The Art of Hiding Yourself
Explore hacker techniques for anonymity in Kubernetes clusters, covering audit log tampering, process concealment, unconventional file storage, and network connection masking.
Enhancing Kubernetes with the Security Profiles Operator
Explore Kubernetes security enhancement with Security Profiles Operator. Learn to manage seccomp, AppArmor, and SELinux profiles using cloud-native APIs for improved workload security and simplified administration.
Secrets Store CSI Driver - Keeping Secrets Secret
Explore secure secret management in Kubernetes using Secrets Store CSI Driver. Learn to retrieve, mount, and rotate sensitive information from external stores like Azure Key Vault and Google Secret Manager.
BuildKit CLI for kubectl - A New Way to Build Container Images
Explore a new CLI plugin for building container images directly in Kubernetes clusters, optimizing developer workflows and enhancing efficiency in image creation and testing.
Building the Multi-Cluster Data Layer
Explore multi-cluster data layer challenges and solutions for distributed databases. Learn about cross-cluster deployment, service mesh adoption, and addressing global consistency and scalability issues.
Hacking into Kubernetes Security for Beginners
Explore Kubernetes security essentials through live exploits. Learn about RBAC, admission control, and vulnerabilities in Kubernetes, Linux, and dependencies. Gain practical knowledge for securing your clusters.
Gateway API - A New Set of Kubernetes APIs for Advanced Traffic Routing
Explore advanced Kubernetes traffic routing with Gateway API, offering enhanced capabilities beyond Ingress for header matching, traffic splitting, and load balancing configuration.
Inside Kubernetes Networking
Comprehensive exploration of Kubernetes networking, covering Pod-to-Pod communication, Services, and Ingress. Provides a holistic mental model applicable to all CNI implementations.
Event Processing at Optum, the Cloud Events Way
Explore event-driven architectures with Cloud Events at Optum. Learn about specification, Go library, Knative eventing, building sources/consumers, and real-world applications in healthcare.
Traces from Events - A New Way to Visualise Kubernetes Activities
Explore how Kubernetes Events can be transformed into OpenTelemetry Traces for powerful visualization using Jaeger, offering new insights into complex system activities.
From Tweet to BadIdea - Creating an Embeddable Kubernetes Style API Server
Explore building a minimal, embeddable Kubernetes-style API server with CRD support, addressing bootstrapping issues in infrastructure management without relying on existing Kubernetes clusters.
How DoD Uses K8s and Flux to Achieve Compliance and Deployment Consistency
Explore DoD's journey with K8s and Flux for improved compliance, deployment consistency, and air-gapped operations in restricted environments.
Choose Wisely - Understanding Kubernetes Selectors
Explore Kubernetes labels and selectors for effective app deployment. Learn advanced patterns like red/black and canary through live demos, enhancing your ability to manage and route traffic in Kubernetes clusters.
Optimizing Knowledge Distillation Training With Volcano
Explore knowledge distillation optimization using Volcano for efficient model compression, leveraging online GPU clusters and idle resources to enhance training throughput and flexibility.
Uncovering a Sophisticated Kubernetes Attack in Real-Time
Explore real-time detection of sophisticated Kubernetes attacks using eBPF technology, gaining insights into network and process-level visibility for enhanced cluster security.
TechDocs - Unlocking the Potential of Engineers' Collective Knowledge
Discover how Spotify's TechDocs revolutionizes technical documentation, enhancing discoverability and collaboration for engineers through a "docs like code" approach within Backstage.
Dedicated Infrastructure in a Multitenant World
Explore solutions for dedicated infrastructure in multitenant Kubernetes clusters, focusing on networking, security, and automation using Envoy, Terraform, and other tools.
Cluster API as Code
Explore declarative APIs and tooling for simplified Kubernetes cluster management using Cluster API bindings for TypeScript, Go, and Python, with live demonstrations.
Making Dynamic Admission Control Even More Dynamic Using WebAssembly
Explore WebAssembly's potential in Kubernetes for dynamic admission control, enhancing portability, security, and flexibility in API request validation and mutation.
Kubernetes on Windows - A Journey
Explore the journey of implementing Kubernetes on Windows Server, including design, development, installation, and deployment. Learn about benefits, challenges, and lessons learned in this unique environment.
CSI Volume Attacks – The SRE Strikes Back
Explore CSI security, Kubernetes protection, and storage protocols. Learn to safeguard data from unauthorized access with demos on volume lifecycle, pod policies, and file system permissions.