# Rawkode Academy

> Hands-on cloud native education: videos, articles, courses, and live shows for engineers building and running production Kubernetes and infrastructure.

Article links below point at plain-markdown renditions; the canonical
HTML pages live at the same path without the `.md` suffix. Video links
point at markdown documents containing the description, chapters, and
full transcript of each session.

## Articles

- [apko + melange: Distroless OCI Images Your Scanner Can Actually Read](https://rawkode.academy/read/apko-melange-tutorial.md): A working tutorial for apko and melange. Package a binary with melange, assemble it into a signed distroless image with apko, and ship it with an SBOM Trivy…
- [cgroups: From Chaos to Control](https://rawkode.academy/read/cgroups-from-chaos-to-control.md): Learn Linux cgroups v2 through Docker and Kubernetes examples: memory.max, pids.max, cgroup.subtreecontrol, OOM kills, and resource-limit debugging.
- [Introducing the Technology Matrix](https://rawkode.academy/read/introducing-technology-matrix.md): Your new compass for the Cloud Native landscape. Explore, filter, and learn about the technologies that power modern platforms.
- [Building a Rust Library for CUE: Architecture & Lessons](https://rawkode.academy/read/building-rust-cue-library.md): Inside cuengine, a Rust library wrapping Go's CUE evaluator via FFI. Memory safety, structured errors, and production-grade architecture.
- [Wassette: A New Era of Security for AI Agent Tooling](https://rawkode.academy/read/introducing-wassette.md): Wassette, a WebAssembly-based sandboxing technology for AI agent tools, and an analysis of why it represents a major step forward in security compared to…
- [News Digest for August 4th, 2025](https://rawkode.academy/read/news-digest-250804.md): A dispatch from the cloud-native world, where the height of innovation is apparently pointlessly reinventing YAML while shaking down the community for…
- [FluxCD: Why the GitOps Pioneer Remains Its Future](https://rawkode.academy/read/fluxcd-the-inevitable-choice.md): A definitive look at FluxCD's controller-first design and why its architectural alignment with Kubernetes offers superior security, efficiency, and operational…
- [KEP-2831: Kubelet Tracing Finally Brings Node-Level Observability to Kubernetes](https://rawkode.academy/read/kep-2831-kubelet-tracing.md): Kubernetes 1.34 will deliver distributed tracing in the kubelet, providing unprecedented visibility into node-level operations that have been a debugging black…
- [Lazyjournal: A Log Viewer for Cloud Native Environments](https://rawkode.academy/read/lazyjournal-log-viewer.md): Lazyjournal is a TUI log viewer that aggregates logs from various sources, providing a unified interface for developers and system administrators.
- [Kyverno ValidatingPolicy with CEL: Working Examples (2026)](https://rawkode.academy/read/kyverno-cel-validating-policy.md): Replace ClusterPolicy with Kyverno ValidatingPolicy using CEL expressions. Real examples for image verification, label rules, and replica limits.
- [Deploy to Cloudflare from GitLab CI with Dagger (Tutorial)](https://rawkode.academy/read/dagger-gitlab-cloudflare-deployment.md): Build a portable GitLab CI pipeline with Dagger that deploys to Cloudflare Workers. Containerless caching, local-runnable, full source included.
- [Federated GraphQL for Microservice Architecture](https://rawkode.academy/read/federated-graphql-microservices.md): Learn how federated GraphQL simplifies data access across service boundaries in a microservice architecture.
- [The Rawkode Academy Architecture](https://rawkode.academy/read/our-architecture.md): A high-level overview of the Rawkode Academy platform architecture, exploring the innovative patterns and techniques that power our cloud-native platform.
- [Zed: Show & Tell](https://rawkode.academy/read/zed-show-and-tell.md): Explore Zed, a fast and modern code editor written in Rust with collaborative features
- [How to ask for help](https://rawkode.academy/read/how-to-ask-for-help.md): Master the art of asking technical questions that get helpful responses

