Pragmatic Pod Patterns: Leveraging sidecar containers in Kubernetes
summary
Describes concrete pod patterns that move TLS, auth and logging out of app code into reusable sidecars so teams ship faster and safer. Uses nginx reverse proxy for inbound/outbound routing and zero‑downtime config reloads, vault sidekick (and CFSSL) to fetch secrets into tmpfs and rotate certs automatically (one team rotates every two hours), an OpenID proxy sidecar for auth, and Filebeat sidecars for per‑pod logging. Packs these into shareable Helm charts and reports successful rollout across multiple public‑sector projects.
AI-written summary · about
chapters (18)
- 0:00Intro
- 0:30Capgemini Digital Platform Engineering Unit
- 0:47Digital Transformation Strategy
- 1:33Team makeup
- 1:58Tools
- 2:27Dont reinvent the wheel
- 2:50Platform engineering approach
- 3:46Dress code
- 5:36Pod design
- 6:26Sidecar content
- 6:52Sidecar contents
- 7:58How much time is added
- 9:52nginx reverse proxy
- 11:45nginx mutual authentication
- 13:16opera resti
- 16:33volt sidekick
- 20:12live dynamic certificates
- 21:28IDC proxy
related talks
48mLeveraging the power of Kubernetes with patterns
27mProductionise any Application in Kubernetes Using Sidecar Containers
38mImproving Secure Pod-to-Pod Communication Within Kubernetes Using...
01h 02mKubernetes Patterns
32mAchieving Mutual TLS: Secure Pod-to-Pod Communication Without the Hassle
33mMagic of Kubernetes Sidecar Injection: Present and Future - Anton Ovchinnikov
42mSecuring Kubernetes Workloads with Istio Service Mesh
15mSimplify Kubernetes Connectivity