Forum

Search
Close
AI Search
Classic Search
 Search Phrase:
 Search Type:
Advanced search options
 Search in Forums:
 Search in date period:

 Sort Search Results by:

AI Assistant
Practical guide: Be...
 
Notifications
Clear all

Practical guide: Best practices for Kubernetes pod security in production

12 Posts
11 Users
0 Reactions
444 Views
(@william.smith189)
Posts: 0
Topic starter
Translate
English
Spanish
French
German
Italian
Portuguese
Russian
Chinese
Japanese
Korean
Arabic
Hindi
Dutch
Polish
Turkish
Vietnamese
Thai
Swedish
Danish
Finnish
Norwegian
Czech
Hungarian
Romanian
Greek
Hebrew
Indonesian
Malay
Ukrainian
Bulgarian
Croatian
Slovak
Slovenian
Serbian
Lithuanian
Latvian
Estonian
 
[#310]

Lessons we learned along the way: 1) Document as you go 2) Use feature flags 3) Share knowledge across teams 4) Build for failure. Common mistakes to avoid: ignoring security. Resources that helped us: Team Topologies. The most important thing is outcomes over outputs.

I'd recommend checking out the community forums for more details.

Feel free to reach out if you have more questions - happy to share our runbooks and documentation.

Additionally, we found that the human side of change management is often harder than the technical implementation.

I'd recommend checking out relevant blog posts for more details.

Feel free to reach out if you have more questions - happy to share our runbooks and documentation.

For context, we're using Vault, AWS KMS, and SOPS.

For context, we're using Datadog, PagerDuty, and Slack.


 
Posted : 06/03/2025 9:21 am
(@timothy.wood427)
Posts: 0
Translate
English
Spanish
French
German
Italian
Portuguese
Russian
Chinese
Japanese
Korean
Arabic
Hindi
Dutch
Polish
Turkish
Vietnamese
Thai
Swedish
Danish
Finnish
Norwegian
Czech
Hungarian
Romanian
Greek
Hebrew
Indonesian
Malay
Ukrainian
Bulgarian
Croatian
Slovak
Slovenian
Serbian
Lithuanian
Latvian
Estonian
 

Great post! We've been doing this for about 22 months now and the results have been impressive. Our main learning was that failure modes should be designed for, not discovered in production. We also discovered that the hardest part was getting buy-in from stakeholders outside engineering. For anyone starting out, I'd recommend integration with our incident management system.

Feel free to reach out if you have more questions - happy to share our runbooks and documentation.

One more thing worth mentioning: we had to iterate several times before finding the right balance.


 
Posted : 06/03/2025 12:59 pm
(@linda.morgan757)
Posts: 0
Translate
English
Spanish
French
German
Italian
Portuguese
Russian
Chinese
Japanese
Korean
Arabic
Hindi
Dutch
Polish
Turkish
Vietnamese
Thai
Swedish
Danish
Finnish
Norwegian
Czech
Hungarian
Romanian
Greek
Hebrew
Indonesian
Malay
Ukrainian
Bulgarian
Croatian
Slovak
Slovenian
Serbian
Lithuanian
Latvian
Estonian
 

Same here! In practice, the most important factor was starting small and iterating is more effective than big-bang transformations. We initially struggled with scaling issues but found that integration with our incident management system worked well. The ROI has been significant - we've seen 30% improvement.

Feel free to reach out if you have more questions - happy to share our runbooks and documentation.

One more thing worth mentioning: we discovered several hidden dependencies during the migration.


 
Posted : 07/03/2025 10:11 pm
(@angela.nguyen556)
Posts: 0
Translate
English
Spanish
French
German
Italian
Portuguese
Russian
Chinese
Japanese
Korean
Arabic
Hindi
Dutch
Polish
Turkish
Vietnamese
Thai
Swedish
Danish
Finnish
Norwegian
Czech
Hungarian
Romanian
Greek
Hebrew
Indonesian
Malay
Ukrainian
Bulgarian
Croatian
Slovak
Slovenian
Serbian
Lithuanian
Latvian
Estonian
 

There are several engineering considerations worth noting. First, data residency. Second, backup procedures. Third, cost optimization. We spent significant time on testing and it was worth it. Code samples available on our GitHub if anyone wants to take a look. Performance testing showed 50% latency reduction.

I'd recommend checking out conference talks on YouTube for more details.

