Duffie Cooley

@mauilion

Kubernetes @ VMware (ex Heptio, CoreOS) Opinions my own. Host @ &

San Francisco, CA
Vrijeme pridruživanja: srpanj 2008.

Tweetovi

Blokirali ste korisnika/cu @mauilion

Jeste li sigurni da želite vidjeti te tweetove? Time nećete deblokirati korisnika/cu @mauilion

  1. proslijedio/la je Tweet
    prije 5 sati

    Introducing "provision" module from - a community-led effort to give you: 🥳 Cheapest possible VM/host 🥳 With a public IP 🥳 Configured with cloud-init / user-data 🥳 Setup with a simple Golang CRUD API With 6 IaaS providers ready to go

    Poništi
  2. proslijedio/la je Tweet
    4. velj
    Poništi
  3. proslijedio/la je Tweet
    4. velj

    I'm excited to present at KubeCon + CloudNativeCon Europe 2020: "Dual Stack: The Next Station to IPv6" - Antonio Ojea Garcia, SUSE & Anish Ramasekar @AnishRamaseka, Microsoft

    Poništi
  4. proslijedio/la je Tweet

    Today we conclude that the network is, in fact, a distributed system. This means that each component of the network has a degree of independence and the complexity of them makes it difficult to understand the true state of the network. Watch:

    Poništi
  5. proslijedio/la je Tweet
    prije 21 sat

    One of the final nails in the coffin of CoreOS Container Linux announced on the mailing list today. EOL set for May 26, and docs frozen/deleted on Sept 1. Sigh.... Super glad has been, and will continue to carry the torch forward on this.

    Poništi
  6. 4. velj

    This is one of my favorite episodes so far! Such a great topic.

    Poništi
  7. proslijedio/la je Tweet

    I was copying some dependencies, from an old pom.xml into a new project, for somebody else to consume. I got a little nervous because the old project was OLD. $ snyk test (Fix some bad stuff) $ git commit -m "with confidence" Thanks

    Poništi
  8. proslijedio/la je Tweet
    3. velj
    Poništi
  9. proslijedio/la je Tweet
    3. velj

    Folks have been asking me questions about the CKA exam and I wanted to capture my experience: The biggest difference between this post and many others is a focus on experienced operators. /cc buddies

    Poništi
  10. proslijedio/la je Tweet
    2. velj

    Here are some of the people I mentioned during the my talk. They are all doing great work on kubernetes security.

    Poništi
  11. proslijedio/la je Tweet
    1. velj

    Always be learning.

    Poništi
  12. proslijedio/la je Tweet
    1. velj

    Please stop allowing “privileged: true” and “host*: true” we are all in this together Prevention: PSPs aren’t too shabby OPA has a high barrier to entry Gatekeeper needs love Detection: Falco needs love K8s (dynamic) audit needs love eBPF needs love Kernel mods can crash

    Poništi
  13. proslijedio/la je Tweet
    1. velj

    Going on in 10 minutes - I was able to add some last minute really cool examples of how to use to compliment - The CNCF has the coolest projects. See everyone either online, or in Brussels in a few minutes.

    Poništi
  14. 1. velj

    These are: Prow | Bazel ______________ Yaml | Bash

    Prikaži ovu nit
    Poništi
  15. 1. velj
    Poništi
  16. 1. velj
    Prikaži ovu nit
    Poništi
  17. proslijedio/la je Tweet
    12. srp 2019.

    Did you ever ask yourself if cgroups (containers, pods, whathaveyou) can impact the runtime? I did and here's what I learned... (thread) 👇

    Prikaži ovu nit
    Poništi
  18. proslijedio/la je Tweet
    30. sij

    The Docker/Kubernetes Security Practice Guide will be published soon. Covers UserNS, Rootless, SELinux, gVisor, Trivy, Dockle, Harbor, RBAC, Admission Webhook, Istio, SPIFFE, and whatever. Thanks to and for co-authoring this book with me!

    Poništi
  19. proslijedio/la je Tweet

    Me too! Come and learn about security 101 in what we intend to be a fun and info-packed tutorial with me and at

    Poništi
  20. proslijedio/la je Tweet

    Just heard about Kyverno () - yeah I've probably had my head under a rock. It looks like a really nice policy model for . Much easier to understand, program, & reason about than rego language used by OPA. I think we'll be hearing more about this.

    Prikaži ovu nit
    Poništi

Čini se da učitavanje traje već neko vrijeme.

Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.

    Možda bi vam se svidjelo i ovo:

    ·