mastodon.world is one of the many independent Mastodon servers you can use to participate in the fediverse.
Generic Mastodon server for anyone to use.

Server stats:

8.5K
active users

#kubernetes

89 posts53 participants10 posts today

Architecting #VPN Connections in #Kubernetes (HA & Security)
"Treat VPN in Kubernetes as a critical production component — not a one-off config.

Design for HA from the start: active/active tunnels, BGP failover, zone-aware deployment.

Secure everything: TLS certs, access scopes, DNS hygiene, secrets encryption.

Monitor aggressively: latency, tunnel drops, disconnections, resource limits.

Automate consistently: Terraform, Helm, GitOps pipelines."
redsignals.beehiiv.com/p/archi.

Learn how to architect secure, high-availability VPN connections in Kubernetes using StrongSwan, WireGuard, AWS VPN Gateway, and more. Includes HA design, compliance, routing, CI/CD, and performance tuning.
Red SignalsArchitecting VPN Connections in Kubernetes (HA & Security)Learn how to architect secure, high-availability VPN connections in Kubernetes using StrongSwan, WireGuard, AWS VPN Gateway, and more. Includes HA design, compliance, routing, CI/CD, and performance tuning.

[Перевод] Как в Mercado Libre перевели внутреннюю платформу разработки на Kubernetes

Перевели третий материал из цикла статей о технологической трансформации Mercado Libre. Эта часть посвящена углубленному анализу технических и стратегических аспектов, лежащих в основе решения о переходе на Kubernetes. В ней анализируют рассмотренные альтернативы, сложности, возникшие в процессе внедрения, а также то, как принятые решения продолжают поддерживать мультиоблачную стратегию и операционную устойчивость.

habr.com/ru/companies/flant/ar

ХабрКак в Mercado Libre перевели внутреннюю платформу разработки на KubernetesОт переводчика : перед вами третий материал из цикла статей о технологической трансформации Mercado Libre.  Во второй части мы рассказали, как внутренняя платформа для разработчиков смогла...

Unlock the secrets of secure, high-availability VPNs in Kubernetes! 🚀 Dive into our latest guide on Red Signals to master VPN architectures using StrongSwan, WireGuard, AWS VPN Gateway, and more. Perfect for fintech, hybrid cloud, and beyond. Ensure compliance and seamless connectivity for your Kubernetes workloads. Read more: redsignals.beehiiv.com/p/archi #Kubernetes #VPN #CloudSecurity #DevOps #aws #DevOps #cloud #security

Learn how to architect secure, high-availability VPN connections in Kubernetes using StrongSwan, WireGuard, AWS VPN Gateway, and more. Includes HA design, compliance, routing, CI/CD, and performance tuning.
Red SignalsArchitecting VPN Connections in Kubernetes (HA & Security)Learn how to architect secure, high-availability VPN connections in Kubernetes using StrongSwan, WireGuard, AWS VPN Gateway, and more. Includes HA design, compliance, routing, CI/CD, and performance tuning.

🌗 eBPF:與容器運行時的連接
➤ 如何透過 CRI 介面讓 eBPF 工具與 Kubernetes 整合
h0x0er.github.io/blog/2025/06/
本文探討了eBPF專案如何透過容器運行時介面 (CRI) 與容器運行時 (CR) 建立連接,以便查詢 Pod 或容器資訊,以豐富上下文。文章分析了 Tetragon、Crictl 和 Tracee 三個開源 eBPF 專案的實作方式,說明瞭尋找 Unix socket 檔案、建立 gRPC 連接以及查詢資訊的步驟。這些專案會硬編碼預設的 socket 路徑,並在運行時迭代嘗試連接,以確保與 Kubernetes 的相容性。
+ 這篇文章解釋了 eBPF 如何與 Kubernetes 互動,對想了解容器安全和監控的人來說很有幫助。
+ 瞭解不同專案如何處理 CRI 連接的細節,很有助於選擇適合自己需求的工具。
#容器技術 #eBPF #Kubernetes

h0x0er.github.ioeBPF: Connecting with Container Runtimes - Unnamed Memories

When will there be the first fully cloud native *Desktop* #Linux? I I want a full OS running inside #kubernetes
I would want to offload high AI and also common CPU tasks in a distributed way.
My OS would run in everybody's selfhosted #Talos or whatever cluster.
It would make handling (replaced) computers SO much easier.
I don't understand why no one isn't developing this already.
#helloworld

Replied in thread

@learnk8s Helm does what it set out to do quite well. I'm skeptical that v4 will be able to break free enough of the paradigm it's established to provide a novel enough solution to the challenges that have arisen since v2. #k8s #kubernetes