KubeFM
KubeFM
Discover all the great things happening in the world of Kubernetes, learn (controversial) opinions from the experts and explore the successes (and failures) of running Kubernetes at scale.
Episodes
Mentioned books
Sep 3, 2024 • 43min
The basics of observing Kubernetes: a bird-watcher's perspective, with Miguel Luna
Miguel Luna, an expert in Observability within Kubernetes, shares his insights on key components like metrics, logs, and traces. He delves into essential tools such as OpenTelemetry and discusses the transformative role of AI in monitoring systems. Listeners will learn about practical steps for implementing observability, improving alert management, and the importance of clear communication among teams. Miguel also emphasizes visual thinking as a powerful tool for navigating complex technical documentation, making observability more accessible.
Aug 27, 2024 • 31min
Abusing Distroless containers: shell commands on shell-less containers, with Harsha Koushik
In this KubeFM episode, Harsha explores the intricacies of Kubernetes security, focusing on the benefits and misconceptions of Distroless container images and the broader aspects of container security.You will learn:The advantages and limitations of Distroless container images: understand why these images are smaller, have a reduced attack surface and are not inherently secure.Best practices for container security: gain insights into selecting base images, managing dependencies, and fortifying your infrastructure at every layer.Supply chain security: explore how the supply chain can be an attack vector and the importance of signing artifacts and validating sources.Emerging Kubernetes tools and future projects: discover the latest tools Harsha is monitoring and get a sneak peek into his upcoming projects, including a new podcast and a tool for simulating multistage attacks in cloud-native environments.SponsorThis episode is sponsored by LearnKube — estimate the perfect cluster node with the Kubernetes Instance CalculatorMore infoFind all the links and info for this episode here: https://ku.bz/n_sJ04xMYInterested in sponsoring an episode? Learn more.
Jun 18, 2024 • 51min
The ticking supply chain attack bomb of exposed Kubernetes secrets, with Assaf Morag and Yakir Kadkoda
In this KubeFM episode, Yakir and Assaf from Aqua Security explore how a robust Kubernetes secrets strategy is necessary to prevent leaks and maintain a strong security posture.You will learn:How Kubernetes secrets are leaked, and what tools can you use to prevent that (Hint: Yakir and Assaf suggested using more than one.)How shadow IT is a more significant threat you might think and why companies should monitor personal Github repositories.What happens when a secret is leaked and how attackers exploit your resources (or further gain access to more).SponsorThis episode is sponsored by Isovalent — watch the top Kubernetes security use cases that Tetragon and eBPF cover for platform teamsMore infoFind all the links and info for this episode here: https://ku.bz/5RKVBGlQRInterested in sponsoring an episode? Learn more.
Jun 11, 2024 • 48min
From 0 to 10k builds a week with self-hosted Jenkins on Kubernetes, with Stéphane Goetz
In this KubeFM episode, Stéphane shares his journey of migrating, optimizing and scaling Jenkins in Kubernetes.He discusses the technical challenges, solutions, and strategies employed.You will learn:How Jenkins on Kubernetes was scaled to handle 10,000 weekly builds.How they started their journey in 2015 and how the cluster has evolved in the past nine years.The challenges of managing builds in Jenkins: Docker in Docker, Docker out of Docker and KubeVirt.The lessons learned in created ephemeral environments.SponsorThis episode is sponsored by CloudBees — learn how to use Kubernetes pods as Jenkins agentsMore infoFind all the links and info for this episode here: https://ku.bz/Rg42-LLvQInterested in sponsoring an episode? Learn more.