Running Istio in Production as a Small Team
Discover how a small team implemented Istio for efficient traffic management during a Kubernetes migration, overcoming challenges and enabling seamless transition of 300+ microservices.
Kubernetes v1.27 Release Overview
Explore the latest features and improvements in Kubernetes v1.27, enhancing container orchestration and cloud-native application deployment.
Container Patching: Making It Less Gross Than the Seattle Gum Wall
Explore strategies for efficient container patching, including prevention, detection, fixing, and monitoring. Learn about opensource tools and best practices to streamline the process and meet security requirements.
Hands-on Hacking Kubernetes and Ways to Prevent It
Hands-on workshop exploring Kubernetes vulnerabilities and prevention strategies. Demonstrates remote code execution exploit and teaches mitigation techniques for enhanced container security.
Solving Multi-Service Communication Without a Service Mesh
Explore Kubernetes primitives for secure microservices communication without service mesh. Learn about NetworkPolicy, token projection, API gateways, and more for authentication, encryption, and compliance.
Cloud Cost Monitoring with OpenCost and Kubernetes Optimization Strategies
Explore OpenCost for Kubernetes cost monitoring and learn optimization strategies for workloads, infrastructure, and operating systems to enhance cloud efficiency.
Avoiding IAC Potholes with Policy and Cloud Controllers
Discover how to secure self-serve cloud infrastructure for Kubernetes teams using policy engines and cloud controllers. Learn to enforce compliance while enabling application teams to provision resources efficiently.
Unpacking Open Source Security in Public Repositories and Registries
Explore security risks in popular open-source projects and public registries. Learn about common misconfigurations, vulnerabilities, and best practices to safeguard your systems when using public resources.
Securing Self-Hosted GitHub Actions with Kubernetes and Actions-Runner-Controller
Explore secure deployment of self-hosted GitHub Actions runners using Kubernetes and actions-runner-controller. Learn about cluster settings, controller configurations, and runner pod security for regulated environments.
Get Your Security Priorities Straight - Identifying Workloads Under Real Threat with Context
Discover a security prioritization system for Kubernetes workloads based on the MITRE framework, helping differentiate real threats from potential ones in various contexts.
From the Cluster to the Cloud: Lateral Movements in Kubernetes
Explore techniques for lateral movement from Kubernetes containers to cloud resources, covering RBAC misconfigurations, authentication methods, and real-world incidents. Learn prevention and detection strategies.
Beyond Cluster-Admin - Getting Started with Kubernetes Users and Permissions
Learn to implement users and permissions in Kubernetes clusters, covering user provisioning methods, RBAC for fine-grained access control, and strategies for both managed and self-hosted environments.
How to Build a Distributed System and Should You - Lessons from Production
Explore the journey of building an eventually consistent system, including challenges, tools used, and lessons learned. Gain insights into distributed systems concepts and evaluate if building your own is right for you.
Balancing Yin and Yang in Open Source Software - Community and Company Perspectives
Strategies for companies to practice "Business Aligned Open Source" in Kubernetes, addressing sustainability challenges and fostering community-company balance in open-source development.
Migrating From Single-Node Kubernetes Control Plane to HA in Production
Learn how Databricks migrated from single-node to multi-node Kubernetes control planes, enhancing reliability and enabling safer, faster upgrades across their cluster fleet without disrupting production workloads.
Windows HostProcess Containers for Configuration and Beyond
Explore Windows HostProcess Containers for efficient Kubernetes cluster management, including CNI implementation, debugging, and on-demand monitoring. Learn practical examples and novel approaches.
API Evolution with CRDs: Best Practices for Authoring and Fuzz Testing APIs
Best practices for authoring and fuzz testing CustomResourceDefinitions APIs in Kubernetes, covering strategies for design, validation, and evolution of scalable and stable APIs.
Implementing Private 5G Networks for Enterprises with Kubernetes
Explore private 5G networks for enterprises: benefits, components, and Kubernetes orchestration. Learn about cloud-native network functions and special requirements for supporting networking traffic.
Efficient Scheduling of High Performance Batch Computing for Analytics Workloads with Volcano
Explore how ING uses Volcano scheduler for efficient, multi-tenant large-scale processing in advanced analytics, enabling dynamic allocation and resource fairness for over 300 internal projects.
SIGs Aren't Silos - A Case Study Into Solving Inter-Domain Problems in Kubernetes Development
Explore a cross-SIG bug in Kubernetes, its impact, and lessons learned. Gain insights into inter-domain problem-solving and improving collaboration between Special Interest Groups in open-source development.
Resize Pods In-Place Using Deterministic eBPF Triggers and Kubernetes Feature Design
Explore in-place pod resizing using eBPF triggers for efficient cloud-native development. Learn about current feature design, implementation challenges, and future possibilities in Kubernetes resource management.