From the moment of their inception as source code on the developer's laptop, our hero knows that they are destined for great things. They long to be a real, running application, living in production, serving end users! But the epic journey to production is an arduous one, filled with cascading choices - choices concerning app design, testing, security, container image building, deployment strategy, and observability, to name a few. And who knows what other unseen forces lurk in the shadows! One wrong step could be catastrophic.
It is up to us, the audience, to guide our hero; and to help them grow from source code to container image, to their final form as a running application in production. In this "Choose Your Own Adventure"-style journey, Whitney and Viktor will present a linear view of all of the choices that an anthropomorphized application must make as they try to find their way to the fabled land of production. Throughout the trek, the audience will vote to choose which path our hero application will take. Can we navigate CNCF projects and avoid pitfalls and dead-ends to get our application to production?
Join us if you dare! This is not for the faint of heart!
- Non-CNCF projects lead to a dead end ☠
The best place to start the adventure is the beginning. Perform the setup steps and, from there, start the first chapter by going to Build Container Image In Dev Environments. As an alternative, you can use graph below to navigate through the adventure.
Almost all items in the graphs contain a link if you prefer to jump straight into a specific part of the adventure. If you do so, please note that the steps work only if one start from the beginning of any of the chapters (e.g., Development, Production, etc.).
For reasons I cannot explain, the links do not work if they are not opened in a separate tab.
flowchart TD
subgraph "Legend"
red(Not yet implemented)
style red fill:red
blue{{Make a choice}}
style blue fill:blue
green(Chosen by viewers)
style green fill:green
end
flowchart TD
subgraph Development
%% -----------
%% -- Setup --
%% -----------
setup-dev((Setup))
click setup-dev "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/setup/dev.md"
%% -- Setup Connections --
setup-dev-->bci
%% ---------------------------
%% -- Build Container Image --
%% ---------------------------
bci{{Build Container Image}}
click bci "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/build-container-image/README.md"
style bci fill:blue
bci-kbld(Carvel kbld)
click bci-kbld "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/build-container-image/kbld.md"
bci-lima(Lima)
click bci-lima "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/build-container-image/lima.md"
bci-buildpacks(Cloud Native Buildpacks / CNB)
style bci-buildpacks fill:green
click bci-buildpacks "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/build-container-image/buildpacks.md"
%% -- Build Container Image Connections --
bci --> bci-kbld & bci-lima & bci-buildpacks --> registry
%% -----------------------------------------
%% -- Store Container Image in a Registry --
%% -----------------------------------------
registry{{Store Container Image In A Registry}}
click registry "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/registry/README.md"
style registry fill:blue
registry-docker-hub(Docker Hub)
click registry-docker-hub "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/registry/docker-hub.md"
registry-harbor(Harbor)
click registry-harbor "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/registry/harbor.md"
style registry-harbor fill:green
registry-dragonfly(Dragonfly)
click registry-dragonfly "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/registry/dragonfly.md"
registry --> registry-docker-hub & registry-harbor & registry-dragonfly --> ddd
%% --------------------------------------
%% -- Define And Deploy The App To Dev --
%% --------------------------------------
ddd{{Define And Deploy The App To Dev}}
click ddd "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/define-deploy-dev/README.md"
style ddd fill:blue
ddd-helm(Helm)
click ddd-helm "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/define-deploy-dev/helm.md"
ddd-kustomize(Kustomize)
click ddd-kustomize "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/define-deploy-dev/kustomize.md"
ddd-carvel(Carvel ytt)
click ddd-carvel "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/define-deploy-dev/carvel-ytt.md"
style ddd-carvel fill:green
ddd-cdk8s("CDK For Kubernetes (cdk8s)")
click ddd-cdk8s "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/define-deploy-dev/cdk8s.md"
ddd --> ddd-helm & ddd-kustomize & ddd-carvel & ddd-cdk8s --> https
%% ---------------
%% -- Use HTTPS --
%% ---------------
https{{Use HTTPS}}
click https "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/https/README.md"
style https fill:blue
https-cert-manager(cert-manager)
click https-cert-manager "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/https/cert-manager.md"
style https-cert-manager fill:green
https-cert-manager-helm(App as Helm)
click https-cert-manager-helm "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/https/cert-manager-helm.md"
https-cert-manager-kustomize(App as Kustomize)
click https-cert-manager-kustomize "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/https/cert-manager-kustomize.md"
https-cert-manager-carvel(App as Carvel ytt)
click https-cert-manager-kustomize "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/https/cert-manager-carvel.md"
style https-cert-manager-carvel fill:green
https-cert-manager-cdk8s(App as cdk8s)
click https-cert-manager-cdk8s "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/https/cert-manager-cdk8s.md"
https--> https-cert-manager--> https-cert-manager-helm & https-cert-manager-kustomize & https-cert-manager-carvel & https-cert-manager-cdk8s --> db
%% --------------------------------
