Secure Your GitOps - How to Implement a Robust Security Strategy
Discover strategies for implementing robust security in GitOps, covering access control, multi-tenant management, and best practices for securing critical components in automated deployment workflows.
GitOps in the Real World - Opportunities for Developer Experience Improvement
Explore GitOps implementation at scale, focusing on manifest generation and repository management. Learn from Chick-fil-A's experiences and discover opportunities to enhance the frontend process.
Building Flux's Multi-Tenant API with K8s User Impersonation
Explore Kubernetes multi-tenancy using Flux as an example. Learn RBAC, impersonation, and kubeConfig secrets to enable safe collaboration across namespaces and clusters.
A Multi-Cluster, Multi-Cloud Infrastructure with GitOps at CERN
Explore CERN's multi-cluster, multi-cloud infrastructure using GitOps. Learn about efficient management of distributed systems, cloud-native technologies, and standardized deployments across on-premises and public cloud environments.
A Day in the Life of the GitOps Platform Team
Explore State Farm's GitOps journey, scaling challenges, and continuous improvement strategies across cloud platforms, with insights on team dynamics and overcoming obstacles.
Cloud Native Supply Chain Security with Tekton and Sigstore
Hands-on overview of creating a secure zero-trust supply chain on Kubernetes using Tekton, Tekton Chains, and sigstore. Learn to protect pipelines, generate provenance, and integrate with In-Toto and SPIRE.
Managing Kubernetes Webhooks with SPIRE
Explore automating certificate management for Kubernetes Webhooks using SPIRE, simplifying operations and integrating with the existing workload trust chain.
Working Out SPIFFE Identity for Cilium CNI
Explore SPIFFE identity integration with Cilium CNI, covering design challenges, extended use cases, and comparisons to other solutions for enhanced network security and policy enforcement.
Integrating SPIRE and Istio
Explore the integration of SPIRE identities with Istio service mesh, enhancing microservices deployment in Kubernetes with improved security and identity management.
The Trials and Success of Adopting Envoy at Tinder
Explore Tinder's journey in adopting Envoy for their Kubernetes infrastructure, covering challenges, custom solutions, and best practices for implementing a robust service mesh.
Speeding up Istio - Our Journey Implementing Delta xDS
Explore Istio's journey implementing delta xDS to optimize configuration distribution, addressing challenges and showcasing performance improvements in service mesh environments.
Using Envoy as an Egress Proxy for TLS Enabled Traffic
Explore Envoy as an egress proxy for TLS traffic, combining it with SSLproxy for enhanced security and traffic management in modern cloud-native applications accessing external services.
Lessons Learned - Four Years with Emissary-ingress and Envoy
Explore insights from four years of Emissary-ingress development, including challenges, lessons learned, and best practices for leveraging Envoy in Kubernetes environments.
Dedicated Infrastructure in a Multitenant World
Explore Adobe's innovative solutions for dedicated infrastructure in multitenant Kubernetes, using Envoy for secure networking and automated provisioning with Terraform and operators.
What, Why and How of Federated Machine Learning – Implementation Using FATE, KubeFATE, and FATE-Operator for Kubeflow
Explore federated machine learning's principles, use-cases, and implementation using FATE and KubeFATE. Learn about challenges, opportunities, and integration with Kubeflow for real-world applications.
Security Best Practices for AI on Kubernetes
Explore security concerns and best practices for AI workloads on Kubernetes, covering user privileges, container isolation, package installation, and data access to ensure both security and productivity.
Case Study - Developing and Scaling Kubeflow’s Web Apps
Explore Kubeflow's web app development journey, covering authentication, scalability, UX for K8s object management, and efficient data fetching for advanced AutoML techniques.
Serving Machine Learning Models at Scale Using KServe
Explore KServe's Multi-Model Serving solution for scalable machine learning deployment, addressing resource limitations and enabling efficient GPU utilization in Kubernetes clusters.
AIOps for CI with Kubeflow Pipelines
Explore AI4CI, an AIOps tool leveraging Kubeflow Pipelines to monitor builds, predict failures, and create interactive dashboards for improved CI/CD visibility and root cause analysis.
A Better and More Efficient ML Experience for CERN Users
Explore how CERN leverages machine learning and Kubeflow to handle massive data growth from the Large Hadron Collider, improving resource usage and integrating with site services for efficient analysis.
Helping One of Europe's Banks Re-platform with Declarative, Self-healing, Multi-cloud WasmCloud Clusters on Kubernetes
Explore next-gen platforms using WebAssembly and wasmcloud for multi-cloud, self-healing clusters. Learn about improved developer productivity, lightweight services, and seamless failover across cloud providers.