KubeFM

This episode examines how a default configuration in Cilium CNI led to silent packet drops in production after 8 months of stable operations. Isala Piyarisi , Senior Software Engineer at WSO2 , shares how his team discovered that Cilium's default Pod CIDR (10.0.0.0/8) was conflicting with their Azure Firewall subnet assignments, causing traffic disruptions in their staging environment. You will le...

Managing microservices in Kubernetes at scale often leads to inconsistent deployments and maintenance overhead. This episode explores a practical solution that standardizes service deployments while maintaining team autonomy. Calin Florescu discusses how a unified Helm chart approach can help platform teams support multiple development teams efficiently while maintaining consistent standards acros...

Learn how ByteDance manages computing resources at scale with custom Kubernetes scheduling solutions that handle millions of pods across thousands of nodes. Yue Yin, Software Engineer at ByteDance, discusses their open-source Gödel scheduler and Katalyst resource management system. She explains how these tools address the challenges of managing online and offline workloads in large-scale Kubernete...

Platform Engineer Artem Lajko breaks down observability into three distinct layers and explains how tools like Prometheus , Grafana , and Falco serve different purposes. He also shares practical insights on implementing the right level of monitoring based on team requirements and capabilities. You will learn: How to implement the three-layer model ( external , internal , and OS-level ) and why eac...

In this episode, William Morgan , CEO of Buoyant , explores the complex trade-offs between cost optimization and reliability in Kubernetes networking. The discussion focuses on Topology-aware routing and why its implementation might not be the silver bullet for managing cross-zone traffic costs. William shares practical insights from real-world implementations and explains why understanding these...

Are you running PostgreSQL on Kubernetes and need to choose the right operator? In this episode, David Pech , Staff Cloud Ops Engineer, shares his experience implementing database platforms on Kubernetes and guides teams through operator selection and platform requirements. You will learn: The core requirements for a PostgreSQL platform on Kubernetes, including autopilot capabilities, security pra...

Stefan Roman shares his experience building Labs4Grabs , a platform that gives students root access to Kubernetes clusters. He discusses the journey from evaluating simple namespace-based isolation to implementing full VM-based isolation with KubeVirt. You will learn: Why namespace isolation isn't sufficient for untrusted users and the limitations of tools like vCluster when running privileged wor...

Michael Levan explains how specialized teams and smart abstractions can lead to better outcomes. Drawing from cognitive science and his experience in platform engineering, Michael presents practical strategies for building effective engineering organizations. You will learn: Why specialized teams (or "silos") can improve productivity and why the real enemy is ego, not specialization. How...

Xe Iaso shares their journey in building a "compute as a faucet" home lab where infrastructure becomes invisible and tasks can be executed without manual intervention. The discussion covers everything from operating system selection to storage architecture and secure access patterns. You will learn: How to evaluate operating systems for your home lab — from Rocky Linux to Talos Linux , a...

If you're trying to make sense of when to use Kubernetes and when to avoid it, this episode offers a practical perspective based on real-world experience running production workloads. Paul Butler , founder of Jamsocket , discusses how to identify necessary vs unnecessary complexity in Kubernetes and explains how his team successfully runs production workloads by being selective about which feature...

This episode explores Admission Controllers and Webhooks with Gordon Myers , who shares his experience implementing webhook solutions in production. Gordon explains the lifecycle of Kubernetes API requests and how webhooks can intercept and modify resources before they are stored in etcd . You will learn: How the Kubernetes API processes requests through authentication, authorization, and Admissio...

Are you facing challenges with pre-production environments in Kubernetes? This KubeFM episode shows how to implement efficient deployment previews and solve data seeding bottlenecks. Nick Nikitas , Senior Platform Engineer at Blueground , shares how his team transformed their static pre-production environments into dynamic previews using ArgoCD Application Sets, Wave and Velero. He explains their...

Discover how a seemingly simple 502 error in Kubernetes can uncover complex interactions between Go and containerized environments. Emin Laletović, a solution architect at Hybird Technologies, shares his experience debugging a production issue in which a specific API endpoint failed due to out-of-memory errors. He walks through the systematic investigation process, from initial log checks to uncov...

