Building Apps in Kubernetes: The Unforgiving Sea of...
summary
A five‑service "joke generator" is built and deployed into a local Kubernetes cluster; devspace live file sync replaces rebuilds by syncing source, running a restart helper and producing immediate Chuck Norris jokes. Builds use Earthly, images are inspected with sift to emit an s-bom + grype scanning step that finds multiple CVEs (single‑stage Dockerfile blamed). Images get cosign keyless signing via Google OIDC and kyverno admission policies block unsigned images; the live demo runs and the cleanup purges the cluster.
AI-written summary · about
chapters (4)
related talks
34mBuilding Apps in Kubernetes - Nic Vermande and Oluebube Princess Egbuna
55mHow to develop apps on K8s and not die trying
27mBuilding Applications to Increase Kubernetes Adoption, and Make Life Easier
27mKubernetes The Fun Way
02h 18mDevelop and Deploy to Kubernetes like a Googler
01h 00mJava on Kubernetes What I Wish I Knew First
45mCarvel: small tools for joyfully deploying apps to Kubernetes
46mA Security State of Mind: Continuous Security with Kubernetes