I created a #Helm plugin for working with OCI based helm charts. Not being able to do simple things like `helm repo list` or `helm show values` for OCI based helm charts drove me crazy. #kubernetes #devops github.com/esnet/helm-oci
Kapil Agrawal
@netops2devops.net
Kubernetes platform Security Engineer by profession. Also a recovering network engineer. Open source exuberant. Fan of open standards. Spends way too much time in homelab
It’s just shocking to me how many IT veterans don’t know what @letsencrypt.bsky.social or #ACME or #certbot are 😵💫
My grandma's ISP provides her router with #IPv6 by default. Every device in her wireless network has a unique routable address. She doesn't even know or care about what IPv6 is. Let that sink in.
when you go to someone's house and they don't support IPv6 🤢🤢🤢
Is babysitting an AI agent going to be a real job title now?
I’ve spent over a decade mostly working in on-prem environment (with some public cloud) building private cloud using Openstack, Kubernetes. I’m now working on a project where I’m forced to use AWS and I am starting to resent their closed lock in ecosystem.
argghhh! Working with struct tags in #Go can be such a pain sometimes 😫 specially when frameworks decide to use their own custom tags for validation. VSCode does not autocomplete those damn struct tags! If someone has better ideas I am all ears.
I created a simple (and somewhat minimal) cookiecutter skeleton for #Go github.com/netops2devop...
GitHub - netops2devops/cookiecutter-golang: Simple cookiecutter template for Go projects
Simple cookiecutter template for Go projects. Contribute to netops2devops/cookiecutter-golang development by creating an account on GitHub.
github.com
Been writing #Go for a year now, I always questioned the validity of generics and wondered why they were so controversial. I have finally stumbled upon my first use case where using generics actually makes sense to maintain compile time type safety while reducing boilerplate. It finally clicked!
I spent MOST of my #kubecon talking to all the project maintainers, contributors at the project pavilion trying to learn about different CNCF projects, challenges they face etc. Here are the projects I feel most enthusiastic about for the next year 1. Cilium 2. Falco 3. Inspektor Gadget
Remind me again, who tf decided that templating out deeply nested YAML files was a wise idea? #HELLm
Case study: ESnet’s success with Cilium demonstrates that IPv6-only Kubernetes deployments are not only viable, but also work exceptionally well at government scale. This has provided a blueprint for other national laboratories facing similar mandates. Read more: www.cncf.io/case-studies...
ESnet (Energy Sciences Network)
ESnet, the data circulatory system for the U.S. Department of Energy faced high operational overhead from running individual VMs for a single containerized application with no unified observability…
cncf.io
What's been sitting in my Obsidian notes for over a year now, I finally took the time to put it up on my blog. I have a few more blog posts coming up as part of this series. #kubernetes #ipv6 #cilium netops2devops.net/series/kuber...
Kubernetes in IPv6 Only Networks
netops2devops.net
Really looking forward to this event! #kubernetes #cilium #ipv6 #kubecon
Join ESnet's Kapil Agrawal at #CiliumCon to hear how his team built an IPv6-first #Kubernetes environment using #Cilium for networking. Expect lessons learned on routing, scaling, and simplifying operations from deploying without IPv4. 🔗 colocatedeventsna2025.sched.com/event/28D0g/...
the new @golang.org 1.25.3 release does not seem to be available on MacOS via Homebrew yet? 🤔
I enjoyed reading the first few chapters in antonz.org/go-concurren... so much that I ended up purchasing the eBook 😁 It's just $10 which is a small token of appreciation for all that @antonz.org gives to the #go community for free! Plus now I get to solve all the exercises in the book. 😋
Gist of Go: Concurrency
Interactive book on concurrent programming with many exercises.
antonz.org
A couple of awesome resources which I came across as I was learning concurrency patterns in #go 1. Gist of Go by @antonz.org antonz.org/go-concurren... 2. Interactive guide to concurrency patterns by Richard Chukwu concurrency.rocks
Gist of Go: Concurrency
Interactive book on concurrent programming with many exercises.
antonz.org
Critical thinking, curiosity and the drive to go deeper into the stack to learn something in & out appears to be diminishing as engineers become more dependent on AI generated content. People who were once "engineers" are now becoming "operators"
For anyone using or interested in running @cilium.io as standalone NAT46x64Gateway I have updated my blog post for the latest cilium v1.18.x releases. netops2devops.net/posts/cilium...
Using Cilium as a standalone NAT46x64Gateway
netops2devops.net
I dig the new updates in #iTerm2 3.6.x with the in-terminal browser, new icons. Feels more modern.
📣 New Blog Post Apparently, there are a few gotcha's when trying to checkpoint a running pod in #k3s which I learnt the hard way. I documented my findings in the blog post. #criu #kubernetes #forensics netops2devops.net/posts/checkp...
Container Checkpointing in K3s for Forensics
netops2devops.net
Whoever created #hubble for @cilium.io @isovalent.bsky.social should be given a gold medal. You have my utmost respect 🫡 Debugging Kubernetes networking issues has never been this easy.
The schedule for #CiliumCon is live! It features talks and end user stories on IPv6, #Cilium Mesh, DNS in #eBPF from companies like Microsoft, SeatGeek, ESnet, and more. Register now and join the community Nov 10 in Atlanta during #KubeCon NA: colocatedeventsna2025.sched.com/overview/typ...
CiliumCon schedule is out now From IPv6 only at ESNet to parsing DNS in eBPF at Microsoft to combining Cilium, Hubble, and Tetragon at Google to getting a service mesh into production in 90 days at SeatGeek colocatedeventsna2025.sched.com/overview/typ...
CiliumCon Schedule
colocatedeventsna2025.sched.com
After struggling with embedding Rego inside YAML on top of having to write constraint template, then a constraint file just to create 1 basic admission policy, I am switching teams from #Gatekeeper to #Kyverno and as it turns out ..
The nano textured display with a slight matte finish on the new MacBook Pro laptops is just 🔥 Totally worth the $$$