Talk Deep Dive

on YouTube ↗19m

" summary

Kubernetes often surprises because its architecture produces expected-but-different outcomes: nodePort bypasses network policy in some CNIs so external traffic can skip cluster-level rules, observed in test clusters and varying by overlay implementation; logs and events remain separated so operators must assemble logs from multiple sources to debug; PodSecurityPolicy spends years in beta then gets deprecated — PodSecurityPolicy deprecation — leaving users scrambling for replacements. Recommendations: test behavior against your CNI, document edge cases, and expect long, complex migrations.

AI-written summary · about

" chapters (4)

1. 0:00Start
2. 12:21Behavior of Network Policy
3. 16:06Favorite 80s Game of all Time
4. 16:25Galaga

" related talks

• 51mKubernetes SIG-Network: Intro and Deep-DiveBowei Du, Tim Hockin, Rich Renner · KubeCon + CloudNativeCon North America 2020 Virtual
• 01h 28mSIG-Network Intro & Deep-DiveTim Hockin, Vallery Lancey · KubeCon + CloudNativeCon North America 2019
• 46mKubernetes Policy WG Deep DiveZhipeng Huang · KubeCon + CloudNativeCon Europe 2018
• 46mContinuous Kubernetes SecurityAndrew Martin · OWASP AppSec Europe 2018
• 01h 28mIntro + Deep Dive: Kubernetes (Network) SIGTim Hockin · KubeCon + CloudNativeCon Europe 2019
• 48mThe Path Less Traveled: Abusing Kubernetes DefaultsDuffie Cooley, Ian Coldwater · Black Hat USA 2019
• 46mWhat I wish I knew about Kubernetes bef…Christian Alonso Chavez Ley, Mickaël Vaz · BDX I/O 2019
• 32mUnderstand and Troubleshoot the “Magic” of Kubernetes Networking - Minhan Xia & Rohit RamkumarMinhan Xia, Rohit Ramkumar · KubeCon + CloudNativeCon Europe 2018