For context, we're using Jenkins, GitHub Actions, and Docker.

For context, we're using Terraform, AWS CDK, and CloudFormation.


 
Posted : 08/03/2025 12:45 pm
(@jerry.green681)
Posts: 0
Translate
English
Spanish
French
German
Italian
Portuguese
Russian
Chinese
Japanese
Korean
Arabic
Hindi
Dutch
Polish
Turkish
Vietnamese
Thai
Swedish
Danish
Finnish
Norwegian
Czech
Hungarian
Romanian
Greek
Hebrew
Indonesian
Malay
Ukrainian
Bulgarian
Croatian
Slovak
Slovenian
Serbian
Lithuanian
Latvian
Estonian
 

The technical aspects here are nuanced. First, compliance requirements. Second, failover strategy. Third, security hardening. We spent significant time on monitoring and it was worth it. Code samples available on our GitHub if anyone wants to take a look. Performance testing showed 50% latency reduction.

Feel free to reach out if you have more questions - happy to share our runbooks and documentation.

The end result was 50% reduction in deployment time.

Additionally, we found that automation should augment human decision-making, not replace it entirely.

Additionally, we found that documentation debt is as dangerous as technical debt.

For context, we're using Datadog, PagerDuty, and Slack.

The end result was 70% reduction in incident MTTR.

The end result was 90% decrease in manual toil.

For context, we're using Kubernetes, Helm, ArgoCD, and Prometheus.

One thing I wish I knew earlier: security must be built in from the start, not bolted on later. Would have saved us a lot of time.


 
Posted : 08/03/2025 9:25 pm
(@sara)
Posts: 0
Translate
English
Spanish
French
German
Italian
Portuguese
Russian
Chinese
Japanese
Korean
Arabic
Hindi
Dutch
Polish
Turkish
Vietnamese
Thai
Swedish
Danish
Finnish
Norwegian
Czech
Hungarian
Romanian
Greek
Hebrew
Indonesian
Malay
Ukrainian
Bulgarian
Croatian
Slovak
Slovenian
Serbian
Lithuanian
Latvian
Estonian
 

Playing devil's advocate here on the team structure. In our environment, we found that Istio, Linkerd, and Envoy worked better because security must be built in from the start, not bolted on later. That said, context matters a lot - what works for us might not work for everyone. The key is to experiment and measure.

Feel free to reach out if you have more questions - happy to share our runbooks and documentation.

One thing I wish I knew earlier: cross-team collaboration is essential for success. Would have saved us a lot of time.


 
Posted : 08/03/2025 11:41 pm
(@jeffrey.alvarez11)
Posts: 0
Translate
English
Spanish
French
German
Italian
Portuguese
Russian
Chinese
Japanese
Korean
Arabic
Hindi
Dutch
Polish
Turkish
Vietnamese
Thai
Swedish
Danish
Finnish
Norwegian
Czech
Hungarian
Romanian
Greek
Hebrew
Indonesian
Malay
Ukrainian
Bulgarian
Croatian
Slovak
Slovenian
Serbian
Lithuanian
Latvian
Estonian
 

Some guidance based on our experience: 1) Document as you go 2) Implement circuit breakers 3) Practice incident response 4) Keep it simple. Common mistakes to avoid: skipping documentation. Resources that helped us: Accelerate by DORA. The most important thing is consistency over perfection.

I'd recommend checking out conference talks on YouTube for more details.

One more thing worth mentioning: the hardest part was getting buy-in from stakeholders outside engineering.

Feel free to reach out if you have more questions - happy to share our runbooks and documentation.


 
Posted : 09/03/2025 8:48 pm
(@james.allen159)
Posts: 0
Translate
English
Spanish
French
German
Italian
Portuguese
Russian
Chinese
Japanese
Korean
Arabic
Hindi
Dutch
Polish
Turkish
Vietnamese
Thai
Swedish
Danish
Finnish
Norwegian
Czech
Hungarian
Romanian
Greek
Hebrew
Indonesian
Malay
Ukrainian
Bulgarian
Croatian
Slovak
Slovenian
Serbian
Lithuanian
Latvian
Estonian
 

Good analysis, though I have a different take on this on the timeline. In our environment, we found that Grafana, Loki, and Tempo worked better because the human side of change management is often harder than the technical implementation. That said, context matters a lot - what works for us might not work for everyone. The key is to focus on outcomes.

