In my lab, I run a number of different flavors of Kubernetes. Some of them I deploy via kubeadm. Others I have provisioned by VMware PKS. Some of these can access the outside world, while others are secured. Sometimes it is difficult to figure out the relationship…

SSH has some pretty gnarly issues when it comes to usability, operability, and security. The good news is this is all easy to fix. SSH is ubiquitous. It’s the de-facto solution for remote administration of *nix systems. SSH certificate authentication makes…

What's new in Kubernetes 1.16: Ephemeral containers for easy pod debugging, support for dual-stack network, new options for the scheduler and much more.

Lessons learned scaling Kubernetes cluster

A few chart tricks I wish I knew when I get started with K8S. They completely changed our infrastructure automation philosophy.

a script to run docker-compose.yml using podman. Contribute to containers/podman-compose development by creating an account on GitHub.

While Go is the language-of-choice in the cloud-native world, Python has a huge community and makes it really easy to extend Kubernetes in only a few lines of code.
This post is a follow-up to a talk

In August 2019, I have undergone the Certified Kubernetes Application Developer (CKAD) examination. I have scored an astonishing 97%! As a…

In this tutorial, we’ll learn how to set up a continuous delivery pipeline for Google Kubernetes using Semaphore CI/CD.

Learn the basics about Prow, how to set it up, integrate and monitor.

This tutorial walks you through the steps needed to set up a comprehensive CI/CD pipeline with Jenkins, Nexus and Kubernetes.

Follow these steps to make sure your containers are reliable, scalable, and trusted.

Istio 1.3 release announcement.

Kubernetes' Tim Hockin sits down with DevClass to talk about being always wrong and the day to day business of one of the most popular open source projects.

Aviv Sasson, a security researcher from the cloud division of Unit 42, has identified a critical vulnerability in a widespread cloud native registry called Harbor. The vulnerability allows attackers to take over Harbor registries by sending them a malicious…

New home of the DNSCrypt project, now implementing multiple protocols to improve DNS security. Download official DNSCrypt & DoH servers and clients here.

Agenda, Minutes, Presentations. Contribute to quicwg/wg-materials development by creating an account on GitHub.

mimic: Define your Deployments, Infrastructure and Configuration as a Go Code 🚀 - bwplotka/mimic