## Courses

- [Zitadel Tutorial: Self-Host Auth with Docker & K8s (2026)](https://rawkode.academy/courses/complete-guide-zitadel): Self-host Zitadel for auth: Docker Compose, Kubernetes, OIDC, social login, multi-tenancy. Free, hands-on tutorial with copy-paste configs.
- [GraphQL Federation with WunderGraph Cosmo](https://rawkode.academy/courses/graphql-federation-wundergraph-cosmo): Learn how to build and scale distributed GraphQL architectures using WunderGraph Cosmo. This comprehensive course covers federation concepts, schema design,…
- [Rust for the Rusty](https://rawkode.academy/courses/rust-for-the-rusty): A course for all the engineers that got rusty over time, but also for bloody beginners who want to dive deep into the world of Rust.
- [Teleport for Kubernetes](https://rawkode.academy/courses/teleport-for-kubernetes): Learn to deploy, configure, and operate Teleport as the access layer for your Kubernetes clusters. From zero to a fully working setup with identity-based…

## Learning Paths

- [Build Your First Kubernetes Developer Platform](https://rawkode.academy/learning-paths/build-your-first-kubernetes-developer-platform): Move from GUI-driven cluster management to platform APIs, golden-path deployments, and automated operations. This path assembles modern tools that let you…
- [GitOps Landscape](https://rawkode.academy/learning-paths/gitops-landscape): Build a GitOps-first operating model. This path layers modern packaging, reconciliation, and developer experience tooling—Timoni, Kluctl, FluxCD, Gimlet, and…
- [Klustered: Advanced Cluster Triage](https://rawkode.academy/learning-paths/klustered-advanced-cluster-triage): Master the craft of rescuing broken clusters. This path walks through real war‑room incidents so you can debug the control plane, container runtime, and host…
- [Kubernetes Security Blueprint: Posture to Policy](https://rawkode.academy/learning-paths/mastering-kubernetes-security-posture-and-policy): Track, enforce, and extend Kubernetes security from baseline scans to policy-driven automation. This path combines posture management with Kyverno enforcement,…