%% -- Setup PostgreSQL DB In Dev --
%% --------------------------------
db{{Setup PostgreSQL DB In Dev}}
click db "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/db/README.md"
style db fill:blue
db-helm(Helm Chart)
click db-helm "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/db/helm.md"
db-helm-helm(App as Helm)
click db-helm-helm "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/db/helm-helm.md"
db-helm-kustomize(App as Kustomize)
click db-helm-kustomize "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/db/helm-kustomize.md"
db-helm-cdk8s(App as cdk8s)
click db-helm-cdk8s "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/db/helm-cdk8s.md"
db-helm-carvel(App as Carvel ytt)
click db-helm-carvel "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/db/helm-carvel.md"
db-crossplane-local(Crossplane Composition In Kubernetes)
click db-crossplane-local "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/db/crossplane-local.md"
db-crossplane-cloud(Crossplane Composition In Cloud)
click db-crossplane-cloud "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/db/crossplane-cloud.md"
style db-crossplane-cloud fill:green
db-crossplane-google(Google Cloud)
click db-crossplane-google "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/db/crossplane-google.md"
db-crossplane-aws(AWS)
click db-crossplane-aws "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/db/crossplane-aws.md"
style db-crossplane-aws fill:green
db-crossplane-azure(Azure)
click db-crossplane-azure "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/db/crossplane-azure.md"
db-crossplane-helm(App as Helm)
click db-crossplane-helm "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/db/crossplane-helm.md"
db-crossplane-carvel(App as Carvel ytt)
click db-crossplane-carvel "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/db/crossplane-carvel.md"
style db-crossplane-carvel fill:green
db-crossplane-kustomize(App as Kustomize)
click db-crossplane-kustomize "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/db/crossplane-kustomize.md"
db-crossplane-cdk8s(App as cdk8s)
click db-crossplane-cdk8s "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/db/crossplane-cdk8s.md"
db --> db-helm & db-crossplane-local & db-crossplane-cloud
db-helm --> db-helm-helm & db-helm-kustomize & db-helm-cdk8s & db-helm-carvel --> db-schema
db-crossplane-local --> db-crossplane-helm & db-crossplane-kustomize & db-crossplane-cdk8s & db-crossplane-carvel
db-crossplane-cloud --> db-crossplane-google & db-crossplane-aws & db-crossplane-azure --> db-crossplane-helm & db-crossplane-kustomize & db-crossplane-cdk8s & db-crossplane-carvel --> db-schema
%% ----------------------
%% -- Manage DB Schema --
%% ----------------------
db-schema{{Manage DB Schema}}
click db-schema "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/db-schema/README.md"
style db-schema fill:blue
db-schema-schemahero(SchemaHero)
click db-schema-schemahero "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/db-schema/schemahero.md"
style db-schema-schemahero fill:green
db-schema-liquibase(Liquibase)
click db-schema-liquibase "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/db-schema/liquibase.md"
db-schema-schemahero-helm(App as Helm)
click db-schema-schemahero-helm "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/db-schema/schemahero-helm.md"
db-schema-schemahero-kustomize(App as Kustomize)
click db-schema-schemahero-kustomize "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/db-schema/schemahero-kustomize.md"
db-schema-schemahero-cdk8s(App as cdk8s)
click db-schema-schemahero-cdk8s "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/db-schema/schemahero-cdk8s.md"
db-schema-schemahero-carvel(App as Carvel ytt)
click db-schema-schemahero-carvel "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/db-schema/schemahero-carvel.md"
style db-schema-schemahero-carvel fill:green
db-schema --> db-schema-liquibase & db-schema-schemahero
db-schema-schemahero --> db-schema-schemahero-helm & db-schema-schemahero-kustomize & db-schema-schemahero-cdk8s & db-schema-schemahero-carvel --> develop
%% ---------------------
%% -- Develop The App --
%% ---------------------
develop{{Develop The App}}
click develop "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/develop/README.md"
style develop fill:blue
develop-telepresence(Telepresence)
click develop-telepresence "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/develop/telepresence.md"
develop-devspace(DevSpace)
click develop-devspace "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/develop/devspace.md"
style develop-devspace fill:green
develop-nocalhost(Nocalhost)
click develop-nocalhost "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/develop/nocalhost.md"
develop-devspace-kustomize(App as Kustomize)
click develop-devspace-kustomize "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/develop/devspace-kustomize.md"
develop-devspace-cdk8s(App as cdk8s)
click develop-devspace-cdk8s "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/develop/devspace-cdk8s.md"
develop-devspace-helm(App as Helm)
click develop-devspace-helm "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/develop/devspace-helm.md"
develop-devspace-carvel(App as Carvel ytt)
click develop-devspace-carvel "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/develop/devspace-carvel.md"
style develop-devspace-carvel fill:green
develop-devfile(Devfile)
style develop-devfile fill:red
develop --> develop-telepresence & develop-devspace & develop-nocalhost & develop-devfile
develop-telepresence & develop-nocalhost & develop-devfile --> dev-done
develop-devspace --> develop-devspace-kustomize & develop-devspace-cdk8s & develop-devspace-helm & develop-devspace-carvel --> dev-done
dev-done((Chapter End))
end
flowchart TD
subgraph Production
%% -----------
%% -- Setup --
%% -----------
setup-prod((Setup))
