We built a GKE platform - with only 2 engineers and lots of coffee YouTube video by Cloud Native Bergen

I had fun at Cloud Native Bergen this week, it keeps getting better each year! 🤩 Oh, and my talk just came out, have a look 😄

Was setting up my home lab today and was forced to connect it to a monitor with VGA. Immediately broke a nail on those horrible VGA screws. Now I remember why we used to hate those damn things!

Banning TikTok seems to be sparking quite a bit of class consciousness. Who knew a dance app could unite people like this? So much for stopping dangerous propaganda

A map of the world showing the US, UK, as well as some parts of south america, Africa and Australia using the short scale (billion) whereas the rest of the world uses the long scale (milliard)

Apparently whether you say billion or milliard for 1000 millions depends on where you live.And we can thank the US for popularising the short scale, which was never widespread before its adoption in USA. Thanks America.

Get ready for OpenTofu Beta 1.9.0 | OpenTofu Hey there, OpenTofu community! We've been working hard to refine the 1.9.0-alpha2 with your feedback! A few rough edges have been polished and a few new features have been added.

OpenTofu 1.9 beta is out. Lots of interesting new features like for_each support in provider configuration 👀

Big news: Kargo v1.1.0 is here! 🚀

With expression language support, better promotion steps, and a revamped UI, scaling GitOps just got easier. 💡

Discover what’s new 👉 https://bit.ly/4gaQDZk

#GitOps #Kubernetes #ContinuousDelivery #Kargo

The Rendered Manifests Pattern - Akuity Blog Deploy with Argo CD, promote seamlessly with Kargo, and gain real-time visibility into your infrastructure using KubeVision

Whatever you want to define what something is (HELM TEMPLATE, kcl run, timoni build -> "yaml") push the desire state in Git,

Let me Repeat, whichever format you are using. for "resource definition" but store desired state in git in "yaml"

More on Rendered manifests:
akuity.io/blog/the-ren...

Safeguarding Your Kubernetes Deployments with a PodDisruptionBudget In the ever-growing industry of containerized applications, continuous availability of critical applications and workloads is paramount…

Are you comfortable with PodDisruptionBudgets in Kubernetes? In any case this article is a nice refresher 💁‍♀️

There‘s three kinds of teams: Product teams, Platform teams, and Microsoft Teams - one builds products, one builds platforms, and one just builds confusion

Argo CD on easymode. Introducing "Apps Repositories" YouTube video by Cloud Native Bergen

Would you look at that. My talk on #ArgoCD is out 🥳

Check it out for some nice advanced ApplicationSet examples 👩‍🔬

Just reached 1000 awesome followers 😍

Thanks to @justingarrison.com for putting me in his Cloud Native starter pack, that made a world of difference! Starter packs are such an excellent idea that really sets Bluesky apart! 🦋

I'll keep making interesting and educational posts, feel free to follow 😇

Weird! Worked for me every time so far

Fun fact, your post on X would have fit within the Bluesky post length. Your actual post was less than 300 characters. Links can be added, then removed once the embed appears. The embed will stay around ☺️

If you are using Gateway API, have you tried out gwctl yet? It's a new CLI to help you use GW API 💁‍♀️

It can even generate charts of how your HTTPRoutes relate to your Gateways and GatewayClasses!

🔗 github.com/kubernetes-s...

There's loads of admission controllers in the Kubernetes documentation, and I would love to dive into them at some point. But for now, you can find them here 🙂

kubernetes.io/docs/referen...

Rogue No More: Securing Kubernetes with Node-Specific Restrictions - Anish Ramasekar, James Munnelly YouTube video by CNCF [Cloud Native Computing Foundation]

Have you heard about the NodeRestriction Admission Controller? It's an interesting security feature that disallows a kubelet (node) from modifying resources associated with another node 👀

It's not enabled by default, but can be useful for reducing the consequence of a node compromise 🥷 #KubeCon

Some projects may be useful even when not maintained, your secure gateway to remotely access all your clusters is probably not one of them 😄

Shame, it’s a niche area that really needs a product like this

Thanks for the reply, very enlightening! 💡

Vi sitter här i venten och spelar lite DotA 🎶

Oops, I accidentally I tagged you twice instead of @gaelleacas.bsky.social! My bad 😭 Loved the talk though, keep it up!!! 💙

Create & Distribute a Plugin for Kubernetes (Kubectl) in Few Minutes?... Aurélie Vache & Gaëlle Acas YouTube video by CNCF [Cloud Native Computing Foundation]

Want to learn how to write and publish a kubectl plugin? It turns out it's actually super easy, and @aurelievache.bsky.social and @aurelievache.bsky.social teach us how on this fun #KubeCon talk! ✨

What Istio Got Wrong: Learnings from the Last Seven Years of Service... Christian Posta & Louis Ryan YouTube video by CNCF [Cloud Native Computing Foundation]

"If you start out with a complex architecture it's going to lead to complex solutions" 💡

We technologists like to "solve" complexity with more complexity, but sometimes it's important to take a step back and think if it's worth it. Do you really need that microservice architecture? #KubeCon

It may be that we end up in a world where if you want a more full-featured UI for promotions you can go the Kargo route and deploy that.

Otherwise if you want fewer moving parts you can lean on this Argo Promotions feature instead, and stay within the Argo native ecosystem.

Time will tell!

One way I can see them working together is to have Argo CD do manifest hydration, then have Kargo do the promotion.

Really looking forward to the hydration feature, it will simplify many parts of the value chain as you can read the raw manifests without having to know about Helm and friends.

I wish they would touch on how this compares with kargo.io though. Is the promotions a replacement for Kargo? Could it synergise with Kargo?

To me it seems like they're trying to solve the same issue, so is what we're seeing Intuit and @akuity.io making competing solutions with forking visions?

Space Age GitOps: Lifting off with Argo Promotions (Live Demo!) - Michael Crenshaw & Zach Aller YouTube video by CNCF [Cloud Native Computing Foundation]

This is one #KubeCon talk to watch if you want to know where Argo CD is going 🦑

It showcases the upcoming Hydrator and Promotion features of Argo CD, which will might solve a lot of confusing challenges around promoting between environments using auto-generated PRs.

Great job!

Introducing Falco Talon v0.1.0 More than 7 years ago, frustrated by the lack of integrations between Falco and third parties, I created Falcosidekick. The tool evolved much more than expected, with the help of dozens of contributor...

It does feel like the talk skipped over Falco Talon though when it claimed Falco does not support reacting to events? Wonder if that would have tipped the scales 🧐

What Agent to Trust with Your K8s: Falco, Tetragon or KubeArmor? - Henrik Rexed, Dynatrace YouTube video by CNCF [Cloud Native Computing Foundation]

Since the #KubeCon videos have started getting published, I'll post some of the videos I found interesting this weekend.

Henrik Rexed compares some of the most common runtime security agents' flexibility, observability and performance. Insightful 🚓

Pepper the dog answering calls on his radio show

I have to break my silence. When is Pepper's movie coming to the box office, @joegran.bsky.social?

KubeCon + CloudNativeCon Salt Lake City 2024 - YouTube The Cloud Native Computing Foundation’s flagship conference gathers adopters and technologists from leading open source and cloud native communities in Salt ...

So many cool KubeCon NA talks are already up! 😍 If you got FOMO like me, this is the weekend to binge 📺