## Videos

- [Hands-on Introduction to Iroh](https://rawkode.academy/watch/hands-on-introduction-to-iroh.md): Brendan O'Brien joins Rawkode to introduce Iroh, walking through the project, its networking model, and how developers can build peer-to-peer applications with…
- [Hands-on Introduction to Yoke](https://rawkode.academy/watch/hands-on-introduction-to-yoke.md): David Desmarais-Michaud joins Rawkode to introduce Yoke, a Kubernetes package manager that replaces templated YAML with code compiled to WebAssembly. They…
- [Hands-on Introduction to sympozium](https://rawkode.academy/watch/hands-on-introduction-to-sympozium.md): Alex Jones joins to introduce Sympozium, a Kubernetes-native coordination layer for multi-agent AI systems. We walk through modelling agents as pods and using…
- [Hadron: Minimal & Secure Linux for Cloud & Edge](https://rawkode.academy/watch/hadron-minimal-secure-linux-for-cloud-edge.md): A look at Hadron, the minimal Linux distribution from the Kairos project. Built from upstream components (musl libc, systemd, vanilla kernels) with no base-OS…
- [Friday, January 23rd, 2026 - Chevron7](https://rawkode.academy/watch/chevron7-2026-01-23.md): Office hours session with icepuma covering Intar, a QEMU-based DevOps lab environment that runs HCL-defined scenarios in local virtual machines for…
- [Hands-on Introduction to jujutsu (jj)](https://rawkode.academy/watch/hands-on-introduction-to-jujutsu-jj.md): Git has dominated the version control landscape for over a decade, but does that mean we've reached the end of history for VCS? Join us for a deep dive into…
- [Navigating Kairos: Immutable Operating Systems with a Cloud Native Twist](https://rawkode.academy/watch/navigating-kairos-immutable-operating-systems-with-a-cloud-native-twist.md): Mauro Morales and Dimitris Karakasilis explain how Kairos turns any Linux distribution into an immutable, A/B-upgradeable OS shipped as an OCI image, and where…
- [Kubernetes Security Scanning: The 4 Tools You Actually Need](https://rawkode.academy/watch/kubernetes-security-scanning.md): Four tools for Kubernetes day-two security: kube-bench for CIS hygiene, kube-hunter for red-team probing, Sonobuoy for CNCF conformance, and Syft plus Grype…
- [Fuck you, Hashicorp ... an IBM Company.](https://rawkode.academy/watch/fuck-you-hashicorp-an-ibm-company.md): HashiCorp, an IBM company, archived the Terraform CDK on December 10 with no deprecation window, blaming "product market fit" despite roughly half a million…
- [Replace Your GitHub Actions YAML with CUE](https://rawkode.academy/watch/replace-your-github-actions-yaml-with-cue.md): Author GitHub Actions workflows in CUE instead of YAML. Walk through cue vet, import, and export, pull workflow definitions from the CUE Central Registry, pin…
- [MinIO, we won't miss you.](https://rawkode.academy/watch/minio-we-wont-miss-you.md): MinIO put their community edition into maintenance mode. We walk through how they got here: silent AGPL relicensing in 2019 and 2021, the Weka…
- [Relaunching Klustered ... with Heroku Vibes](https://rawkode.academy/watch/relaunching-klustered-with-heroku-vibes.md): Building a marketing page for the Klustered relaunch with Heroku Vibes. Covers AI-assisted development, deployment to Heroku, wiring up interactive features,…
- [Kubernetes Disaster Recovery](https://rawkode.academy/watch/kubernetes-disaster-recovery.md): Back up a stateful Postgres workload with Velero, simulate a namespace disaster, and restore from S3 (SeaweedFS). Then scale the same pattern across a fleet…
- [Flatcar Linux: A Modern OS for the Always-On Infrastructure](https://rawkode.academy/watch/flatcar-linux-a-modern-os-for-the-always-on-infrastructure.md): Flatcar maintainers Thilo, Mathieu, and Chewy explain the immutable A/B partition layout, Ignition provisioning, systemd-sysext for Kubernetes, LUKS/TPM disk…
- [Platform Engineering: Asking "Why"? with Evelyn Osman](https://rawkode.academy/watch/platform-engineering-asking-why.md): Evelyn Osman joins David and Laura to defend AWK and Bash, argue platform engineering must start by asking "why", and pick apart whether every workload really…
- [Hands-on with Headlamp: The Kubernetes UI](https://rawkode.academy/watch/hands-on-with-headlamp-the-kubernetes-ui.md): Oleg and Will from Microsoft show how Headlamp's plugin model surfaces Flux, Argo CD, Cilium Hubble, and Prometheus inside a Kubernetes UI, plus the new AI…
- [Introducing Wassette: Securing MCP with WebAssembly](https://rawkode.academy/watch/introducing-wassette-securing-mcp-with-webassembly.md): Microsoft's Jiaxiao Zhou, Josh Duffney and Yosh Wuyts demo Wassette, an MCP server that runs AI agent tools as sandboxed WebAssembly components with per-tool…
- [MCP Servers for Rust Developers](https://rawkode.academy/watch/mcp-servers-for-rust-developers.md): David Flanagan is joined by Kat Cosgrove and Justin to dig into the State of Kubernetes Report 2025, correlating its findings on adoption, operations, and pain…
- [Unboxing the ngrok Kubernetes Operator](https://rawkode.academy/watch/ngrok-operator-tutorial.md): Install the ngrok Kubernetes Operator with Helm, then expose a workload using an AgentEndpoint and TrafficPolicy. Add OIDC auth via Zitadel, rate limiting, and…
- [Hands-on Introduction to Perses](https://rawkode.academy/watch/hands-on-introduction-to-perses.md): Nicolas Takashi walks through Perses, the CNCF sandbox dashboards-as-code project. We author YAML dashboards against a Prometheus data source, validate them…