click setup-prod "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/setup/prod.md"
%% -- Setup Connections --
setup-prod-->cluster
%% -------------
%% -- Cluster --
%% -------------
cluster{{Create a Cluster}}
click cluster "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/cluster/README.md"
style cluster fill:blue
cluster-crossplane(Crossplane)
click cluster-crossplane "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/cluster/crossplane.md"
style cluster-crossplane fill:green
cluster-crossplane-google(Google Cloud)
click cluster-crossplane-google "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/cluster/cluster-crossplane-google.md"
cluster-crossplane-aws(AWS)
click cluster-crossplane-aws "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/cluster/cluster-crossplane-aws.md"
style cluster-crossplane-aws fill:green
cluster-crossplane-azure(Azure)
click cluster-crossplane-azure "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/cluster/cluster-crossplane-azure.md"
cluster-cluster-api(Cluster API)
click cluster-cluster-api "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/cluster/cluster-api.md"
capi-google(Google Cloud)
click capi-google "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/cluster/capi-google.md"
capi-aws(AWS)
click capi-aws "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/cluster/capi-aws.md"
capi-azure(Azure)
click capi-azure "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/cluster/capi-azure.md"
cluster --> cluster-crossplane --> cluster-crossplane-google & cluster-crossplane-aws & cluster-crossplane-azure --> gitops
cluster --> cluster-cluster-api --> capi-google & capi-aws & capi-azure --> gitops
%% ------------
%% -- GitOps --
%% ------------
gitops{{GitOps}}
click gitops "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/gitops/README.md"
style gitops fill:blue
gitops-flux(Flux)
click gitops-flux "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/gitops/flux.md"
gitops-argocd(Argo CD)
click gitops-argocd "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/gitops/argocd.md"
style gitops-argocd fill:green
gitops-kapp(Carvel kapp-controller)
click gitops-kapp "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/gitops/kapp.md"
gitops --> gitops-flux & gitops-argocd & gitops-kapp --> ingress
%% -------------
%% -- Ingress --
%% -------------
ingress{{Ingress}}
click ingress "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/ingress/README.md"
style ingress fill:blue
ingress-contour(Contour With Envoy)
click ingress-contour "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/ingress/contour.md"
style ingress-contour fill:green
ingress-nginx(NGINX)
click ingress-nginx "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/ingress/nginx.md"
emissary-ingress(Emissary-ingress With Envoy)
click ingress-nginx "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/ingress/emissary-ingress.md"
ingress-argocd(GitOps With Argo CD)
click ingress-argocd "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/ingress/gitops-argocd.md"
style ingress-argocd fill:green
ingress-flux(GitOps Flux)
click ingress-flux "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/ingress/gitops-flux.md"
ingress-kapp(GitOps Carvel kapp-controller)
click ingress-kapp "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/ingress/gitops-kapp.md"
ingress-->ingress-contour & ingress-nginx & emissary-ingress --> ingress-argocd & ingress-flux & ingress-kapp --> app
%% ----------------------------------
%% -- Deploy The App To Production --
%% ----------------------------------
app{{Deploy The App To Production}}
click app "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/app/README.md"
style app fill:blue
app-helm(App As Helm)
click app-helm "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/app/helm.md"
app-kustomize(App As Kustomize)
click app-kustomize "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/app/kustomize.md"
app-cdk8s(App As cdk8s)
click app-cdk8s "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/app/cdk8s.md"
app-carvel(App As Carvel ytt)
click app-carvel "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/app/carvel.md"
style app-carvel fill:green
app --> app-helm & app-kustomize & app-cdk8s & app-carvel --> db-production
%% --------------
%% -- Database --
%% --------------
db-production{{Database}}
click db-production "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/db-production/README.md"
style db-production fill:blue
db-production-crossplane(Crossplane)
click db-production-crossplane "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/db-production/crossplane.md"
style db-production-crossplane fill:green
db-production-helm(App As Helm)
click db-production-helm "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/db-production/helm.md"
db-production-kustomize(App As Kustomize)
click db-production-kustomize "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/db-production/kustomize.md"
db-production-cdk8s(App As cdk8s)
click db-production-cdk8s "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/db-production/cdk8s.md"
db-production-carvel(App As Carvel ytt)
click db-production-carvel "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/db-production/carvel.md"
style db-production-carvel fill:green
db-production --> db-production-crossplane --> db-production-helm & db-production-kustomize & db-production-cdk8s & db-production-carvel --> prod-done
prod-done((Chapter End))
end
flowchart TD
subgraph Security
%% -----------
%% -- Setup --
%% -----------
setup-security((Setup))
click setup-security "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/setup/security.md"
%% -- Setup Connections --
setup-security-->policies
%% -----------------------------------
%% -- Admission Controller Policies --
%% -----------------------------------
policies{{Admission Controller Policies}}
style policies fill:blue
