Author: zigmax
-
Understanding Kubernetes API Server Concurrency Controls
Read more: Understanding Kubernetes API Server Concurrency ControlsKubernetes API performance depends heavily on how the API server manages concurrent requests. Two important parameters control how many simultaneous operations the control plane can process: –max-requests-inflight and –max-mutating-requests-inflight. These flags define how…
-
What I Learned at fwd:cloudsec North America 2025
Read more: What I Learned at fwd:cloudsec North America 2025At the end of June, I had the chance to attend fwd:cloudsec North America 2025 in Denver, Colorado. For those unfamiliar, fwd:cloudsec is a community-driven, non-profit conference focused on cloud security research,…
-
Kubernetes 1.34: What’s New in Security
Read more: Kubernetes 1.34: What’s New in SecurityReleased on August 27, 2025 under the theme “Of Wind & Will (O’ WaW)”, Kubernetes v1.34 brings a strong security focus, reinforcing zero-trust principles, secure defaults, and identity-aware operations across the platform. Projected ServiceAccount Tokens for…
-
Behind the Scenes of Global Azure Quebec 2025: Organizing, Speaking, and Securing the Future of AI
Read more: Behind the Scenes of Global Azure Quebec 2025: Organizing, Speaking, and Securing the Future of AIThis year, I had the privilege of organizing Global Azure Quebec 2025 and it was without a doubt one of the most energizing, rewarding, and thought-provoking events I’ve ever been…
-
User Namespaces in Kubernetes: Perspectives on Isolation and Escape
Read more: User Namespaces in Kubernetes: Perspectives on Isolation and EscapeUser Namespaces in Kubernetes are designed to improve pod isolation by mapping container users to non-root UIDs on the host. While they offer a promising sandboxing mechanism, their security implications…
-
From Vision to Stage: My KubeCon Europe 2025 Experience in London, UK
Read more: From Vision to Stage: My KubeCon Europe 2025 Experience in London, UKJust over a year ago, I told my team that I wanted to speak at a future KubeCon. No roadmap. No CFP draft. Just a bold intention. Fast forward to…