From Minikube to Production, Never Miss a Step in Getting Your K8s Ready
Comprehensive guide on transitioning Kubernetes from development to production, covering HA setup, security best practices, and essential CNCF tools for observability, reliability, and management.
Mesh in a Mesh - A Model for Stronger Multi-tenancy of Kubernetes Workloads
Explore a new model for deploying workloads in tenant-specific sub-meshes within service meshes, enhancing multi-tenancy in Kubernetes clusters with improved traffic policies and resource management.
The Common Configuration Scoring System for Kubernetes Security
Explore KCCSS, an open-source framework for assessing Kubernetes workload risks. Learn how it calculates scores, its implementation in kube-scan, and best practices for securing K8s applications.
Uncharted Territories - Discovering Vulnerabilities in Public Helm Charts
Explore vulnerabilities in public Helm Charts, examining security considerations for both Helm as a tool and individual charts. Learn about CNCF's security investments and their impact on Kubernetes ecosystem.
Istio Simplified
Explore Istio's simplified architecture, including istiod monolith, protocol auto-detection, automatic mTLS, and improved non-Kubernetes support for easier installation and operation.
Multi Cluster and Multi Mesh Patterns
Explore multi-cluster and multi-mesh patterns for service mesh adoption across heterogeneous environments, addressing challenges in identity federation, observability, and policy development.
Iteratively Implementing Istio - Zero to Service Mesh with No Downtime
Discover how Autodesk implemented Istio in production, scaling from 50 to 100 microservices with zero downtime. Learn about iterative deployment, canary testing, and custom routing strategies.
Progressive Delivery with Flagger
Explore progressive delivery techniques for Kubernetes using Flagger and service meshes to reduce deployment risks and automate releases with canary deployments and traffic management.
Kubernetes Attack and Defense - Inception-Style
Explore Kubernetes security through a multi-layered attack scenario, including update poisoning, service interception, and cloud API exploitation. Learn defensive strategies using OPA/Gatekeeper.
Serverless Machine Learning Inference with KFServing
Explore serverless ML inference with KFServing, addressing deployment challenges, auto-scaling, and GPU utilization. Learn about real-world applications and future prospects in machine learning production environments.
Pod Security as an Afterthought
Explore tools for implementing Kubernetes security measures retrospectively, including kube-psp-advisor, Inspektor Gadget, and oci-seccomp-bpf-hook, to enhance pod security in existing deployments.
Production Multi-node Jobs with Gang Scheduling, K8s, GPUs and RDMA
Explore distributed execution of DL/ML jobs in Kubernetes, covering gang scheduling, GPU acceleration, and high-speed networking for improved performance and scalability.
Deep Dive - Unified Runtime Service Infrastructure for Containers and VMs
Explore a unified runtime infrastructure for containers and VMs in Kubernetes, addressing challenges in managing multiple runtimes and handling operational differences between workload types.
Deep Dive - Kubernetes SIG Storage
Explore Kubernetes SIG Storage's latest projects, updates, and future plans for efficient container storage management, including volume expansion, snapshots, capacity tracking, and more.
Intro - Virtual Kubelet - Featuring KIP by Elotl
Explore Virtual Kubelet and KIP for Nodeless Kubernetes, enabling flexible compute types and cloud bursting. Learn about the provider framework and see a demo of this powerful combination in action.
A Universal Central IPAM for Pod With Multiple Network Interfaces
Explore a universal central IPAM solution for managing complex network topologies in Kubernetes, focusing on telecom industry needs and addressing multi-interface pods with fixed IP requirements.
Delivering Cloud Native Applications Across Multiple Clouds and Clusters
Explore multi-cloud Kubernetes application management, covering image distribution, cross-cluster deployment, traffic control, and maintaining consistency in complex environments.
SLO-Oriented Scheduling With Resource Estimation to Optimize Utilization
Explore Alibaba's approach to managing hybrid workloads in Kubernetes, focusing on high resource utilization and SLO achievement through real-time metrics, consumption pattern estimation, and opportunistic scheduling.
Best Practice for Building Lightweight VM Cluster With Kubevirt
Explore Kubevirt's VM management in Baidu, covering dual network adapters, centralized image service, user configuration injection, and edge deployment for lightweight VM clusters.
Deep Dive - Inside ChubaoFS – The Storage Engine
Explore ChubaoFS, a distributed file system for cloud-native applications. Learn its architecture, development, and key features like dynamic expansion and optimized performance for both small and large files.
The Best Practice of Volume Expansion by Using Kubernetes CSI and SODA
Explore efficient data management in cloud-native environments using SODA's smart platform. Learn to connect applications to SODA's northbound plugin and leverage CSI expansion for flexible data handling.