click policies "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/policies/README.md"
kyverno(Kyverno)
click kyverno "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/policies/kyverno.md"
style kyverno fill:green
policies-opa("Open Policy Agent (OPA) With Gatekeeper")
click policies-opa "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/policies/gatekeeper.md"
cloud-custodian(Cloud Custodian)
click cloud-custodian "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/policies/cloud-custodian.md"
cloud-custodian-helm(App as Helm)
click cloud-custodian-helm "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/policies/cloud-custodian-helm.md"
cloud-custodian-kustomize(App as Kustomize)
click cloud-custodian-kustomize "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/policies/cloud-custodian-kustomize.md"
cloud-custodian-cdk8s(App as cdk8s)
click cloud-custodian-cdk8s "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/policies/cloud-custodian-cdk8s.md"
cloud-custodian-carvel(App as Carvel ytt)
click cloud-custodian-carvel "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/policies/cloud-custodian-carvel.md"
kubewarden(Kubewarden)
click kubewarden "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/policies/kubewarden.md"
%% Wait with VAP until it's GA
vac(Kubernetes Validating Admission Policy)
style vac fill:red
policies-helm(App as Helm)
click policies-helm "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/policies/helm.md"
policies-kustomize(App as Kustomize)
click policies-kustomize "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/policies/kustomize.md"
policies-cdk8s(App as cdk8s)
click policies-cdk8s "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/policies/cdk8s.md"
policies-carvel(App as Carvel ytt)
style policies-carvel fill:green
click policies-carvel "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/policies/carvel.md"
policies --> kyverno & policies-opa & kubewarden & vac --> policies-helm & policies-kustomize & policies-cdk8s & policies-carvel --> runtime-policies
policies --> cloud-custodian --> cloud-custodian-helm & cloud-custodian-kustomize & cloud-custodian-cdk8s & cloud-custodian-carvel --> runtime-policies
%% ----------------------
%% -- Runtime Policies --
%% ----------------------
runtime-policies{{Runtime Policies}}
style runtime-policies fill:blue
click runtime-policies "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/runtime-policies/README.md"
kube-armor(KubeArmor)
click kube-armor "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/runtime-policies/kubearmor.md"
style kube-armor fill:green
falco(Falco)
click falco "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/runtime-policies/falco.md"
runtime-policies --> kube-armor & falco --> secrets
%% ------------------------
%% -- Secrets Management --
%% ------------------------
secrets{{Secrets Management In Kubernetes}}
click secrets "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/secrets/README.md"
style secrets fill:blue
eso("External Secrets Operator (ESO)")
click eso "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/secrets/eso.md"
style eso fill:green
sscsid("Secrets Store CSI Driver (SSCSID)")
click sscsid "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/secrets/sscsid.md"
secrets-google(Google Cloud)
click secrets-google "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/secrets/google.md"
secrets-aws(AWS)
click secrets-aws "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/secrets/aws.md"
style secrets-aws fill:green
secrets-azure(Azure)
click secrets-azure "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/secrets/azure.md"
secrets-helm(App as Helm)
click secrets-helm "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/secrets/helm.md"
secrets-kustomize(App as Kustomize)
click secrets-kustomize "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/secrets/kustomize.md"
secrets-cdk8s(App as cdk8s)
click secrets-cdk8s "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/secrets/cdk8s.md"
secrets-carvel(App as Carvel ytt)
click secrets-carvel "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/secrets/carvel.md"
style secrets-carvel fill:green
client-secrets{{Secrets Management Outside Kubernetes}}
click client-secrets "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/secrets/client.md"
style client-secrets fill:blue
teller(Teller)
click teller "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/secrets/teller.md"
teller-aws(AWS)
click teller-aws "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/secrets/teller-aws.md"
teller-azure(Azure)
click teller-azure "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/secrets/teller-azure.md"
teller-google(Google Cloud)
click teller-google "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/secrets/teller-google.md"
sops(SOPS)
style sops fill:red
secrets --> eso --> secrets-google & secrets-aws & secrets-azure --> secrets-helm & secrets-kustomize & secrets-cdk8s & secrets-carvel --> client-secrets
secrets --> sscsid
client-secrets --> teller --> teller-aws & teller-azure & teller-google --> mtls
client-secrets --> sops --> mtls
%% -------------------------------------
%% -- Mutual TLS And Network Policies --
%% -------------------------------------
mtls{{"Mutual TLS (mTLS) And Network Policies"}}
click mtls "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/mtls/README.md"
style mtls fill:blue
mtls-istio(Istio)
click mtls-istio "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/mtls/istio.md"
mtls-linkerd("LinkerD (SMI)")
click mtls-linkerd "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/mtls/linkerd.md"
mtls-cilium(Cilium)
click mtls-cilium "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/mtls/cilium.md"
style mtls-cilium fill:green
mtls-kuma(Kuma)
style mtls-kuma fill:red
mtls-network-service-mesh(Network Service Mesh)
style mtls-network-service-mesh fill:red
