SIG API Machinery is responsible for all generic API topics in Kubernetes, i.e. for the generic API server implementation, API CRUD semantics, discovery, the admission control mechanism, conversion, d …

The Kubernetes operator pattern has revolutionized the way applications are deployed and managed in Kubernetes, but much of the tooling around building operators has focused on easing development in G …

Whenever kubectl creates or changes resources, OpenAPI is involved in the background. OpenAPI is a core technology for client-side validation, docs (kubectl explain), intelligent Kubernetes manifest c …

I'd like to introduce how we use istio + OPA to do authorization in HP's FitStation platform. Our project consists of 20+ micro-services which are written in Golang and running on Kubernetes with ist …

Best known for its ability to serve as the cluster DNS for Kubernetes, CoreDNS is a plugin-based DNS server that is easy to use and extend, either through the configuration of Corefile, or by adding n …

In cloud computing container is widely adapted, but its isolation is weak. It's important to protect secrets even from cloud service provider. Software Guard Extention(SGX) provides Trusted Execution …