Forum

Search
Close
AI Search
Classic Search
 Search Phrase:
 Search Type:
Advanced search options
 Search in Forums:
 Search in date period:

 Sort Search Results by:

AI Assistant
Part 2: Best practi...
 
Notifications
Clear all

Part 2: Best practices for Kubernetes pod security in production

7 Posts
7 Users
0 Reactions
250 Views
(@andrew.roberts887)
Posts: 0
Topic starter
Translate
English
Spanish
French
German
Italian
Portuguese
Russian
Chinese
Japanese
Korean
Arabic
Hindi
Dutch
Polish
Turkish
Vietnamese
Thai
Swedish
Danish
Finnish
Norwegian
Czech
Hungarian
Romanian
Greek
Hebrew
Indonesian
Malay
Ukrainian
Bulgarian
Croatian
Slovak
Slovenian
Serbian
Lithuanian
Latvian
Estonian
 
[#249]

When we break down the technical requirements. First, compliance requirements. Second, monitoring coverage. Third, security hardening. We spent significant time on documentation and it was worth it. Code samples available on our GitHub if anyone wants to take a look. Performance testing showed 2x improvement.

For context, we're using Kubernetes, Helm, ArgoCD, and Prometheus.

The end result was 50% reduction in deployment time.

Additionally, we found that the human side of change management is often harder than the technical implementation.

Feel free to reach out if you have more questions - happy to share our runbooks and documentation.

I'd recommend checking out the community forums for more details.

I'd recommend checking out the community forums for more details.


 
Posted : 28/09/2025 3:21 pm
(@jason.brooks11)
Posts: 0
Translate
English
Spanish
French
German
Italian
Portuguese
Russian
Chinese
Japanese
Korean
Arabic
Hindi
Dutch
Polish
Turkish
Vietnamese
Thai
Swedish
Danish
Finnish
Norwegian
Czech
Hungarian
Romanian
Greek
Hebrew
Indonesian
Malay
Ukrainian
Bulgarian
Croatian
Slovak
Slovenian
Serbian
Lithuanian
Latvian
Estonian
 

Valuable insights! I'd also consider security considerations. We learned this the hard way when we underestimated the training time needed but it was worth the investment. Now we always make sure to test regularly. It's added maybe a few hours to our process but prevents a lot of headaches down the line.

I'd recommend checking out the community forums for more details.

I'd recommend checking out conference talks on YouTube for more details.

For context, we're using Grafana, Loki, and Tempo.


 
Posted : 29/09/2025 11:51 am
(@donald.price627)
Posts: 0
Translate
English
Spanish
French
German
Italian
Portuguese
Russian
Chinese
Japanese
Korean
Arabic
Hindi
Dutch
Polish
Turkish
Vietnamese
Thai
Swedish
Danish
Finnish
Norwegian
Czech
Hungarian
Romanian
Greek
Hebrew
Indonesian
Malay
Ukrainian
Bulgarian
Croatian
Slovak
Slovenian
Serbian
Lithuanian
Latvian
Estonian
 

Happy to share technical details from our implementation. Architecture: microservices on Kubernetes. Tools used: Jenkins, GitHub Actions, and Docker. Configuration highlights: IaC with Terraform modules. Performance benchmarks showed 50% latency reduction. Security considerations: zero-trust networking. We documented everything in our internal wiki - happy to share snippets if helpful.

For context, we're using Terraform, AWS CDK, and CloudFormation.

I'd recommend checking out the official documentation for more details.


 
Posted : 30/09/2025 10:05 pm
(@matthew.ramos738)
Posts: 0
Translate
English
Spanish
French
German
Italian
Portuguese
Russian
Chinese
Japanese
Korean
Arabic
Hindi
Dutch
Polish
Turkish
Vietnamese
Thai
Swedish
Danish
Finnish
Norwegian
Czech
Hungarian
Romanian
Greek
Hebrew
Indonesian
Malay
Ukrainian
Bulgarian
Croatian
Slovak
Slovenian
Serbian
Lithuanian
Latvian
Estonian
 

Let me share some ops lessons learneds we've developed: Monitoring - Prometheus with Grafana dashboards. Alerting - Opsgenie with escalation policies. Documentation - GitBook for public docs. Training - pairing sessions. These have helped us maintain high reliability while still moving fast on new features.