mtls --> mtls-istio & mtls-kuma & mtls-network-service-mesh & mtls-cilium & mtls-linkerd--> scanning
%% --------------
%% -- Scanning --
%% --------------
scanning{{Scanning}}
click signing "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/signing/README.md"
style scanning fill:blue
kubescape(Kubescape)
click kubescape "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/scanning/kubescape.md"
style kubescape fill:green
snyk(Snyk)
click snyk "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/scanning/snyk.md"
scanning --> kubescape & snyk --> signing
%% -------------
%% -- Signing --
%% -------------
signing{{Signing}}
click signing "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/signing/README.md"
style signing fill:blue
notary(Notary)
click notary "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/signing/notary.md"
style notary fill:green
sigstore(Sigstore)
opc(Open Policy Containers)
style opc fill:red
signing --> notary & sigstore & opc --> identity
%% -----------------------
%% -- Workload Identity --
%% -----------------------
identity{{Workload Identity}}
click identity "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/workload-identity/README.md"
style identity fill:blue
spire(SPIRE)
style spire fill:green
click spire "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/workload-identity/spire.md"
spire-istio(Istio)
style spire-istio fill:red
spire-linkerd(Linkerd)
style spire-linkerd fill:red
spire-nsm(Network Service Mesh)
style spire-nsm fill:red
spire-cilium(Cilium)
style spire-cilium fill:green
click spire-cilium "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/workload-identity/spire-cilium.md"
spire-kuma(Kuma)
style spire-kuma fill:red
athenz(Athenz)
style athenz fill:red
identity --> spire --> spire-istio & spire-linkerd & spire-nsm & spire-cilium & spire-kuma --> user-authentication
identity --> athenz --> user-authentication
%% ------------------------
%% -- User Authorization --
%% ------------------------
user-authentication{{User Authentication}}
click user-authentication "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/user-authentication/README.md"
style user-authentication fill:blue
dex(Dex)
style dex fill:red
keycloak(Keycloak)
style keycloak fill:green
click keycloak "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/user-authentication/keycloak.md"
user-authentication --> dex & keycloak --> access-authorization
%% --------------------------
%% -- Access Authorization --
%% --------------------------
access-authorization{{Access Control}}
click access-authorization "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/access/README.md"
style access-authorization fill:blue
hexa(Hexa)
style hexa fill:red
paralus(Paralus)
style paralus fill:red
openfga(OpenFGA)
click openfga "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/access/openfga.md"
style openfga fill:green
openfga-helm(App as Helm)
click openfga-helm "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/access/openfga-helm.md"
openfga-kustomize(App as Kustomize)
click openfga-kustomize "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/access/openfga-kustomize.md"
openfga-carvel(App as Carvel ytt)
click openfga-carvel "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/access/openfga-carvel.md"
style openfga-carvel fill:green
openfga-cdk8s(App as cdk8s)
style openfga-cdk8s fill:red
access-authorization --> hexa & paralus & openfga
openfga --> openfga-helm & openfga-kustomize & openfga-carvel & openfga-cdk8s --> security_misc
hexa & paralus --> security_misc
%% ----------
%% -- Misc --
%% ----------
security_misc{{Misc}}
click security_misc "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/security-misc/README.md"
style security_misc fill:blue
%% Not maintained
%% curiefense(Curiefense)
%% style curiefense fill:red
confidential-containers(Confidential Containers)
style confidential-containers fill:red
container-ssh(ContainerSSH)
style container-ssh fill:green
security_misc --> confidential-containers & container-ssh --> security-done
security-done((Chapter End))
end
flowchart TD
subgraph Observability
%% -----------
%% -- Setup --
%% -----------
setup-observability((Setup))
click setup-observability "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/setup/observability.md"
setup-observability --> dashboards
%% ----------------
%% -- Dashboards --
%% ----------------
dashboards{{Dashboards}}
click dashboards "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/dashboards/README.md"
style dashboards fill:blue
kubernetes-dashboard(Kubernetes Dashboard)
style kubernetes-dashboard fill:red
headlamp(Headlamp)
click headlamp "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/dashboards/headlamp.md"
style headlamp fill:green
meshery(Meshery)
style meshery fill:red
dashboards --> kubernetes-dashboard & headlamp & meshery --> instrumentation
%% ------------------------------------
%% -- Instrumenting Application Code --
%% ------------------------------------
instrumentation{{Application Instrumentation}}
click instrumentation "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/exposition-formats/README.md"
style instrumentation fill:blue
open-telemetry(OpenTelemetry)
click open-telemetry "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/exposition-formats/opentelemetry.md"
style open-telemetry fill:green
open-metrics(OpenMetrics)
click open-metrics "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/exposition-formats/openmetrics.md"
style open-metrics fill:green
instrumentation --> open-telemetry & open-metrics --> metrics
%% -------------
%% -- Metrics --
%% -------------
metrics{{Metrics}}
click metrics "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/metrics/README.md"
style metrics fill:blue
metrics-prometheus(Prometheus)
click metrics-prometheus "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/metrics/prometheus.md"
metrics-thanos(Thanos)
style metrics-thanos fill:green
