Centralized Compliance: Automated Governance Inside of Backstage Developer Portals
Discover how to enhance Backstage developer portals with automated governance integration, enabling quick compliance monitoring and improved visibility of repository release statuses through custom plugins and open-source libraries.
Sail-Operator: Making Seamless Istio Upgrades Easy
Discover how to simplify Istio control plane upgrades using sail-operator, featuring both InPlace and RevisionBased strategies for safer, automated service mesh management in Kubernetes environments.
Enhancing Security with Istio - Realtime JWT Access Revocation
Discover how to implement real-time JWT token revocation in Istio systems through an event-based architecture, enabling enhanced security controls and immediate access management across multiple clusters.
Migrating to OpenTofu: Achieving 10x Cost Reduction and Performance Improvements
Discover how to migrate from Terraform to OpenTofu, achieving 10x cost reduction and faster infrastructure deployment through a real-world case study of successful implementation and production usage.
Best Practices for OpenTofu Configuration Management and Environment Structuring
Discover best practices for managing OpenTofu configurations across environments, exploring three key methods and leveraging Static Evaluation for optimized workflow management and module versioning.
The Merge Conflict: Apply-Before-Merge vs Traditional Continuous Deployment in OpenTofu
Explore the key differences between approve-before-merge and traditional CD approaches in OpenTofu/Terraform deployments, comparing workflows, benefits, and implementation challenges.
Don't Get Blown Up! Avoiding Configuration Gotchas for Tetragon Newbies
Discover essential configuration tips and common pitfalls when implementing Tetragon for runtime observability in Kubernetes, with practical solutions and best practices for smooth deployment.
eBPF for Creating Least Privileged Policies - Implementing Security Through Kernel Monitoring
Discover how eBPF enables least privileged policies through kernel code injection, monitoring system calls, and process execution to enhance security against CVEs with minimal application overhead.
Building a Scalable Multi-Protocol API Gateway with Envoy
Discover how to leverage Envoy as a robust edge proxy for multi-protocol API gateway implementation, focusing on TCP-based protocols and enterprise security integration with SPIRE.
Keyboards, Kiosks, and Kubernetes - Containerizing HID Workloads
Discover how to containerize GUI applications and kiosks in Kubernetes, enabling efficient device management, resource sharing, and enhanced security while maintaining host/workload decoupling.
How to Rollout an Update for a CNI Without Breaking the World Wide Web
Discover how Project Calico implements feature flagging for safe CNI updates, exploring real-world examples like the Reddit Pi Day incident and best practices for maintaining stable cloud networking operations.
Marketing Secrets for Engineering Platforms - Driving Internal Platform Adoption
Discover essential marketing strategies for driving internal platform adoption, from building movements to leveraging loyalty loops and value-based pricing for engineering teams.
Are You Really Ready to Adopt a Platform? - A Readiness Assessment Guide
Discover key organizational requirements and readiness factors for successful platform adoption, covering stakeholders, processes, culture, and maturity models for effective implementation.
Stop Kubernetes' Revolving Door: A Hands-on Tutorial to Secure a Kubernetes Cluster
Master essential Kubernetes security practices through hands-on exercises covering authentication, authorization, network policies, and pod security to effectively protect and fortify your clusters.
Securing Outgoing Traffic: Building a Powerful Internet Egress Gateway for Reliable Connectivity
Master the implementation of secure Internet Egress gateways using Istio and Envoy, focusing on fine-grained access policies, multi-tenant architecture, and robust traffic monitoring for enhanced network security.
Enabling Fault Tolerance for GPU Accelerated AI Workloads in Kubernetes
Discover strategies for implementing fault tolerance in GPU-accelerated AI workloads on Kubernetes, covering hardware error handling, fault detection, and automated remediation techniques.
Implementing Multicast with eBPF and Cilium
Discover how eBPF and Cilium enable efficient multicast networking in Kubernetes clusters, exploring implementation techniques, challenges, and solutions for pod-to-pod multicast delivery.
Fake It to Make It - Test-Driven Development of gRPC Microservices
Master efficient test-driven development for gRPC microservices using fast fake frameworks, enabling rapid development cycles and improved code quality through functional testing approaches.
Introducing Dagger Modules: Open Source CI/CD Building Blocks You Already Know How to Write
Discover how to build and share reusable CI/CD modules using Dagger, enabling code-based CI platform development in TypeScript, Go, or Python that runs both locally and in any CI environment.
Why Does Continuous Profiling Matter to Developers? - Understanding OpenTelemetry and Performance Analysis
Discover how continuous profiling and OpenTelemetry work together to enhance application performance monitoring, identify bottlenecks, and implement effective observability strategies for distributed systems.
Building Real-World Applications with Dapr - A Practical Guide to Essential Building Blocks
Discover how Dapr's building blocks simplify complex application development through a real-world case study, exploring cryptography, state management, pub/sub messaging, and service orchestration features.