DevOps Paradox: KubeCon EU 2026 Review

OpenFGA: Relationship-Based Authorization at Scale: whitneylee.com/2026/03/31/openfga-relat...

Thunder episode thumbnail featuring Whitney Lee and Raghd Hamzeh. Large yellow text reads "OpenFGA" with subtitle "Relationship-Based Authorization at Scale". Whitney appears on the left laughing and pointing upward, wearing a denim jacket. Raghd appears on the right wearing glasses and a yellow shirt. A lightboard with authorization architecture diagrams is visible in the background. The Thunder logo appears in the top left corner.

Watch this 🌩️Thunder episode where Raghd Hamzeh explains relationship-based authorization... tell OpenFGA about relationships when they happen, and it already knows the answer at access time.

Watch now → youtu.be/HCniFFtEmwQ

🌩️ Thunder: How Confidential Containers Protect Your Kubernetes Workloads (Even From Your Cloud Provider)

Software Defined Interviews: Art Degrees, Sun Microsystems, and How Kubernetes Scales Contributions, with Josh Berkus

Datadog Illuminated: From Monolith to Microservices, Powered by LLMs, with Nick Isaacs

🌩️ Thunder: Athenz: Giving Services an Identity

Software Defined Interviews: Progressive Delivery, with Heidi Waterhouse

🌩️ Thunder: Kubernetes Custom Resources Explained (CRDs, Controllers, & Operators)

🌩️ Thunder: Cilium Explained: eBPF-Powered Kubernetes Networking

KubeCon North America: KubeHound: Identifying Attack Paths in Kubernetes Clusters at Scale

AI for the Rest of Us: How to Trust a Liar: Instrumenting AI Execution with OpenTelemetry

Software Defined Interviews: AI Doesn’t Fix Bad DevOps, with Nathen Harvey

SOPS is a CLI tool that encrypts and decrypts files. But can you use it declaratively?

@andyserver.com explains in this 🌩️ Thunder episode:
youtu.be/9jgKuHzaYpU

#SOPS #CLI #SecretsManagement #DevOps

GPG, AWS KMS, GCP KMS, Azure Key Vault — why learn four CLIs when one will do?

@andyserver.com explains how SOPS gives you one interface for all of them in this 🌩️ Thunder episode:
youtu.be/9jgKuHzaYpU

#SOPS #SecretsManagement #AWS #GCP #Azure #CloudSecurity

Helm or Kustomize? The real question is: how do you get secrets into either one safely?

@andyserver.com explains how SOPS integrates with both in this 🌩️ Thunder episode: youtu.be/9jgKuHzaYpU

#SOPS #GitOps #Helm #Kustomize #Kubernetes

Database credentials, SSH keys, Kubernetes secrets — how do you protect them all without juggling different tools?

@andyserver.com explains in this 🌩️ Thunder episode: youtu.be/9jgKuHzaYpU

#SOPS #SecretsManagement #Kubernetes #CloudSecurity

Thunder episode thumbnail featuring Andrew Block and Whitney Lee. Large yellow text reads "Managing Secrets in Configuration Files with SOPS". Andrew appears on the left in a headshot, Whitney on the right looking excited with hands near her face, wearing a plaid shirt. A lightboard with SOPS architecture diagrams is visible in the background. The Thunder logo appears in the top left corner.

In this episode of 🌩️ Thunder, @andyserver.com explains SOPS — a CLI tool that encrypts and decrypts files using GPG, AWS KMS, Azure Key Vault, or HashiCorp Vault. One interface, any backend. We also cover how SOPS fits into GitOps workflows.

Watch now →
youtu.be/9jgKuHzaYpU

Software Defined Interviews podcast graphic with hosts Whitney Lee (top left, laughing and clapping) and Michael Coté (top right, smiling, bearded, in a blue plaid shirt) above the show logo with stylized clouds. Below, guest Jason Hand smiles warmly, with longer silver hair and a tan jacket. An arrow points to text reading "with guest Jason Hand."

Jason Hand built a scheduling app because he was tired of giving his personal details to a corporation just to coordinate drinks with a buddy

Listen to the latest Software Defined Interviews podcast where we talk vibe coding, AI Tools Lab, & 10 years of DevRel →
softwaredefinedinterviews.com/115

`kubectl logs` works fine until you need to ship logs somewhere. Then you're configuring collectors, routing rules, credentials, RBAC permissions, and buffering strategies.

Peter Wilcsinszky explains what Logging Operator handles for you in this 🌩️ Thunder episode: youtu.be/NDsaw0hO0T8

Do you have a KubeCon proposal that didn't get accepted? The CFP for Cloud Native Rejekts Amsterdam is still open, until January 17!

Submit!!! ᕕ(ᐛ)ᕗ

sessionize.com/cloud-native...

What happens when one team's logging volume overwhelms everyone else's pipeline? How do you give teams autonomy without sacrificing stability?

Peter Wilcsinszky explains how Logging Operator's Flow and Output custom resources solve this in this 🌩️ Thunder episode:
youtu.be/NDsaw0hO0T8

Fluent Bit works, but what if you want more flexibility at the collector layer? What if you want to use OpenTelemetry Collector instead?

Peter Wilcsinszky explains how the new Telemetry Controller makes this possible in this 🌩️ Thunder episode:
youtu.be/NDsaw0hO0T8

#OpenTelemetry #LoggingOperator

What do you do when your legacy app writes logs to files instead of stdout? Or when you need Kubernetes event logs alongside container logs?

Peter Wilcsinszky explains in this 🌩️ Thunder episode:
youtu.be/NDsaw0hO0T8

#Kubernetes #LoggingOperator #Observability #CNCF #DevOps

Thunder episode thumbnail featuring Peter Wilcsinszky and Whitney Lee. Large yellow text reads "Logging Operator" with subtitle "Multi-Tenant Kubernetes Logging". A lightboard with Kubernetes logging architecture diagrams is visible in the background. Peter appears on the left, Whitney on the right smiling.

In this episode of 🌩️ Thunder, Peter Wilcsinszky, maintainer of Logging Operator, explains how the project's Flow and Output custom resources bring Kubernetes-native control to log routing.

Watch now →
youtu.be/NDsaw0hO0T8

#Kubernetes #LoggingOperator #Observability #FluentBit #CNCF #DevOps

During the holiday break I went on a waterfall tour of the Chattahoochie National Forest in North Georgia ♫ https://whitneylee.com/2026/01/07/070649.html

Fluent Bit was designed for tiny IoT devices with barely any memory. Why did cloud native teams running massive Kubernetes clusters adopt it instead?

@edsiper.bsky.social explains in this 🌩️ Thunder episode: youtu.be/t6RxvVGvM7Q

#FluentBit #IoT #Observability #CloudNative #CNCF #Kubernetes

Transformation, DevOps, Open Source, and Fast Food Operations, with Andrew Clay Shafer: whitneylee.com/2026/01/06/transformatio...

@cote.io

What happens when Fluent Bit's built-in functionality isn't enough for your use case? The plugin architecture lets you extend your pipeline with custom logic — including Lua scripts — right out of the box.

@edsiper.bsky.social explains in this 🌩️ Thunder episode: youtu.be/t6RxvVGvM7Q