cortex(Cortex)
style cortex fill:red
pixie(Pixie)
click pixie "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/metrics/pixie.md"
metrics --> metrics-prometheus & metrics-thanos & cortex & pixie --> tracing
%% -------------
%% -- Tracing --
%% -------------
tracing{{Tracing}}
click tracing "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/tracing/README.md"
style tracing fill:blue
jaeger(Jaeger)
click jaeger "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/tracing/jaeger.md"
style jaeger fill:green
jaeger-kustomize(App as Kustomize)
click jaeger-kustomize "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/tracing/kustomize.md"
jaeger-helm(App as Helm)
click jaeger-helm "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/tracing/helm.md"
jaeger-carvel(App as Carvel ytt)
click jaeger-carvel "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/tracing/carvel.md"
style jaeger-carvel fill:green
jaeger-cdk8s(App as cdk8s)
click jaeger-cdk8s "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/tracing/cdk8s.md"
zipkin(Zipkin)
click zipkin "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/tracing/zipkin.md"
tracing --> zipkin
tracing --> jaeger --> jaeger-kustomize & jaeger-helm & jaeger-carvel & jaeger-cdk8s --> data-pipelines
%% --------------------
%% -- Data Pipelines --
%% --------------------
data-pipelines{{Data Pipelines}}
style data-pipelines fill:blue
click data-pipelines "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/data-pipelines/README.md"
fluentd(FluentD)
click fluentd "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/data-pipelines/fluentd.md"
fluentbit(Fluent Bit)
style fluentbit fill:red
logging-operator(Logging Operator)
click logging-operator "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/data-pipelines/logging-operator.md"
logging-operator-kustomize(App as Kustomize)
click logging-operator-kustomize "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/data-pipelines/kustomize.md"
logging-operator-helm(App as Helm)
click logging-operator-helm "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/data-pipelines/helm.md"
logging-operator-carvel(App as Carvel ytt)
click logging-operator-carvel "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/data-pipelines/carvel.md"
logging-operator-cdk8s(App as cdk8s)
click logging-operator-cdk8s "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/data-pipelines/cdk8s.md"
style logging-operator-cdk8s fill:red
otel-collector(OTel Collector)
style otel-collector fill:green
data-pipelines --> fluentd & fluentbit --> logging-operator
data-pipelines --> logging-operator --> logging-operator-kustomize & logging-operator-helm & logging-operator-carvel & logging-operator-cdk8s --> service-mesh
data-pipelines --> otel-collector --> service-mesh
%% ------------------
%% -- Service Mesh --
%% ------------------
service-mesh{{Service Mesh}}
style service-mesh fill:blue
cilium(Cilium)
style cilium fill:red
istio(Istio)
click istio "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/service-mesh/istio.md"
style istio fill:green
linkerd(Linkerd)
style linkerd fill:red
kuma(Kuma)
style kuma fill:red
service-mesh-istio-kustomize(App as Kustomize)
click service-mesh-istio-kustomize "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/service-mesh/istio-kustomize.md"
service-mesh-istio-helm(App as Helm)
style service-mesh-istio-helm fill:red
service-mesh-istio-carvel(App as Carvel ytt)
click service-mesh-istio-carvel "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/service-mesh/istio-carvel.md"
style service-mesh-istio-carvel fill:green
service-mesh-istio-cdk8s(App as cdk8s)
style service-mesh-istio-cdk8s fill:red
service-mesh --> cilium & istio & linkerd & kuma
istio --> service-mesh-istio-kustomize & service-mesh-istio-helm & service-mesh-istio-carvel & service-mesh-istio-cdk8s --> progressive-delivery
cilium & linkerd & kuma --> progressive-delivery
%% --------------------------
%% -- Progressive Delivery --
%% --------------------------
progressive-delivery{{Progressive Delivery}}
style progressive-delivery fill:blue
click progressive-delivery "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/progressive-delivery/README.md"
argo-rollouts(Argo Rollouts)
click argo-rollouts "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/progressive-delivery/argo-rollouts.md"
style argo-rollouts fill:green
flagger(Flagger)
click flagger "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/progressive-delivery/flagger.md"
progressive-delivery-cilium(Cilium)
style progressive-delivery-cilium fill:red
progressive-delivery-istio(Istio)
click progressive-delivery-istio "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/progressive-delivery/istio.md"
style progressive-delivery-istio fill:green
progressive-delivery-kuma(Kuma)
style progressive-delivery-kuma fill:red
progressive-delivery-nsm(Network Service Mesh)
click progressive-delivery-nsm "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/progressive-delivery/nsm.md"
style progressive-delivery-nsm fill:red
progressive-delivery-linkerd(Linkerd)
click progressive-delivery-linkerd "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/progressive-delivery/linkerd.md"
style progressive-delivery-linkerd fill:red
progressive-delivery-kustomize(App as Kustomize)
click progressive-delivery-kustomize "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/progressive-delivery/kustomize.md"
progressive-delivery-helm(App as Helm)
click progressive-delivery-helm "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/progressive-delivery/helm.md"
progressive-delivery-carvel(App as Carvel ytt)
click progressive-delivery-carvel "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/progressive-delivery/carvel.md"
style progressive-delivery-carvel fill:green
progressive-delivery-cdk8s(App as cdk8s)
click progressive-delivery-cdk8s "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/progressive-delivery/cdk8s.md"
