Komrade: An Open-Source Security Chaos Engineering Tool for Kubernetes
Explore Security Chaos Engineering (SCE) and its application in Kubernetes with Komrade, an open-source tool for proactively identifying system vulnerabilities through controlled experiments.
Harbor - Enterprise Cloud Native Artifact Registry
Explore advanced features of Harbor, an open-source registry for cloud-native artifacts. Learn about image signatures, cloud management, unified Helm and container handling, and high-availability deployments.
Cluster API Introduction and Deep Dive - Simplifying Kubernetes Cluster Management
Explore Cluster API's role in simplifying Kubernetes cluster management across environments, featuring new capabilities like ClusterClass for efficient cluster deployment and operations.
Scaling Kubernetes Nodes Without Breaking the Bank or Your Sanity
Discover best practices for utilizing spot capacity in Kubernetes clusters, optimizing costs and simplifying VM infrastructure management with tools and techniques for efficient scaling.
From Docker Push to Bytes on Disk - Inside Distribution
Explore the inner workings of container image distribution, from client-side operations to cloud storage, including API interactions, data structures, and garbage collection processes.
Your Manila CephFS Share Backups Belong to S3 - Automating Kubernetes Backup and Restore
Explore CERN's automated backup solution for Kubernetes using Velero, CephFS, Manila, and S3. Learn how to implement this workflow in your clusters for efficient disaster recovery.
Distributed Random Access Merkledags - Exploring Registry Capabilities
Explore innovative uses of OCI registries, drawing parallels with computer architecture concepts to redefine distributed systems and introduce Distributed Random Access Merkledags.
Operating Prometheus in a Serverless World
Explore challenges and solutions for monitoring serverless architectures with Prometheus, including Cloudflare's approach and potential future improvements for better insight into distributed systems.
Tweezering Kubernetes Resources - Operating on Operators
Explore Kubernetes Operators' security risks, threat modeling, and best practices for secure implementation. Learn to assess third-party Operators and conduct effective code reviews for enhanced cluster safety.
Implementing Anti-patterns: Kubernetes Cross-namespace Resource Ownership
Explore cross-namespace resource ownership in Kubernetes, its challenges, and potential solutions. Learn how to implement this anti-pattern while maintaining core services and garbage collection mechanisms.
Tail-Based Sampling in OpenTelemetry Collector - Why, How, and Issues
Explore tail-based sampling in OpenTelemetry Collector: benefits, configuration, implementation in microservices, and current challenges for production deployments.
Scaling and Orchestrating "Good Bot" With Kubernetes
Explore how Kubernetes orchestrates containerized "good bots" to generate realistic, large-scale normal traffic for testbed environments, enhancing testing accuracy and efficiency.
GitOps to Automate the Setup, Management and Extension of a Kubernetes Cluster
Learn to automate Kubernetes cluster setup and management using GitOps, Terraform, FluxCD, sealed-secrets, and Crossplane. Explore Infrastructure as Code and multi-cloud provisioning techniques.
How to Migrate 700 Kubernetes Clusters to Cluster API with Zero Downtime
Discover how Mercedes-Benz migrated 700 Kubernetes clusters to Cluster API, overcoming challenges and ensuring zero downtime. Learn valuable insights on transferring production systems and extending Cluster API functionality.
OpenTelemetry: The Vision, Reality, and How to Get Started
Explore OpenTelemetry's unified framework for observability data collection, its current state across projects, and practical guidance for implementation in your system.
Kubernetes IoT Edge Working Group: Edge Device Onboarding and Management
Explore open-source tools for edge device lifecycle management, from secure onboarding to production use. Learn about CNCF, LF Edge, and Eclipse projects extending cloud capabilities to edge devices and I/O.
The Soul of a New Command - Adding Events to kubectl
Explore the development of 'kubectl alpha events' command, its origins, structure, and future potential. Learn about Kubernetes enhancements and helper libraries for fetching and printing objects.
Kubernetes SIG CLI: Introduction and Updates
Explore Kubernetes SIG CLI's recent work, including kubectl and kustomize updates, KRM Functions subproject, and declarative vs. imperative workflows. Learn about contributing and join the open discussion.
Too Much to Choose - Making Sense of Kubernetes Security Standards
Explore Kubernetes security standards, their comparisons, and open-source tools for compliance assessment. Gain insights on choosing and implementing the right standards for your cluster.
CNCF TAG Observability: Introduction and How to Join
Discover CNCF TAG Observability's role, activities, and how to contribute to improving the cloud-native observability ecosystem. Learn about key projects, tools, and future developments in this domain.
Three Surprising Kubernetes Networking Features and How to Defend Against Them
Explore surprising Kubernetes networking vulnerabilities and learn effective defense strategies to protect your clusters from potential attacks and compromises.