Understand Developer Pain First — Then Pick the Right Abstraction Layer for Kubernetes Platform with GitOps

Breaking apart monolithic continuous integration in our Kotlin monorepo

A powerful Kubernetes certification practice environment that provides a realistic exam-like experience for kubernetess exam preparation.

Kubernetes Spec Explorer

An Envoy-Powered, Kubernetes-Native API Gateway

Scheduling in Kubernetes is the process of binding pending pods to nodes, and is performed by a component of Kubernetes called kube-scheduler. The scheduler's decisions, whether or where a pod can or can not be scheduled, are guided by its configurable policy which comprises of set of rules, called predicates and priorities. The scheduler's decisions are influenced by its view of a Kubernetes cluster at that point of time when a new pod appears for scheduling. As Kubernetes clusters are very dynamic and their state changes over time, there may be desire to move already running pods to some other nodes for various reasons:

- Some nodes are under or over utilized.
- The original scheduling decision does not hold true any more, as taints or labels are added to or removed from nodes, pod/node affinity requirements are not satisfied any more.
- Some nodes failed and their pods moved to other nodes.
- New nodes are added to clusters.

Consequently, there might be several pods scheduled on less desired nodes in a cluster. Descheduler, based on its policy, finds pods that can be moved and evicts them. Please note, in current implementation, descheduler does not schedule replacement of evicted pods but relies on the default scheduler for that.

Kubelet CSR approver is a Kubernetes controller whose sole purpose is to auto-approve kubelet-serving Certificate Signing Request (CSR), provided these CSRs comply with a series of configurable, provider-specific, checks/verifications.

Murex is a shell, like bash / zsh / fish / etc however Murex supports improved features and an enhanced UX.

Dotter is a dotfile manager and templater.

I'm old enough to remember when Vagrant looked like a promised land where every development environment would look the same. Differences between language versions, as well as some unusual OS version differences, resulted in a few days of unproductive debugging of your development environment. I've had similar excitement when I started my first Docker Swarm (who uses that these days?!) - it felt revolutionary. Docker wasn't just a tool - it fundamentally changed how we thought about application development and deployment. Having a repeatable, separated environment from your local system was refreshing and looked like a superpower. It has become a must-have tool for every engineer. "Just Dockerize it" became my go-to solution for pretty much everything. Sure, architecture or defining a new Docker image could be a bit finicky at times, but hey, that's just how things worked. Is the persistent dockerd daemon eating upresources in the background with root privileges, just the price of doing business? I thought so.

Выступят спикеры:

→ Нинель Шницарь, аналитик по безопасной разработке ПО в ООО УЦСБ. Тема доклада: «Оценка процессов безопасной разработки программного обеспечения»

→ Наталья Билаш, SOC аналитик 1 линии в Softline (подразделение Infosecurity). Тема доклада: «Использование рекомендательных систем в решениях класса UEBA/UBA»

→ Денис Батранков, директор по развитию бизнеса в Гарда. Тема доклада: «От смартфона до телевизора: как ЦРУ ломает мир — уроки Vault 7»

→ Алексей Морозов, руководитель отдела в Тинькофф. Тема доклада: «Тыкаю кавычки больше 15 лет»

→ Анна Олейникова, директор по продуктовому развитию в Innostage. Тема доклада: «Технологии TDIR, усиленные RAG подходом для оптимизации расследования инцидентов»

→ Николай Фомин, Stream CTO в МТС Web Services. Тема доклада: «Есть ли безопасность в ИИ для IoT?»

→ Лука Сафонов, Генеральный директор ООО Киберполигон. Тема доклада: «cybercrAIme: новые угрозы»