Pulumi Blog: Conferences

Pulumi's Latest Kubernetes Updates from KubeCon North America

Gavin Johnson — Tue, 12 Nov 2024 08:00:00 +0000

Pulumi is excited to be at KubeCon North America this week, the premier event for all things Kubernetes and cloud-native. KubeCon is the gathering place for developers, enterprises, and cloud native experts to meet and further the education and advancement of Kubernetes and cloud native computing. At Pulumi, we are strongly committed to Kubernetes and continue to support the ecosystem with infrastructure management solutions that empower teams to automate, secure, and manage Kubernetes at scale.

Come See Us at KubeCon

Stop by the Pulumi KubeCon booth R1 this week to chat with experts on the Pulumi team. If you can’t make it to KubeCon, join our workshop on November 18, 2024, to see how easy it is to manage Kubernetes with Pulumi.

Recent Pulumi Kubernetes Updates

We’ve launched several new and improved capabilities recently to serve Kubernetes users and to make it easier than ever to automate, secure, manage, and scale clusters and workloads.

Pulumi Kubernetes Operator 2.0

The Pulumi Kubernetes Operator automates the deployment and management of infrastructure by running Pulumi programs directly in Kubernetes clusters, enabling teams to manage cloud resources alongside Kubernetes-native resources. The Pulumi Kubernetes Operator 2.0 is a significant upgrade that introduces dedicated “workspace” pods for each Stack resource, effectively isolating each stack’s compute and memory resources, improving the isolation of secrets, and opening up new customization options. The operator now scales horizontally, enhancing performance and enabling teams to manage complex Kubernetes setups with greater reliability.

Pulumi ESC Secrets in Kubernetes with the External Secrets Operator

Pulumi ESC integrates with the External Secrets Operator (ESO) to securely access secrets from Pulumi ESC in Kubernetes. This enables a secure, automated way to manage and use secrets from Pulumi ESC across Kubernetes clusters, reducing the need for manual secrets maintenance and potential security risks from the local storage of secrets in manifest files.

Pulumi EKS Provider Version 3.0.0

The Pulumi EKS Provider Version 3.0.0 simplifies Amazon Elastic Kubernetes Service (EKS) cluster management with improvements in flexibility and security and the introduction of new features to enhance the Kubernetes experience on AWS. This update allows users to more easily customize networking, scaling, and security configurations for EKS clusters, streamlining deployment and management workflows.

Kubernetes-Native Support for Customer-Managed Pulumi Deployments Agents

Kubernetes-native support for customer-managed Pulumi Deployments agents allows organizations to host Pulumi Deployments agents within their Kubernetes environments enhancing the flexibility and control they have over their infrastructure deployments. Kubernetes-native support offers greater flexibility, scalability, and security for self-hosted Pulumi Deployments agents.

Improved Kubernetes await Logic in the Pulumi Kubernetes Provider

Improved Kubernetes await logic in the Pulumi Kubernetes provider enables more reliable handling of resource dependencies and synchronization when managing Kubernetes resources. This update makes it easier to ensure that resources are created or updated in the correct order, improving the overall predictability and stability of Kubernetes deployments.

Helm Chart v4 Resource in the Pulumi Kubernetes Provider

The Helm Chart v4 resource in the Pulumi Kubernetes provider introduces several new capabilities for users managing Helm charts. It allows for more sophisticated chart management, including enhanced support for dependencies between charts, applying transformations to chart resources, and the ability to handle Kubernetes namespaces more flexibly.

Revamped crd2pulumi

crd2pulumi is a CLI tool that generates strongly-typed Pulumi resources from Kubernetes CustomResourceDefinitions (CRDs), enabling better IDE support, type safety, and autocompletion for managing complex CRDs. It was revamped to enhance its handling of CRDs with multiple versions, refine the structure of its generated code, and offer more flexible output paths for smoother integration into Pulumi programs.

