting with a sky tracker! Went out in the everglades to try out the new gear #astrophotography

Micah Hausler
@micahhausler.com

It’s special when you have 10 minutes of overlapping layover with your brother in the same airport! Especially so when we both had accidental flight changes that made it happen!

Micah Hausler
@micahhausler.com

I have a good friend who left the Army in 2016 because he didn’t want to end up in the position of being deployed against civilians. At the time I thought it was a tail risk.

Walter Olson@walterolson.bsky.social

"This is Donald Trump's attempt to create his own de facto Praetorian Guard," @pgeddington.com, senior fellow at the @cato.org Institute, tells Reason. "These acts by the Trump regime have nothing to do with crime and everything to do with armed, coercive political intimidation and repression."

reason.comPentagon draws up plans to send troops to American citiesThe Trump administration is considering plans for a 'Reaction Force' of National Guard troops to deploy to American cities with signs of civil unrest.