I had fun at Cloud Native Bergen this week, it keeps getting better each year! 🤩 Oh, and my talk just came out, have a look 😄

We built a GKE platform - with only 2 engineers and lots of coffee

YouTube video by Cloud Native Bergen

youtu.be

Was setting up my home lab today and was forced to connect it to a monitor with VGA. Immediately broke a nail on those horrible VGA screws. Now I remember why we used to hate those damn things!

Banning TikTok seems to be sparking quite a bit of class consciousness. Who knew a dance app could unite people like this? So much for stopping dangerous propaganda

Apparently whether you say billion or milliard for 1000 millions depends on where you live.And we can thank the US for popularising the short scale, which was never widespread before its adoption in USA. Thanks America.

OpenTofu 1.9 beta is out. Lots of interesting new features like for_each support in provider configuration 👀

Get ready for OpenTofu Beta 1.9.0 | OpenTofu

Hey there, OpenTofu community! We've been working hard to refine the 1.9.0-alpha2 with your feedback! A few rough edges have been polished and a few new features have been added.

opentofu.org

Big news: Kargo v1.1.0 is here! 🚀 With expression language support, better promotion steps, and a revamped UI, scaling GitOps just got easier. 💡 Discover what’s new 👉 https://bit.ly/4gaQDZk #GitOps #Kubernetes #ContinuousDelivery #Kargo

Whatever you want to define what something is (HELM TEMPLATE, kcl run, timoni build -> "yaml") push the desire state in Git, Let me Repeat, whichever format you are using. for "resource definition" but store desired state in git in "yaml" More on Rendered manifests: akuity.io/blog/the-ren...

The Rendered Manifests Pattern - Akuity Blog

Deploy with Argo CD, promote seamlessly with Kargo, and gain real-time visibility into your infrastructure using KubeVision

akuity.io

Are you comfortable with PodDisruptionBudgets in Kubernetes? In any case this article is a nice refresher 💁‍♀️

Safeguarding Your Kubernetes Deployments with a PodDisruptionBudget

In the ever-growing industry of containerized applications, continuous availability of critical applications and workloads is paramount…

medium.com

There‘s three kinds of teams: Product teams, Platform teams, and Microsoft Teams - one builds products, one builds platforms, and one just builds confusion

Would you look at that. My talk on #ArgoCD is out 🥳 Check it out for some nice advanced ApplicationSet examples 👩‍🔬

Argo CD on easymode. Introducing "Apps Repositories"

YouTube video by Cloud Native Bergen

youtu.be

Just reached 1000 awesome followers 😍 Thanks to @justingarrison.com for putting me in his Cloud Native starter pack, that made a world of difference! Starter packs are such an excellent idea that really sets Bluesky apart! 🦋 I'll keep making interesting and educational posts, feel free to follow 😇

If you are using Gateway API, have you tried out gwctl yet? It's a new CLI to help you use GW API 💁‍♀️ It can even generate charts of how your HTTPRoutes relate to your Gateways and GatewayClasses! 🔗 github.com/kubernetes-s...

Have you heard about the NodeRestriction Admission Controller? It's an interesting security feature that disallows a kubelet (node) from modifying resources associated with another node 👀 It's not enabled by default, but can be useful for reducing the consequence of a node compromise 🥷 #KubeCon

Rogue No More: Securing Kubernetes with Node-Specific Restrictions - Anish Ramasekar, James Munnelly

YouTube video by CNCF [Cloud Native Computing Foundation]

youtube.com

Want to learn how to write and publish a kubectl plugin? It turns out it's actually super easy, and @aurelievache.bsky.social and @aurelievache.bsky.social teach us how on this fun #KubeCon talk! ✨

Create & Distribute a Plugin for Kubernetes (Kubectl) in Few Minutes?... Aurélie Vache & Gaëlle Acas

YouTube video by CNCF [Cloud Native Computing Foundation]

youtube.com

"If you start out with a complex architecture it's going to lead to complex solutions" 💡 We technologists like to "solve" complexity with more complexity, but sometimes it's important to take a step back and think if it's worth it. Do you really need that microservice architecture? #KubeCon

What Istio Got Wrong: Learnings from the Last Seven Years of Service... Christian Posta & Louis Ryan

YouTube video by CNCF [Cloud Native Computing Foundation]

youtube.com

This is one #KubeCon talk to watch if you want to know where Argo CD is going 🦑 It showcases the upcoming Hydrator and Promotion features of Argo CD, which will might solve a lot of confusing challenges around promoting between environments using auto-generated PRs. Great job!

