How to Work in Cloud Native Security - Demystifying the Security Role
Explore cloud native security with Docker's Security Lead. Learn about transitioning from ops/dev to security, key skills, and why it's an exciting field. Gain insights on threat modeling and quality-focused security practices.
Deep-Dive - Packet-level Debugging of Bridged and Non-bridged CNI Plugins
Explore packet-level debugging techniques for Kubernetes connectivity issues, focusing on bridged and non-bridged CNI plugins, NAT, iptables, and network policies.
Sharing Is Caring! Push Your Cloud Application to an OCI Registry
Learn to store applications in container image registries using OCI Image specification. Explore multi-arch images, CNAB project, and pushing multi-service apps to registries. Gain insights on OCI spec interpretations across mainstream registries.
Deep Dive - Linkerd
Explore Linkerd's architecture, core concepts, and future developments. Learn about distributed systems, control planes, and multi-cluster setups through lessons and demonstrations.
Jaeger Deep Dive
Explore Jaeger's architecture, features, and roadmap. Learn about adaptive sampling, multi-tenancy, and deployment strategies for this distributed tracing platform.
Seccomp Security Profiles and You - A Practical Guide
Explore tools for creating seccomp security profiles and understanding Linux Capabilities to harden applications. Learn about Dockersl.im and Inspektor Gadget for improved visibility into pod behavior.
Running SPIRE in Large Scale, Enterprise-Grade Environments
Explore SPIRE deployment in large enterprises: high availability, multi-zone setup, upstream CA integration, and monitoring for robust, scalable identity management in complex environments.
From Alert Notification to Comparison of Good and Bad Requests in One Click
Explore efficient troubleshooting by linking metrics, traces, and alerts. Learn to compare problematic and normal traces automatically, reducing time-to-mitigation using open-source tools like Prometheus and Jaeger.
Startup Containers in Lightning Speed with Lazy Image Distribution
Explore innovative image formats and containerd's Remote Snapshotter for faster container startup, enabling execution without full content download. Learn about lazy image distribution techniques and their performance benefits.
Birds of a Feather - Telecom User Group
Explore cloud native technologies in telecom with CNCF's Telecom User Group. Discuss initiatives, white papers, and best practices for adopting these technologies in the service provider industry.
Running K3s, Lightweight Kubernetes, in Production for the Edge and Beyond
Explore strategies for running K3s, a lightweight Kubernetes distribution, in various production environments including edge, on-premises, cloud, and pipeline use cases.
Multicloud Vitess over Network Service Mesh
Explore deploying Vitess across multiple cloud providers using Network Service Mesh for seamless connectivity. Learn about inter-domain networking and multicloud capabilities for distributed database systems.
DevOps Patterns and Antipatterns for Continuous Software Updates
Explore DevOps patterns and antipatterns for continuous software updates, analyzing real-world failures and proven solutions to improve update processes and avoid common pitfalls.
In a Container, Nobody Hears Your Screams - Next Generation Process Isolation
Explore next-gen process isolation techniques, comparing containers and micro VMs for secure workload execution. Learn about emerging technologies and their suitability for different applications.
Securing Container Delivery with TUF
Explore TUF's architecture for secure container delivery, protecting against attacks and mitigating risks in software distribution, even after security breaches.
Network Isolation and Security Policies for Kubernetes Bare-metal Nodes
Explore network isolation and security policies for Kubernetes bare-metal nodes using SDN, OVN, and OVS, with Smart NIC offloading for efficient multi-tenant cloud environments.
EBPF and Kubernetes - Little Helper Minions for Scaling Microservices
Explore eBPF's evolution and its impact on Kubernetes, covering networking, tracing, and security. Learn how this technology is revolutionizing Linux kernel customization and benefiting cloud-native environments.
Hacking on Network Service Mesh Dataplane for a True Multi-cloud Experience
Integrating Network Service Mesh with Tungsten Fabric SDN for flexible, cloud-native networking across diverse environments, enabling seamless connectivity regardless of service location.
Build an Automatic Canary Release Pipeline in a Kubernetes-Native Way
Learn to build an automatic canary release pipeline using Kubernetes-native tools Tekton and Knative. Discover how to monitor events, manage traffic, and create serverless applications in a seamless, cloud-native workflow.
Kubernetes on Cgroup v2
Explore cgroups v2 in Kubernetes: new features, OCI spec changes, and container runtime adaptations for improved resource management and OOM handling.
Building Docker Images with Cloud Native Buildpacks
Learn how Cloud Native Buildpacks simplify Docker image creation, enhancing security, reproducibility, and efficiency for developers and operators in cloud-native environments.