This episode offers a rare glimpse into the design decisions that shaped the world's most popular container orchestration platform. Brian Grant, CTO of ConfigHub and former tech lead on Google's Borg team discusses the Kubernetes Resource Model (KRM) and its profound impact on the Kubernetes ecosystem. He explains how KRM's resource-centric API patterns enable Kubernetes' flexibility and extensibi...

Dive into the world of GitOps and compare two of the most popular tools in the CNCF landscape : Argo CD and Flux CD . Andrei Kvapil , CEO and Founder of Aenix, breaks down the strengths and weaknesses of Argo CD and Flux CD , helping you understand which tool might best fit your team's needs. You will learn: The d ifferent philosophies behind the tools. How they handle access control and deploymen...

Eric Jalal, an independent consultant and Kubernetes developer, explains how Kubernetes is fundamentally built on familiar Linux features . He discusses why understanding Linux is crucial for working with Kubernetes and how this knowledge can simplify your approach to cloud-native technologies. You will learn: Why Eric considers Kubernetes to be "just Linux" and how it wraps existing Lin...

Alexandre Souza, a senior platform engineer at Getir, shares his expertise in managing large-scale environments and configuring requests, limits, and autoscaling. He explores the challenges of over-provisioning and under-provisioning and discusses strategies for optimizing resource allocation using tools like Horizontal Pod Autoscaler (HPA) and Vertical Pod Autoscaler (VPA) . You will learn: How t...

In this KubeFM episode, Kensei Kanada discusses Tortoise , an open-source project he developed at Mercari to tackle Kubernetes resource optimization challenges. He explains the limitations of existing solutions like Horizontal Pod Autoscaler (HPA) and Vertical Pod Autoscaler (VPA), and how Tortoise aims to provide a more comprehensive and automated approach to resource management in Kubernetes clu...

In this KubeFM episode, Ángel Barrera discusses Adidas' strategic shift to a GitOps-based container platform management system, initiated in May 2022, and its impact on their global infrastructure. You will learn: The initial state and challenges : Understand the complexities and inefficiencies of Adidas' pre-GitOps infrastructure. The transition process : Explore the steps and strategies used to...

In this KubeFM episode, Miguel Luna discusses the intricacies of Observability in Kubernetes, including its components, tools, and future trends. You will learn: The fundamental components of Observability : metrics, logs, and traces, and their roles in understanding system performance and health. Key tools and projects : insights into Keptn and OpenTelemetry and their significance in the Observab...

In this KubeFM episode, Harsha explores the intricacies of Kubernetes security, focusing on the benefits and misconceptions of Distroless container images and the broader aspects of container security. You will learn: The advantages and limitations of Distroless container images : understand why these images are smaller, have a reduced attack surface and are not inherently secure. Best practices f...

In this KubeFM episode, Yakir and Assaf from Aqua Security explore how a robust Kubernetes secrets strategy is necessary to prevent leaks and maintain a strong security posture. You will learn: How Kubernetes secrets are leaked, and what tools can you use to prevent that (Hint: Yakir and Assaf suggested using more than one.) How shadow IT is a more significant threat you might think and why compan...

In this KubeFM episode, Stéphane shares his journey of migrating, optimizing and scaling Jenkins in Kubernetes. He discusses the technical challenges, solutions, and strategies employed. You will learn: How Jenkins on Kubernetes was scaled to handle 10,000 weekly builds. How they started their journey in 2015 and how the cluster has evolved in the past nine years. The challenges of managing builds...

In this KubeFM episode, Hans, a Principal Cloud engineer, shares his experiences empowering teams to use, build and manage platforms built on Kubernetes. You will learn: How OpenTelemetry and Prometheus shape cluster management and observability. The role of tools like ArgoCD and Flux in enabling GitOps and streamlining deployment processes. The significance of governance tools such as Gatekeeper...

In this KubeFM episode, Hillai and Ronen, security researchers at Wiz, explore the intricacies of hacking Alibaba Cloud's Kubernetes cluster. They share their experiences and insights on identifying and exploiting vulnerabilities, mainly focusing on misconfigurations and their impact on cloud security. You will learn: How Hillai and Ronen gained access to a Kubernetes cluster through a Postgres da...