Have you ever had a seemingly innocuous change to one system affect another in a catastrophic way? If yes, you might notice a few familiar themes in this write-up. If no, then read it now, before it’s too late.

Challenging times call for creative responses and quick pivots. Learn how some organizations are rethinking innovation to thrive.

We ran a poll on Twitter

Written by Matt Ford — Lead Platform Engineer

We have all heard the term "digital transformation," and we often ask ourselves why many companies struggle to define it?

As new contributors came on board, we needed a way for them to build code against containerd on a Mac or Windows computer. Learn how Multipass fit the bill.

Bicep is a declarative language for describing and deploying Azure resources - Azure/bicep

⛵ A no-frills local development tool for service developers working in Kubernetes - GitHub - getoutreach/localizer: ⛵ A no-frills local development tool for service developers working in Kubernetes

Look up region and other information for any AWS IP address - sampointer/digaws

Why Linkerd doesn’t use Envoy In this article I’m going to describe why Linkerd isn’t built on Envoy.
This is a bit of a weird article to write. After all, there are a million projects that Linkerd doesn’t use, and none of those decisions deserve a blog post.…

psoIn 2021, Kubernetes adoption will skyrocket, security and DevSecOps will expand and cloud-native will transform the IT Core.

In this post we’re going to focus on the container scanning functionality available through the Snyk CLI, and how that can integrate with Podman and the new Podman API which landed in Podman 2.x and is available in Red Hat Enterprise Linux 8.3.

Topology Aware Routing of Services aims to solve an often overlooked issue with Kubernetes Services; that they are not region aware.

We try to hit all the problems that might occur in a production environment in order for the users and customers to be able to run their applications reliably on top of OpenShift.

By combining the ability to monitor persistent volumes and the availability to expand them, we can build preventive maintenance automation that will expand volumes when they are reaching capacity.

This post explains how to get started with Styra DAS for configuring Open Policy Agent (OPA) as the admission controller of Kubernetes clusters.

Without a policy engine on top of Kubernetes, the risk of a configuration error sneaking into production is high. Find out how you can mitigate these risks.

What is Service Discovery pattern? Server-side vs client-side Service Discovery. How Service Discovery works in Kubernetes. Short answer - kube-proxy rules.

In this post, we will explore how Kubernetes container isolation impacts privilege escalation attacks using common kernel exploitation techniques.

Author: Philippe Martin
Editor's note: Better API references have been my goal since I joined Kubernetes docs three and a half years ago. Philippe has succeeded fantastically. More than a better API reference, though, Philippe embodied the best of the Kubernetes…