Kubernetes, Metadata and You [I]

on YouTube ↗37m

" summary

Explains how Kubernetes labels, annotations, ConfigMaps and the Downward API are used alongside image labels/OCI annotations to carry actionable metadata; shows manifesto stored metadata in the registry and a Twilio-backed alert demo that updates a support contact without redeploying (the page fires successfully). Converts Aqua vulnerability scans into Grafeas notes/occurrences via manifesto to query affected image digests, and demos coop tests enforcing required labels so admission control and CI can block bad deployments.

AI-written summary · about

" chapters (11)

1. 0:00Intro
2. 4:42Filter objects with label selectors
3. 6:28Example annotations on Ingress
4. 8:04OCI Image Spec defines annotations
5. 15:27manifesto - storing image metadata
6. 20:18Modify metadata without changing deployed code
7. 20:59grafeas - storing & querying software metadata
8. 22:38Demo - vulnerability scan data stored in Graleas
9. 26:37Admission control pattern
10. 28:27Lumogon is a component part of Puppet Discovery
11. 32:41Tests enforcing a team label

" related talks

• 19mLabels, Labels, LabelsAndy Clemenko · DockerCon 2020
• 30mEstablishing Image Provenance and Security in Kubernetes - Adrian Mouat, Container SolutionsAdrian Mouat · KubeCon + CloudNativeCon Europe 2018
• 38mTutorial: Building Security into Kubernetes Deployment PipelinesMichael Hough, Sam Irvine · KubeCon + CloudNativeCon Europe 2019
• 45mKubernetes Operability ToolingBridget Kromhout, Brendan Burns · DevOpsDays Seattle 2019
• 36mHow to make Kubernetes rhyme with prod readiness - Tiffany Jernigan and Matthias HaeusslerMatthias Haeussler, Tiffany Jernigan · ContainerDays 2023
• 43mKubernetes: Use it, Contribute to it, and Enjoy it!Peter Zhao, Yuan Ji · KubeCon + CloudNativeCon China 2018
• 41mUnderstanding Kubernetes in a Visual WayAurélie Vache · Forum PHP 2025
• 34mContainer Vulnerability Management in KubernetesKevin Gimbel · ContainerDays Conference 2024