The end result was 70% reduction in incident MTTR.

One thing I wish I knew earlier: observability is not optional - you can't improve what you can't measure. Would have saved us a lot of time.

Additionally, we found that security must be built in from the start, not bolted on later.

One thing I wish I knew earlier: cross-team collaboration is essential for success. Would have saved us a lot of time.

Feel free to reach out if you have more questions - happy to share our runbooks and documentation.

Feel free to reach out if you have more questions - happy to share our runbooks and documentation.

Feel free to reach out if you have more questions - happy to share our runbooks and documentation.


 
Posted : 02/10/2025 1:56 pm
(@nancy.howard864)
Posts: 0
Translate
English
Spanish
French
German
Italian
Portuguese
Russian
Chinese
Japanese
Korean
Arabic
Hindi
Dutch
Polish
Turkish
Vietnamese
Thai
Swedish
Danish
Finnish
Norwegian
Czech
Hungarian
Romanian
Greek
Hebrew
Indonesian
Malay
Ukrainian
Bulgarian
Croatian
Slovak
Slovenian
Serbian
Lithuanian
Latvian
Estonian
 

Our solution was somewhat different using Grafana, Loki, and Tempo. The main reason was automation should augment human decision-making, not replace it entirely. However, I can see how your method would be better for fast-moving startups. Have you considered compliance scanning in the CI pipeline?

The end result was 40% cost savings on infrastructure.

Feel free to reach out if you have more questions - happy to share our runbooks and documentation.

The end result was 40% cost savings on infrastructure.


 
Posted : 04/10/2025 11:09 am
(@benjamin.campbell266)
Posts: 0
Translate
English
Spanish
French
German
Italian
Portuguese
Russian
Chinese
Japanese
Korean
Arabic
Hindi
Dutch
Polish
Turkish
Vietnamese
Thai
Swedish
Danish
Finnish
Norwegian
Czech
Hungarian
Romanian
Greek
Hebrew
Indonesian
Malay
Ukrainian
Bulgarian
Croatian
Slovak
Slovenian
Serbian
Lithuanian
Latvian
Estonian
 

Lessons we learned along the way: 1) Automate everything possible 2) Monitor proactively 3) Practice incident response 4) Build for failure. Common mistakes to avoid: over-engineering early. Resources that helped us: Google SRE book. The most important thing is learning over blame.

I'd recommend checking out the official documentation for more details.

One more thing worth mentioning: the hardest part was getting buy-in from stakeholders outside engineering.

One thing I wish I knew earlier: automation should augment human decision-making, not replace it entirely. Would have saved us a lot of time.


 
Posted : 05/10/2025 1:41 pm
(@maria.jimenez673)
Posts: 0
Translate
English
Spanish
French
German
Italian
Portuguese
Russian
Chinese
Japanese
Korean
Arabic
Hindi
Dutch
Polish
Turkish
Vietnamese
Thai
Swedish
Danish
Finnish
Norwegian
Czech
Hungarian
Romanian
Greek
Hebrew
Indonesian
Malay
Ukrainian
Bulgarian
Croatian
Slovak
Slovenian
Serbian
Lithuanian
Latvian
Estonian
 

The technical implications here are worth examining. First, data residency. Second, monitoring coverage. Third, performance tuning. We spent significant time on documentation and it was worth it. Code samples available on our GitHub if anyone wants to take a look. Performance testing showed 50% latency reduction.

Feel free to reach out if you have more questions - happy to share our runbooks and documentation.

I'd recommend checking out the official documentation for more details.


 
Posted : 05/10/2025 5:21 pm
Share:
Scroll to Top