Container Camp UK 2018
| title | author | length |
|---|---|---|
| Don’t be a fail whale, secure your containers | Sarah Young | 24m |
Covers container-specific threat modeling and concrete controls: follow the NIST container hardening note (~10 pages) and the CIS benchmark via Docker Bench… | ||
| Running Kubernetes in Production A Million Ways to Crash Your Cluster | Henning Jacobs | 27m |
Zalando runs 95 clusters on AWS and recounts concrete failures: a miswritten cronjob explodes pods and OOMs the API server so they enforce a 1,500 pod quota… | ||
| Pragmatic Pod Patterns: Leveraging sidecar containers in Kubernetes | James Relph | 27m |
Describes concrete pod patterns that move TLS, auth and logging out of app code into reusable sidecars so teams ship faster and safer. Uses nginx reverse proxy… | ||
| Container Images Considered Harmful | Aleksa Sarai | 28m |
Argues that tar-based OCI/Docker images cause wasted transfer and storage by forcing file-level or whole-layer copies when metadata or a single byte changes… | ||
| The Route To Rootless Containers | Claudia Beresford | 30m |
Describes adopting rootless containers for a large multi-tenant PaaS (Cloud Foundry), using runC and planned containerd rootless support, creating user… | ||
| In the beginning was the server | Matt Butcher | 34m |
Starts with a single shared Sun server in 1998, moves through VM images to Docker containers and Kubernetes, and argues containers speed builds and local runs… | ||
| Consuming cloud services with the Kubernetes Service Catalog | Neil Peterson | 34m |
Shows a concrete pipeline: installs Open Service Broker API via Kubernetes Service Catalog on Minikube, deploys the Azure service broker and uses svcat CLI… | ||
| Filesystem mounts in user namespaces | Christian Brauner | 29m |
Kernel 4.18 already allows mount FUSE from 4.18 by keeping filesystem code in userspace; the VFS now records superblock stores owning user namespace and adds a… | ||
| Istio: Weaving, Securing and Observing microservices | Lin Sun | 42m |
Istio wires microservices with Envoy sidecars that intercept traffic, Pilot pushes configs and Citadel issues certificates, Mixer splits into telemetry and… | ||
| nothing matches | ||