Cilium mTLS ztunnel: Sidecar-Free Encryption Explained

per-node proxy traffic flow diagram showing namespace enrollment

Cilium mTLS ztunnel doesn’t need a SPIRE server — and that’s actually the second-biggest news here. The bigger story: Cilium’s older, SPIRE-based “Mutual Authentication” feature is now officially deprecated, with removal targeted for v1.21. If you adopted it, you’re migrating… Read moreCilium mTLS ztunnel: Sidecar-Free Encryption Explained

Grafana Tempo 3.1: Query-Based Trace Redaction Explained

trace redaction workflow diagram for distributed tracing

Grafana Tempo 3.1 shipped on 2026-09-30 with a feature that matters the moment something goes wrong, not when everything’s fine: redaction by query. Before this release, scrubbing a leaked secret out of your traces meant enumerating trace IDs one at… Read moreGrafana Tempo 3.1: Query-Based Trace Redaction Explained

OpenTofu 1.13: What’s New (and Terraform Still Lacks)

opentofu 1.13 release diagram showing state encryption, windows arm64 support, and new functions

OpenTofu 1.13.0 shipped on September 30, 2026. Officially-supported Windows on ARM64, a set of new functions, and upgrades to the state-encryption system it shipped ahead of Terraform. Here’s what actually changed, verified against the official release changelog, plus a close… Read moreOpenTofu 1.13: What’s New (and Terraform Still Lacks)