Cool, send me a message on LinkedIn 👍

Want to know how it could be used in the Kubernetes ecosystem? Check out github.com/upbound/kube... on Github and my talks on the Cedar at Speakerdeck: speakerdeck.com/luxas

I gave a quote for the launch blog post as follows: “What I appreciate the most about Cedar is the deep knowledge that is encoded into why it works the way it works… the careful balance between expressiveness and analyzability.”

This feels very similar to when I first saw Kubernetes more than 10 years ago. A project with the potential to transform an entire industry, with creators that have been facing these problems for a long time, and with already many prior iterations experience is drawn from.

Cedar Joins CNCF as a Sandbox Project | Amazon Web Services Cedar, an open source authorization policy language and SDK, has joined the Cloud Native Computing Foundation (CNCF) as a Sandbox project. CNCF provides a neutral home for early stage and developing o...

Cedar Policy joins the CNCF! 🚀

The cloud native community can now rely on a fast, safe, expressive, analyzable and formally verified authorization library when implementing access control🔓

This is a game-changer for implementing ACLs both safely & quickly

aws.amazon.com/blogs/openso...

Sarah on stage

Community > Company; Distribution > Centralization; Improvement > Stagnation; Automation > process

In an open source community, things grow to look like the people that are most active. Ross Gardler

Sarah closing her talk.

Trust in open source communities: figuring out where humans connect (not just companies and tools.)

Whom do we trust? Trust requires context and judgement.💯

@sarahnovotny.com

#KCDRomandie

It was super fun visiting KCD Suisse Romande and CERN, and talking about Kubernetes Access Control! 😁

Thanks Ricardo Rocha and team for organizing and @bridgetkromhout.bsky.social for the pictures 🙌

🚀Crossplane is now a CNCF Graduated Project! 🎓

From an idea at @upbound.io to a global community shaping platform engineering.

💜 3,000+ contribs. 450+ orgs. 100M+ downloads
🔗 www.cncf.io/announcement...
#CNCF #Crossplane #Kubernetes #PlatformEngineering

Super excited to be speaking at KubeCon Atlanta about recent Kubernetes access control developments with @micahhausler.com 🥳🚀

Welcome to the Nordics! Make sure to check Finland out as well and let me know if you do 😁

GitHub - spiffe/k8s-spiffe-workload-auth-config Contribute to spiffe/k8s-spiffe-workload-auth-config development by creating an account on GitHub.

I spoke with a SPIFFE maintainer about something similar the other day. He prototyped an example of the token equivalent here github.com/spiffe/k8s-s...

I wrote in my thesis that it'd be fun to see how far retrofitting SPIFFE into k8s would go in practice.

Awesome!!

I'm super excited to organize KCD Helsinki today, with my fellow co-organizers 🔥

📈 300+ attendees from 14 countries gathering at the OP Headquarters
🤩 34 talks across 3 tracks from Finnish and international experts
💡 13+ hours of Kubernetes content

Let's go! See you there 🚀

Standing room only at the @crossplane.io v2 session #kubecon

It was a great talk!

Learning about the history of CEL in Kubernetes.

Did you know it was first introduced 10 releases ago!? 🤯

We are fans of CEL in Kubernetes mainly thanks to them making Validating and MutatingAdmissionPolicies possible to avoid those risky webhooks in our clusters!

#KubeCon #MaintainersSummit

Thanks @gregchase.bsky.social for this detailed thread about our talk! 🙌🤩

End to End Message Authenticity in Cloud Native Systems Cloud Native Rejekts Europe (London) 2025 OpenID Connect (OIDC) and mutual TLS are popular authentication mechanisms used widely in cloud native environments, and commonly as a basis for workload identity in SPIFFE. However, OIDC tokens are p...

If you’re at @rejekts.io in London, I’m speaking in an hour with @luxas.dev at 3:10pm on End to End message integrity in Cloud Native systems!

cfp.cloud-native.rejekts.io/cloud-native...

Super excited to be speaking at Cloud Native Rejekts 💯

We'll talk about "End to End Message Authenticity in Cloud Native Systems" with @micahhausler.com now 🙌

We'll cover how one can use the HTTP Message Signatures RFC 🔒

Awesome, looking forward to these! 🙌

Congrats, looking forward to it! 🙌

🎉Happy New Year, folks!

📜It's notifications day for those who've submitted to KubeCon. Hence, CFP for #Rejekts2025 London is now open!

♻️Recycle your rejekted KubeCon talks and submit by January 27, 00:00 GMT (final deadline): tinyurl.com/2bsjpupp

🫰🏾Best of luck!!

Cloud Native Day Oslo 2025: Call for Speakers CFP GUIDEPlease review the CNCF CFP Guide to answer many common questions before submitting.DATES TO REMEMBER:    CFP Opens: 1 October 2024    CFP Clo...

Didn’t get accepted to #KubeCon? Fear not! Last chance to submit to Cloud Native Day Oslo is today 🚀 It is going to be legendary! sessionize.com/cloud-native...

About us | Women4Cyber Finland Tutustu toimintaamme.

Sorry for the delay, haven't been active here for a while, but www.women4cyberfinland.com/aboutus would be my best bet

Congrats!! 🙌🙌

Bounce Their Evilness Right Back at 'em YouTube video by NCIS

Kubernetes apparently made it into an NCIS episode - DURING KubeCon. I guess theres any clear indicator that K8s has hit peek adoption, its that it gets used as techno-jargon to explain things in TV 🤣

Thanks @thisisnotapril.bsky.social for the find.

youtu.be/AzrHurE_PSI

Wow, nice 😂 maybe CNCF should put into the project graduation criteria that "✅ is part of popular culture" with this as the standard 😂

Hopefully yes! 🤞

KubeCon + CloudNativeCon Europe 2025: Call for Papers KubeCon + CloudNativeCon gathers adopters and technologists from leading open source and cloud native communities. Join our current graduated, incubat...

SURPRISE

The CFP for KubeCon EU is open for 3 MORE HOURS 😲

Closes at 11:59AM EST!!!

GOOOOOO SUBMIT!!!!

sessionize.com/kubecon-clou...

Awesome work from Marek and @madhavjivrajani.bsky.social making the k8s API server cache more efficient! 🔥😍

And I heard more improvements are coming! 📈