Expanding Your Kubernetes Arsenal: Essential Tools and Utilities
summary
Practical checklist of tools and concrete outcomes: image scanning with Trivy (one‑liner CVE scans), metrics stack with Prometheus + Grafana, eBPF-based runtime visibility via Tracy/Tetragon and Cilium, cost visibility with OpenCost, policy and runtime hardening with OPA/Falco and kube-bench, CI/CD linting with kube-linter/Pluto/Nova, and platform work with Backstage and chaos testing via ChaosKube. Claims include a $1M crypto‑mining incident caught too late, 4 months wasted building an in‑house cost tool, and reported 60% maintenance time and 30% cost reduction using Cilium ambient mesh.
AI-written summary · about
chapters (28)
- 0:00Introduction
- 1:00Who am I
- 1:45Subscribe
- 2:17Why this session
- 3:49Image security
- 6:13Monitoring and OBS
- 8:40Prometheus
- 13:16Prometheus vs Grafana
- 13:46Tracy
- 14:08Tetragon
- 15:20Celium
- 16:17OpenCost
- 18:02Troubleshooting
- 19:05AI Ops
- 19:58Security Compliance
- 21:59Falco Opa
- 22:58Notary
- 23:34Kepler
- 24:26KADA
- 24:51Nova and Pluto
- 25:49Cub Lint
- 26:24Cargo World
- 27:04Sealed Secrets
- 28:09Backstage
- 29:10Chaos Engineering
- 29:58Should you use these tools
- 31:51Questions
- 40:34VCA