TrueFullstaq

A few weeks ago I posted this homelab from an abandoned bar in Spain. At the time, Daniel Koopmans and I were working on Talos Linux on OpenNebula. This is what came out of it. We built an open-source implementation that lets operators deploy Talos Kubernetes clusters as native OneFlow services on OpenNebula Systems, using OneFlow and OneGate while keeping the Talos nodes themselves clean and immutable.. In our lab, a new cluster is up in roughly four minutes. The code is now on GitHub, and we wrote up how a customer request turned into the project. Repo + blog in the comments. Oh, and: want to see it in action? I’m bringing the homelab to Edgecase! #OpenNebula #TalosLinux #Kubernetes #OpenSource #EdgeComputing

One interesting thing about running Kubernetes at the edge is that it’s not just the technology that helps solve big challenges, some of the real benefits are less obvious than you might think. Over the past few years of cloud, cloud-native, and Kubernetes adoption, we’ve seen a massive tool sprawl. That’s led to invisible problems that many engineers and architects don’t directly feel, but they’re there. One of the biggest is the growing knowledge gap in the space, which creates both hidden costs and significant operational risk. Fortunately, as the ecosystem matures, the major decisions have largely been made, and we’re starting to see real standardization. The risk that once came from fragmentation and lack of expertise is slowly fading as more people gain a solid understanding of Kubernetes fundamentals. Now, one of the most exciting frontiers is Kubernetes at the edge. The common perception is that it adds unnecessary complexity to unpredictable environments, but as the ecosystem matures, that’s becoming less of an issue. In fact, I believe it’s quite the opposite: Kubernetes can reduce operational risk at the edge. Why? Because organizations can leverage the same skills and tooling their teams already have. Let’s be honest, who isn’t running Kubernetes these days? #kubernetes #edgecomputing #cloudnative #devops #cloud TrueFullstaq

Kubernetes didn’t just introduce more components and more complexity, it also increased the attack surface. We all know this. Logically, at least. But in practice? We often spend far more time pushing new features than pushing security patches. That’s something we need to get better at! Check out this snippet from my conversation with Marcel from Sysdig. We talk about what attackers actually look for in cloud-native environments, and why security can’t be an afterthought. Want to watch the full conversation? https://lnkd.in/eb5i3xSU #kubernetes #cloudnative #cloudsecurity #cybersecurity #devsecops #containersecurity #sysdig

If you're into Kubernetes, this is the one event to have on your radar this year! On September 24, Edgecase brings together the Dutch Kubernetes community in Gooiland, Hilversum for a full day of real production stories. I'll be there, along with Justin Garrison (Sidero Labs), Conor Sherman (Sysdig) and Rick Brouwer (Practice Lead Ops at DUO, KEDA Maintainer), and many more. Want in? Send me a message and I'll sort you out with a discount code. Register here: https://lnkd.in/egNGatcJ

Episode 2 of Gerrit Learns Cloud Native security just dropped!! Last week: why Kubernetes is a target, where platform teams lose visibility, and why prevention alone leaves gaps. I asked. Marcel from Sysdig answered. This week: Marcel walks me through a real attack chain from initial foothold to persistent compromise. I watch, ask questions and quickly realise that this is way more complex than I first thought. Full episode linked in the comments! #cloudnativesecurity #kubernetes #cloudsecurity TrueFullstaq

This week, we had a discussion about why Edgecase is actually important to us. This was my honest answer. It's not because it looks good on a slide, or because "every company needs a flagship event" these days. It's because Edgecase is where we get to show, not tell. We talk a lot about cloud native, about doing infrastructure the right way, about being a real partner instead of just another vendor. Edgecase is the one day a year where we actually prove that. Where engineers from across the community stand on stage, sharing what they're actually building. Where customers and partners can ask us the hard questions face-to-face. I've seen this event grow from something we were proud to pull off, to something the community actually looks forward to. That shift matters more to me than any of the numbers around it. So this year again, we're putting in the work. Bringing the right people together in Hilversum on September 24. More info: https://lnkd.in/gfYjty4y Want a little push to grab your ticket? Drop a comment below, and I'll send you a discount code myself.