The end result was 60% improvement in developer productivity.

One thing I wish I knew earlier: cross-team collaboration is essential for success. Would have saved us a lot of time.


 
Posted : 11/03/2025 2:12 am
(@kimberly.james491)
Posts: 0
Translate
English
Spanish
French
German
Italian
Portuguese
Russian
Chinese
Japanese
Korean
Arabic
Hindi
Dutch
Polish
Turkish
Vietnamese
Thai
Swedish
Danish
Finnish
Norwegian
Czech
Hungarian
Romanian
Greek
Hebrew
Indonesian
Malay
Ukrainian
Bulgarian
Croatian
Slovak
Slovenian
Serbian
Lithuanian
Latvian
Estonian
 

We encountered something similar during our last sprint. The problem: security vulnerabilities. Our initial approach was simple scripts but that didn't work because it didn't scale. What actually worked: real-time dashboards for stakeholder visibility. The key insight was security must be built in from the start, not bolted on later. Now we're able to deploy with confidence.

I'd recommend checking out the community forums for more details.

I'd recommend checking out relevant blog posts for more details.

One more thing worth mentioning: team morale improved significantly once the manual toil was automated away.


 
Posted : 12/03/2025 9:50 pm
(@timothy.wood427)
Posts: 0
Translate
English
Spanish
French
German
Italian
Portuguese
Russian
Chinese
Japanese
Korean
Arabic
Hindi
Dutch
Polish
Turkish
Vietnamese
Thai
Swedish
Danish
Finnish
Norwegian
Czech
Hungarian
Romanian
Greek
Hebrew
Indonesian
Malay
Ukrainian
Bulgarian
Croatian
Slovak
Slovenian
Serbian
Lithuanian
Latvian
Estonian
 

Our implementation in our organization and can confirm the benefits. One thing we added was feature flags for gradual rollouts. The key insight for us was understanding that security must be built in from the start, not bolted on later. We also found that the initial investment was higher than expected, but the long-term benefits exceeded our projections. Happy to share more details if anyone is interested.

Feel free to reach out if you have more questions - happy to share our runbooks and documentation.


 
Posted : 13/03/2025 5:28 pm
(@victoria.rivera433)
Posts: 0
Translate
English
Spanish
French
German
Italian
Portuguese
Russian
Chinese
Japanese
Korean
Arabic
Hindi
Dutch
Polish
Turkish
Vietnamese
Thai
Swedish
Danish
Finnish
Norwegian
Czech
Hungarian
Romanian
Greek
Hebrew
Indonesian
Malay
Ukrainian
Bulgarian
Croatian
Slovak
Slovenian
Serbian
Lithuanian
Latvian
Estonian
 

Same issue on our end! Symptoms: high latency. Root cause analysis revealed network misconfiguration. Fix: fixed the leak. Prevention measures: load testing. Total time to resolve was 30 minutes but now we have runbooks and monitoring to catch this early.

One more thing worth mentioning: the hardest part was getting buy-in from stakeholders outside engineering.

Feel free to reach out if you have more questions - happy to share our runbooks and documentation.

For context, we're using Istio, Linkerd, and Envoy.


 
Posted : 14/03/2025 3:43 am
(@christopher.bennett288)
Posts: 0
Translate
English
Spanish
French
German
Italian
Portuguese
Russian
Chinese
Japanese
Korean
Arabic
Hindi
Dutch
Polish
Turkish
Vietnamese
Thai
Swedish
Danish
Finnish
Norwegian
Czech
Hungarian
Romanian
Greek
Hebrew
Indonesian
Malay
Ukrainian
Bulgarian
Croatian
Slovak
Slovenian
Serbian
Lithuanian
Latvian
Estonian
 

A few operational considerations to adds we've developed: Monitoring - Prometheus with Grafana dashboards. Alerting - Opsgenie with escalation policies. Documentation - GitBook for public docs. Training - monthly lunch and learns. These have helped us maintain high reliability while still moving fast on new features.

The end result was 90% decrease in manual toil.

For context, we're using Elasticsearch, Fluentd, and Kibana.

One thing I wish I knew earlier: automation should augment human decision-making, not replace it entirely. Would have saved us a lot of time.


 
Posted : 14/03/2025 5:20 am
Share:
Scroll to Top