Space Age GitOps: Lifting off with Argo Promotions (Live Demo!) - Michael Crenshaw & Zach Aller

YouTube video by CNCF [Cloud Native Computing Foundation]

youtube.com

Since the #KubeCon videos have started getting published, I'll post some of the videos I found interesting this weekend. Henrik Rexed compares some of the most common runtime security agents' flexibility, observability and performance. Insightful 🚓

What Agent to Trust with Your K8s: Falco, Tetragon or KubeArmor? - Henrik Rexed, Dynatrace

YouTube video by CNCF [Cloud Native Computing Foundation]

youtube.com

I have to break my silence. When is Pepper's movie coming to the box office, @joegran.bsky.social?

So many cool KubeCon NA talks are already up! 😍 If you got FOMO like me, this is the weekend to binge 📺

KubeCon + CloudNativeCon Salt Lake City 2024 - YouTube

The Cloud Native Computing Foundation’s flagship conference gathers adopters and technologists from leading open source and cloud native communities in Salt ...

youtube.com

I was discussing securing workloads 🔒 using Web Application Firewall (WAF) with a colleague and got around to discussing Coraza. Let's look at what Coraza is in this thread 🧵

OWASP Coraza WAF

OWASP Coraza is an open source, high performance, Web Application Firewall ready to protect your beloved applications.

coraza.io

ko is great. If you use golang it's one of those nice little tools that do exactly what you want and does it quite well. Compile, get multi-platform container images, generate SBOMs, all fast and easy 🏃‍♂️

GitHub - ko-build/ko: Build and deploy Go applications

Build and deploy Go applications. Contribute to ko-build/ko development by creating an account on GitHub.

github.com

The Kubernetes Podcast is now on BlueSky 👋. Follow us here to get notified when new episodes are published. We are also still on that other website under the handle kubernetespod@ 🙌 Also on youtube and LinkedIn www.youtube.com/@TheKubernet... www.linkedin.com/company/kube...

I wrote a little bit about how to do deployment updates without serving errors in #Kubernetes. Since I don't have a blog, I'll just skeet (Note: was posted elsewhere Aug'22) You have some pods, and maybe an load-balancer, too. You want to update the deployment. How to do this "best" in K8s today?

OpenCost advances to the CNCF Incubator OpenCost helps reduce cost overruns and gives teams a trusted model for budget planning, regardless of whether they use AWS, Google Cloud, Microsoft Azure, or on-premises infrastructure. www.cncf.io/blog/2024/10...

OpenCost advances to the CNCF Incubator

Cross-posted on the OpenCost blog by Ajay Tripathy The OpenCost project proudly announces that we’ve reached CNCF Incubating status! This milestone in our journey underscores the significant…

cncf.io

For no particular reason or in relation to any ongoing events, did you know that the US has never been closer to implementing national popular vote? If just a few more states join they will all decide to give their EC votes to whoever wins the popular vote, effectively ending electoral college ✨

National Popular Vote Interstate Compact - Wikipedia

en.wikipedia.org

Kubernetes is now on BlueSky! Tune in here for news about the project, straight from the contributor community! This account is owned and managed by the Contributor Comms subproject of SIG ContribEx: github.com/kubernetes/c...

I’m wrapping up my #10tools list with a bit of a fun one! In this thread we’re going to be diving into some of the most interesting the kubectl plugins I use when developing in #CloudNative ✨ First you're going to want the tool called krew, it makes it suuuper easy to install kubectl plugins 🤌

GitHub - kubernetes-sigs/krew: 📦 Find and install kubectl plugins

📦 Find and install kubectl plugins. Contribute to kubernetes-sigs/krew development by creating an account on GitHub.

github.com

In this thread we’re going to be diving into Falco, one of the main Intrusion Detection systems for Kubernetes 🦅 You’ll hopefully learn why it’s essential to have a tool like this in your toolbox. This is #10tools that I find useful or interesting for doing #CloudNative 🤩

Falco

Runtime Security

falco.org

Let’s look at one of the most exciting releases in the application delivery space to happen this year 👀 In this thread we're diving into Kargo, the continuous promotion tool, often used in combination with Argo CD. This is #10tools that I find useful or interesting in #CloudNative 🌸

Operators to extend its API to know how to manage nearly anything as well as GitOps for true continuous deployments (CD). These have led to Kubernetes now being the standard foundation for building internal platforms for platform engineering teams jason-umiker.medium.com/kubernetes-c...

Kubernetes ClusterAPI + ArgoCD = easy end-to-end declarative GitOps for platform teams

TL;DR: Combining ClusterAPI with ArgoCD (both to finish bootstrapping the clusters as well as to manage the operator’s manifests) is a…

jason-umiker.medium.com