The Path to Self-Contained CRDs - Advanced Validation and Version Conversion
Explore advanced CRD validation, version conversion, and policy enforcement in Kubernetes using CEL. Learn about current features and future plans for self-contained CRDs.
Guardians of the Runtime - Leveraging Behavioral Analysis and Policies for Kubernetes Security
Explore innovative Kubernetes security using behavioral analysis in CI testing and native policies. Learn hands-on practices for implementation and enforcement to protect against latest threats.
Automating Configuration and Permissions Testing for GitOps with OPA Conftest
Learn how The New York Times automates configuration and permissions testing for GitOps using OPA Conftest, enabling secure self-service deployments while maintaining developer autonomy.
Create Istio Filters with Any Programming Language
Learn to create custom Istio filters using WebAssembly and ProxyWasm, enabling development in various programming languages, including interpreted ones, for extended service mesh functionality.
Ephemeral Clusters as a Service with ClusterAPI and GitOps
Explore GitOps, ClusterAPI, and open-source tools for managing multiple Kubernetes clusters across cloud providers, addressing observability and security challenges at scale.
Developing a Mental Model of Istio: From Kubernetes to Sidecars to Ambient Mesh
Explore Istio's evolution from Kubernetes abstractions to sidecar model and Ambient Mesh, understanding key concepts and mental shifts for effective implementation and management.
Autoscaling Elastic Kubernetes Infrastructure for Stateful Applications Using Proxyless gRPC and Istio
Explore autoscaling Kubernetes for stateful apps using proxyless gRPC and Istio. Learn session persistence techniques, load balancing strategies, and backend draining for optimized infrastructure and cost efficiency.
Minikube: From CLI to GUI - Evolution and New Features
Explore Minikube's evolution from CLI to GUI, including the new minikube-gui project. Learn about its 7-year history and latest developments in Kubernetes local development.
How a Huge Bank Implements Observability with Multi-Tenancy Prometheus and Thanos
Explore how a major bank implements multi-tenancy observability using Prometheus, Kubernetes, and Thanos in a high-availability open-source platform called 'CloudMetrics'.
Malicious Compliance: Reflections on Trusting Container Scanners
Explore creative ways to bypass container image analysis and admission control detection, revealing limitations of validation tools and improving security policy creation.
SIG Instrumentation Introduction and Deep Dive - Kubernetes Observability and Debugging
Explore Kubernetes SIG Instrumentation's efforts in enhancing cluster debugging through native instrumentation, distributed tracing, and correlation of traces with logs and metrics. Learn how to contribute to these advancements.
What's New in Operator Framework
Explore the latest updates in Operator Framework, including OLM's new API and Operator SDK's v4 plugins. Witness a demo of OLM 1.0 featuring Deppy and Rukpak.
Securing the Container Supply Chain with Notary
Explore Notary v2's advanced capabilities for securing software supply chains, including core functionalities, enterprise scenarios, and ecosystem integrations.
Hardening Kubeflow Security for Enterprise Environments
Learn about Kubeflow security vulnerabilities, best practices, and improvements for enterprise environments. Gain insights on addressing unauthorized access, user impersonation, and data protection in MLOps platforms.
Gateway API and MCS API for Multicluster Traffic Management
Exploring Gateway API and MCS API for multicluster traffic management in Kubernetes, discussing their evolution, implementation challenges, and integration with the GAMMA initiative for unified east-west traffic management.
Cilium Networking for Multicloud Kubernetes - Simplifying Cross-Cloud Connectivity
Explore seamless connectivity for multi-cloud Kubernetes using Cilium and ClusterMesh. Learn to enable cross-cloud service communication, load balancing, and security with minimal configuration.
From Spreadsheets to Everything as Code - Transforming 5G Core Operations
Explore Swisscom's cloud-native transformation, leveraging GitOps and DevOps practices to revolutionize 5G Core infrastructure management and streamline deployment of network functions on Kubernetes.
Building a Batch System for the Cloud with Kueue
Learn about Kueue, a cloud-native job scheduler for Kubernetes that optimizes resource allocation, implements fair sharing, and enhances batch processing efficiency in multi-team environments.
Kubernetes Batch Processing at Scale - A Scheduling Perspective
Explore Kubernetes batch processing challenges and solutions, including custom scheduling for large-scale operations, Gang Scheduling, DRF, and workload colocation for improved resource utilization.
Fruit-Picking Robots Powered by Kubernetes - From Science Fiction to Reality
Explore how autonomous drones use AI and Kubernetes to revolutionize fruit harvesting, addressing labor shortages and overcoming edge deployment challenges in remote agricultural settings.
Designing and Securing a Multi-Tenant Runtime Environment at the New York Times
Explore the New York Times' journey in building multi-tenant Kubernetes clusters, focusing on networking choices, security considerations, and lessons learned from implementing Cilium for enhanced performance and visibility.