Learn about the crd2pulumi and its recent updates

Kubecon NA 2021 Roundup

Kat Cosgrove — Mon, 08 Nov 2021 22:50:38 +0000

KubeCon North America 2021 is over, but the recordings are now online! Every talk you wanted to attend and couldn’t is available on YouTube, so here’s some highlights—cloud native trends, updates from projects and SIGs, and a few of my favorite talks!

SBOM is Coming: Why You Should Care and How You Can Help - Frederick Kautz & Allan Friedman

A major trend throughout the conference was supply chain security and software bill of materials (SBOMs). There were quite a few talks on these subjects, but Frederick Kautz and Allan Friedman give a great overview of exactly what an SBOM is, and why it’s important.

Notary: State of the Container Supply Chain - Justin Cormack, Docker & Steve Lasker, Microsoft

On supply chain security, Steve Lasker presents updates to Notary v2. It’s changed quite a bit since v1 and there are more changes on the horizon. With the rising concerns surrounding supply chain security, I expect Notary and tools like it to be increasingly important. No worries if you aren’t already familiar with Notary—Steve explains it well.

A Vulnerable Tale About Burnout - Julia Simon, CloudOps

Taking things to a more human place, burnout was a common theme this year. It’s something that we don’t talk about as much as we should, but close to two years of isolation is forcing us all to confront it in ways we may not have expected. This talk by Julia Simon is important to watch not just so that you can learn to recognize these problems in yourself, but so that you can recognize them in your peers.

PodSecurityPolicy Replacement: Past, Present, and Future - Tabitha Sable & Tim Allclair

PodSecurityPolicy (PSP) has been deprecated. Many of you may be relying on this, and deprecations frequently sound scary, but Tabitha Sable and Tim Allclair are here to soothe your fears. They go to great lengths explaining what PSP is, why it was deprecated, what exactly this means for people relying on it, and where we’re going next.

SIG Contributor Experience Deep Dive - Alison Dowdney, Weaveworks & Christoph Blecker, Red Hat

An open source project lives or dies by its contributors, both technical and non-technical. Kubernetes is huge and requires a lot of contributors to keep it growing, so we have SIG Contributor Experience to make sure they stay happy and the community stays healthy. Alison Dowdney and Christoph Blecker go into just how SIG Contributor Experience operates, plus updates. If you’re in a leadership position for an open source project, there are some lessons to be learned from this talk.

Kubernetes Exposed! Seven of Nine Hidden Secrets That Will Give You… Ian Coldwater & Brad Geesaman

No Kubecon is complete without Ian Coldwater, this time joined by Brad Geesaman (and, briefly, a second Ian Coldwater) to go into some not-so-obvious but oh-so-important pitfalls and hidden security concerns within Kubernetes. Even if you caught this talk live, it’s worth watching again to make sure you’re secured against these issues, or you might find a goose haunting your cluster.

Beyond Kubernetes Security - Ellen Körbes, Tilt & Tabitha Sable, Datadog

Finally, it would be remiss of me to not mention Ellen and Tabitha’s cinematic contribution to this year’s Kubecon North America. Beyond Kubernetes Security is the spiritual successor to their talk from the last Kubecon Europe, once again going into how some security concepts and exploits work in Kubernetes, but presented as a short film involving crime, time travel, breakups, and Ellen’s collection of old electronics.

The quality of the content was incredible across the board this year, whether the speakers were live or presenting virtually, forcing some difficult decisions around selecting my schedule for talks to attend and how many I could feasibly put in this blog before it got way too long. Fortunately, all of them are on the CNCF YouTube channel now, including talks from the various co-located events. Dig through!

Kubecon North America was simultaneously a strange and familiar event. It’s been nearly two years since most of us have been at a conference, and while that certainly made things awkward at times while we all readjusted to seeing other humans in the flesh, our slow return to something vaguely familiar seems to have been a success. I sincerely hope to see you all in person at the next Kubecon EU in Valencia.

Honk <3,

Kat