Data Security - Theoretical and Real World Approaches to Compartmentalization
Explore theoretical and practical approaches to data security in cloud environments, covering formal methods, secure languages, and container-based storage solutions for enhanced protection and reliability.
From Kubernetes to PaaS to Developer Control Planes
Explore the evolution from Kubernetes to developer control planes, discussing full-cycle development, service ownership, and real-world examples from major tech companies.
Continuous Documentation Manifesto
Explore a new paradigm for creating and maintaining code documentation, integrating it into the development workflow to improve team efficiency and productivity.
The Future of Database Observability is Open - SQL Commenter Merges With OpenTelemetry
Explore the merger of SQL Commenter with OpenTelemetry, creating a vendor-neutral standard for database observability. Learn about query tagging, end-to-end tracing, and auto-ORM instrumentation for troubleshooting.
A Cloud Native Foundation for Developer - Application Platforms
Explore cloud-native foundations for developer platforms, covering lessons learned, best practices, and key components like Crossplane, Backstage, Argo, and Buildpacks for reliable and adoptable solutions.
With Preview Environments, Everyone is Invited To the Party
Explore preview environments in Kubernetes for inclusive code reviews, enabling non-developers to provide valuable feedback on live application changes before deployment.
Using GitOps for Kubernetes Reliability at Scale
Explore GitOps for automating chaos engineering in large-scale Kubernetes deployments. Learn best practices for managing experiments across teams using LitmusChaos and FluxCD.
GitOps in the Real World - Opportunities for Developer Experience Improvement
Explore GitOps implementation at scale, focusing on manifest generation and repository management. Learn from Chick-fil-A's experiences and discover opportunities to enhance the frontend process.
A Day in the Life of the GitOps Platform Team
Explore State Farm's GitOps journey, scaling challenges, and continuous improvement strategies across cloud platforms, with insights on team dynamics and overcoming obstacles.
Project Trebuchet - How SolarWinds is Using Open Source to Secure Their Supply Chain in the Wake of the Sunburst Hack
SolarWinds' Project Trebuchet: Rebuilding secure software supply chain using CNCF and CDF projects after Sunburst hack. Insights on new build system, its necessity, and lessons learned from a major security breach.
Whose Sign Is It Anyway?
Explore digital signatures' true meaning, implications of key handling policies, and identity concepts in software supply chain security. Dive deep into cryptographic realities and case studies.
The State of SBOMs
Explore the current landscape of Software Bill of Materials (SBOMs) with industry experts, discussing challenges, best practices, and future trends in software supply chain security.
State of the Art Supply Chain Security - In-toto, TUF, and SigStore
Explore cutting-edge supply chain security with in-toto, TUF, and SigStore. Learn how these tools create a transparent, hack-proof system to protect software from developer to end-user.
Finding Your Way - A Survey of Supply Chains
Explore the open source supply chain landscape, essential tools, and challenges in software development, with a focus on SBOMs and security considerations.
Supporting Confidential Workloads with SPIRE
Explore integrating confidential computing with SPIRE for enhanced workload protection. Learn challenges, benefits, and implementation strategies for secure attestation and trusted execution environments.
SPIRE Project Updates
Discover the latest developments in the SPIRE project with Ryan Turner from Uber Technologies, exploring advancements in cloud-native identity and access management.
Providing Identities to Serverless Workloads
Explore secure identity management for serverless workloads using SPIRE's SVIDStore plugin, enabling external storage and consumption of identities in environments where agent installation is not feasible.
Cloud & Cloud Native Identity and Access Management - Challenges & Opportunities
Explore challenges and solutions for identity and access management in hybrid cloud native environments, focusing on achieving continuous identity assurance and zero trust.
Extending Envoy Using WebAssembly - Wasm
Discover how to extend Envoy's functionality using WebAssembly (Wasm). Learn about Envoy filters, extensibility options, and the process of creating custom filters to enhance routing, observability, and security features.
The Trials and Success of Adopting Envoy at Tinder
Explore Tinder's journey in adopting Envoy for their Kubernetes infrastructure, covering challenges, custom solutions, and best practices for implementing a robust service mesh.
The Evolution of Twitter's Edge
Explore Twitter's edge architecture evolution, focusing on Envoy's role in handling billions of daily requests, its benefits, and future developments in scalability and performance.