style progressive-delivery-cdk8s fill:red
progressive-delivery --> argo-rollouts & flagger
argo-rollouts & flagger --> progressive-delivery-cilium & progressive-delivery-istio & progressive-delivery-kuma & progressive-delivery-nsm & progressive-delivery-linkerd
progressive-delivery-istio --> progressive-delivery-kustomize & progressive-delivery-helm & progressive-delivery-carvel & progressive-delivery-cdk8s --> cost
%% ----------
%% -- Cost --
%% ----------
cost{{Cost}}
click cost "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/cost/README.md"
open-cost(OpenCost)
style open-cost fill:red
storm-forge(StormForge)
style storm-forge fill:red
cast-ai(CAST AI)
style cast-ai fill:red
cost --> open-cost & storm-forge & cast-ai --> observability-misc
%% ----------
%% -- Misc --
%% ----------
observability-misc{{Misc}}
kepler(Kepler)
style kepler fill:red
inspektor-gadget(Inspektor Gadget)
style inspektor-gadget fill:green
k8s-gpt(K8sGPT)
style k8s-gpt fill:red
perses(Perses)
style perses fill:red
observability-misc --> kepler & inspektor-gadget & k8s-gpt & perses --> done
done((Chapter End))
end
flowchart TD
subgraph IDP
%% -----------
%% -- Setup --
%% -----------
setup((Setup))
click setup "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/setup/idp.md"
setup --> api
%% -------------------------------------------------
%% -- API (CRDs) & State Management (Controllers) --
%% -------------------------------------------------
api{{"API (CRDs) & State Management (Controllers)"}}
click api "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/api/README.md"
style api fill:blue
crossplane(Crossplane)
click crossplane "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/api/crossplane.md"
style crossplane fill:green
kube-vela(KubeVela)
click crossplane "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/api/kubevela.md"
kro(kro)
click kro "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/api/kro.md"
kratix(kratix)
click kratix "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/api/kratix.md"
api --> crossplane & kube-vela & kro & kratix
crossplane & kube-vela --> policies
%% --------------
%% -- Policies --
%% --------------
policies{{Policies}}
style policies fill:blue
click api "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/policies-idp/README.md"
kyverno(Kyverno)
click kyverno "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/policies-idp/kyverno.md"
style kyverno fill:green
opa("Open Policy Agent (OPA) With Gatekeeper")
click opa "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/policies-idp/gatekeeper.md"
cloud-custodian(Cloud Custodian)
style cloud-custodian fill:red
kubewarden(Kubewarden)
style kubewarden fill:red
vap(Kubernetes Validating Admission Policy)
click vap "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/policies-idp/vap.md"
policies --> kyverno & opa & kubewarden & vap & cloud-custodian --> gitops
%% ------------------------------------
%% -- State Synchronization (GitOps) --
%% ------------------------------------
gitops{{"State Synchronization (GitOps)"}}
style gitops fill:blue
click api "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/gitops-idp/README.md"
flux(Flux)
click flux "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/gitops-idp/flux.md"
argocd(Argo CD)
click argocd "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/gitops-idp/argocd.md"
style argocd fill:green
kapp(Carvel kapp-controller)
style kapp fill:red
gitops --> flux & argocd & kapp --> workflows
%% ----------------------------------
%% -- One-Shot Actions (Workflows) --
%% ----------------------------------
workflows{{"One-Shot Actions (Workflows)"}}
style workflows fill:blue
click workflows "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/workflows/README.md"
argo-workflows(Argo Workflows)
click argo-workflows "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/workflows/argo-workflows.md"
style argo-workflows fill:green
tekton(Tekton)
click tekton "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/workflows/tekton.md"
github-actions(GitHub Actions)
click github-actions "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/workflows/github-actions.md"
workflows --> argo-workflows & tekton & github-actions
argo-workflows --> gui
%% ------------------------------------
%% -- Graphical User Interface (GUI) --
%% ------------------------------------
gui{{"Graphical User Interface (GUI)"}}
style gui fill:blue
click gui "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/gui/README.md"
backstage(Backstage)
click backstage "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/gui/backstage.md"
style backstage fill:green
roadie(Roadie)
click roadie "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/gui/roadie.md"
port(Port)
click port "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/gui/port.md"
gui --> backstage & roadie & port
backstage --> templating
%% ----------------
%% -- Templating --
%% ----------------
templating{{Templating}}
style templating fill:blue
click templating "https://github.com/vfarcic/cncf-demo/blob/main/manuscript/specialized-templates/README.md"
porter(Porter)
style porter fill:red
pipecd(PipeCD)
style pipecd fill:red
radius(Radius)
style radius fill:red
werf(werf)
style werf fill:red
score(Score)
style score fill:red
templating --> porter & pipecd & werf & score & radius --> misc
%% ------------------
%% -- Miscelaneous --
%% ------------------
misc{{Miscelaneous}}
style misc fill:red
%% Not maintained since May 2023
%% dev-stream(DevStream)
%% style dev-stream fill:red
dapr("Distributed Application Runtime (Dapr)")
style dapr fill:red
open-feature(OpenFeature)
style open-feature fill:red
kusion-stack(KusionStack)
style kusion-stack fill:red
misc --> dapr & kusion-stack & open-feature
end
| Name | Guests | Date | Link |
|---|---|---|---|
| Build Container Image | Cora Iberkleid - Carvel kbld Ryan Moran - Buildpacks Anders Björklund - Lima |
Wednesday, February 8, 2023 | story |
| Store Container Image in a Registry | Vadim Bauer - Harbor Allen Sun - Dragonfly |
Tuesday, February 14, 2023 | story |
| Define and Deploy the App to Dev | Andrew Block - Helm Scott Rosenberg - Carvel ytt Eli Polonsky - cdk8s Thomas Vitale - Kustomize |
Tuesday, February 21, 2023 | story |
| Use HTTPS | Ashley Davis - cert-manager |
Tuesday, February 28, 2023 | story |
| Set Up PostgreSQL DB in the Dev Environment | Dan Magnum - Crossplane Andrew Block - Helm |
Tuesday, March 7, 2023 | story |
| Manage DB Schema | Marc Campbell - SchemaHero Robert Reeves - Liquibase |
Tuesday, March 14, 2023 | story |
| Develop the App | Nick Powell - Telepresence Carl Montanari - DevSpace Elson Yuen - Devfile |
Tuesday, March 21, 2023 | story |
| Chapter 1 Finale! | Just Whitney and Viktor! | Tuesday, March 28, 2023 |
| Name | Guests | Date | Link |
|---|---|---|---|
| Provision a Production Cluster | Ramon Ramirez-Linan - Crossplane Richard Case - Cluster API |
Tuesday, July 18, 2023 | story |
| Configure Synchronization with GitOps | Kingdon Barrett - Flux Christian Hernandez - Argo CD Scott Rosenberg - Carvel kapp-controller |
Tuesday, July 25, 2023 | story |
| Implement Ingress | Sunjay Bhatia - Contour with Envoy Ricardo Katz - ingress-nginx Alice Wasko - Emissary-ingress with Envoy |
Tuesday, August 1, 2023 | story |
| Chapter 2 Finale! (Including Deploy The App To Production & Database Implementation) | Whitney and Viktor! | Tuesday, August 8, 2023 | story |
| Name | Guests | Date | Link |
|---|---|---|---|
| Admission Controller Policies | Jim Bugwadia - Kyverno Rita Zhang - Open Policy Agent (OPA) with Gatekeeper Kevin Sonney - Cloud Custodian Flavio Castelli - Kubewarden Tim Bannister - Kubernetes Validating Admission Policy |
Tuesday, January 9, 2024 | story |
| Runtime Policies | Barun Acharya - KubeArmor Thomas Labarussias - Falco |
Tuesday, January 16, 2024 | story |
| Secrets Management | Gergely Brautigam - External Secrets Operator (ESO) Anish Ramasekar - Secrets Store CSI Driver (SSCSID) Saeid Bostandoust - Teller Marcus Noble - Secrets OPerationS (SOPS) |
Tuesday, January 23, 2024 | story |
| Mutual TLS and Network Policies | Marino Wijay - Istio Flynn - Linkerd Nick Young - Cilium Charly Molter - Kuma Michael Chenetz - Network Service Mesh |
Tuesday, January 30, 2024 | story |
| Kubernetes Scanning | Oshrat Nir - Kubescape Jamie Smith - Snyk |
Tuesday, February 6, 2024 | story |
| Signing Artifacts | Milind Gokarn - Notary Hector Fernandez - Sigstore Gert Drapers - Open Policy Containers |
Tuesday, February 13, 2024 | story |
| Generating Workload Identity | Frederick Kautz - SPIFFE Daniel Feldman - SPIRE Abhijeet Vaidya - Athenz |
Tuesday, February 20, 2024 | story |
| Authenticating Users | Maksim Nabokikh - Dex Alexander Schwartz - Keycloak |
Tuesday, February 27, 2024 | story |
| Authorizing Access | Gerry Gebel - Hexa Saim Safdar - Paralus Raghd Hamzeh - OpenFGA |
Tuesday, March 5, 2024 | story |
| Miscellaneous | Suraj Deshmukh - Confidential Containers Rachid Zarouali - ContainerSSH |
Tuesday, March 12, 2024 | story |
| Chapter 3 Finale! | Whitney and Viktor! | Tuesday, March 19, 2024 |
| Name | Guests | Date | Link |
|---|---|---|---|
| Dashboards | Marc Boorshtein - Kubernetes Dashboard René Dudfield - Headlamp Lee Calcote - Meshery |
September 3, 2024 | story |
| Episode Postponed! | Guests are busy with PromCon | September 10, 2024 | N/A |
| Open Standards | Austin Parker - OpenTelemetry Richard "RichiH" Hartmann - Prometheus |
September 17, 2024 | story |
| Metrics | Iris Dyrmishi - Prometheus Saswata Mukherjee - Thanos Friedrich Gonzalez - Cortex |
September 24, 2024 | story |
| Traces | Jonah Kowall - Jaeger Andriy Redko - Zipkin |
October 1, 2024 | story |
| Data Pipelines | Eduardo Silva Pereira - Fluent Bit Juraci Paixão Kröhling - OTel Collector Sandor Guba - Logging Operator |
October 8, 2024 | story |
| Service Mesh | Nick Young - Cilium Lin Sun - Istio William Morgan - Linkerd Marcin Skalski - Kuma |
October 29, 2024 | story |
| Progressive Delivery | Christian Hernandez - Argo Rollouts Sanskar Jaiswal - Flagger |
October 15, 2024 | story |
| Cloud Cost | Matt Ray - OpenCost Yasmin Rajabi - StormForge Phil Andrews - CAST AI |
October 22, 2024 | TBD |
| Miscellaneous | Kaiyi Liu - Kepler Jose Blanquicet - Inspektor Gadget Ronald Petty - K8sGPT Augustin Husson - Perses Dom Delnano - Pixie |
November 5, 2024 | TBD |
| Chapter 4 Finale! | Whitney and Viktor! | November 22, 2024 |
| Name | Guests | Date | Link |
|---|---|---|---|
| API and State Management | Tobias Kässer - Crossplane Fog Dong - KubeVela Abby Bangser - Kratix |
January 28, 2025 | story |
| Policies and State Synchronization (Review) | Whitney and Viktor - Kyverno Whitney and Viktor - Argo CD |
February 4, 2025 | stories: policies, state |
| One-Shot Actions | Christian Hernandez - Argo Workflows Vincent Demeester - Tekton Matteo Bianchi - GitHub Actions |
February 11, 2025 | story |
| Graphical User Interface (GUI) | Scott Rosenberg - Backstage Roadie Sébastien Blanc - Port |
February 18, 2025 | story |
| Specialized Templating | Sarah Christoff - Porter Khanh Tran - PipeCD Will Tsai - Radius Aleksei Igrychev - werf Ben Meier - Score |
February 25, 2025 | TODO: |
| Miscellaneous | Mauricio Salatino - Dapr Forest Chen - KusionStack Jonathan Norris - OpenFeature |
March 4, 2025 | TODO: |
| Chapter 5 Finale! | Whitney and Viktor! | March 25, 2025 |
- Recap of the decisions made in the app's journey so far (<=5 min.)
- Recap of the technology that was chosen from last week's episode (<=5 min.)
- Implement said technology (<=5 min.)
- Intro current episode: why is this step necessary? (<=5 min.)
- Introduce guests
- Each case presented in <= 5 min.
- Audience questions
- Call for voting
- Closing case presentations (20 sec.)