- [Build a Production-Ready Kubernetes Cluster with Spectro Cloud Palette | No-Code Tutorial](https://rawkode.academy/watch/build-a-production-ready-kubernetes-cluster-with-spectro-cloud-palette-no-code-tutorial.md): Compose a reusable, production-ready Kubernetes cluster profile in the Spectro Cloud Palette UI, layering the OS, CNI, CSI, and add-ons like Prometheus and…
- [Cloud Native BuildPacks](https://rawkode.academy/watch/cloud-native-buildpacks.md): Terence Lee, Heroku engineer and CNB maintainer, walks through Cloud Native Buildpacks: turning source into OCI images without a Dockerfile, the lifecycle,…
- [AI-Augmented Programming](https://rawkode.academy/watch/ai-augmented-programming.md): Laura quizzes David on how he uses Claude as a CLI coding partner across the Rawkode Academy monorepo, why he calls it smart coding rather than vibe coding,…
- [Observability for Developers: What You Need to Know?](https://rawkode.academy/watch/observability-for-developers.md): Adriana Villela explains why developers, not observability teams, should instrument their own code. We cover OpenTelemetry's auto vs manual instrumentation,…
- [The Future of Sustainability in Open Source](https://rawkode.academy/watch/the-future-of-sustainability-in-open-source.md): Hazel Weakly unpacks open source sustainability through Eleanor Ostrom's commons principles, covering reciprocity, governance, VC funding pitfalls, maintainer…
- [Hands-On with Preq - Community-Driven Reliability Problem Detection](https://rawkode.academy/watch/hands-on-with-preq-community-driven-reliability-problem-detection.md): Tony Meehan, CTO of Prequel, joins us to demo Preq: an open-source reliability problem detector. We dig into Common Reliability Enumerations (CREs), running…
- [Hands-On with Kairos - Edge Kubernetes Made Simple](https://rawkode.academy/watch/hands-on-with-kairos-edge-kubernetes-made-simple.md): Mauro Morales and Ettore Giacinto walk through Kairos, the CNCF sandbox meta-Linux distribution for immutable edge systems. Live demo builds a bootable image,…
- [Hands-on Introduction to k0rdent](https://rawkode.academy/watch/hands-on-introduction-to-k0rdent.md): Martin Sadler and Karthik Satchitanand from Mirantis introduce k0rdent, a template-driven platform built on k0s, Cluster API, and Sveltos that wraps cluster…
- [Hands-on Introduction to lightpanda](https://rawkode.academy/watch/hands-on-introduction-lightpanda.md): Pierre and Katie show LightPanda, a headless browser written in Zig that runs JavaScript and exposes the final DOM without rendering. They benchmark it against…
- [Hands-on Introduction to Fermyon WASM Functions](https://rawkode.academy/watch/hands-on-introduction-to-fermyon-wasm-functions.md): Thorsten Hans walks through Fermyon Wasm Functions, the new fully managed service that runs Spin apps on Akamai's globally distributed network. Covers the aka…
- [Hands-on Introduction to SpiceDB](https://rawkode.academy/watch/hands-on-introduction-to-spicedb.md): Jimmy Zelinskie, AuthZed cofounder, walks through SpiceDB from the ground up: why Google's Zanzibar paper reframes authorization, how to model schemas with…
- [Atlantis: The Terraform Automation Powerhouse](https://rawkode.academy/watch/atlantis-the-terraform-automation-powerhouse.md): Pepe Amengual, a core maintainer of Atlantis, joins David and Laura to walk through the Terraform pull request automation server: how it runs plan and apply…
- [Java for Serverless Functions](https://rawkode.academy/watch/java-for-serverless-functions.md): Otavio Santana joins Laura and David to dispel myths about modern Java on Kubernetes. They cover JVM container awareness, GraalVM native compilation for…
- [Simplify Production Debugging with ngrok: Live Demo and Traffic Policies Explained](https://rawkode.academy/watch/simplify-production-debugging-with-ngrok-live-demo-and-traffic-policies-explained.md): In this video, learn how to effectively use ngrok to debug and troubleshoot your applications in production. We'll explore a practical use case where…
- [Manage and Run AI/ML Models as OCI Artifacts with ORAS](https://rawkode.academy/watch/manage-and-run-ai-ml-models-as-oci-artifacts-with-oras.md): Josh Duffney and Feynman Zhou from Microsoft show how to package AI/ML models as OCI artifacts with ORAS, store them in any container registry, sign them with…
- [Dapr: The Future of Microservices](https://rawkode.academy/watch/dapr-the-future-of-microservices.md): Mark Fussell, CEO of Diagrid, explains how Dapr's building blocks (pub/sub, state, workflows, virtual actors) tame microservice complexity, and how Dapr Agents…
- [Building AI Applications with WebAssembly & Spin](https://rawkode.academy/watch/building-ai-applications-with-webassembly-spin.md): Thorsten Hans walks through Spin from scratch: a TypeScript hello-world, an HTTP API with itty-router, persistence via the key-value store and SQLite, then…
- [Simplifying Kubernetes Adoption Challenges](https://rawkode.academy/watch/simplifying-kubernetes-adoption-challenges.md): Koray Oksay (Kubermatic, CNCF Ambassador) joins David to discuss why Kubernetes adoption still trips up teams: skipping container fundamentals, picking between…
- [Securing Cloud-Native Workloads: Hands-On with Notary Project, ORAS, and Ratify](https://rawkode.academy/watch/securing-cloud-native-workloads-hands-on-with-notary-project-oras-and-ratify.md): Yi Zha from Microsoft demos how Notary Project, ORAS, and Ratify secure the container supply chain on Kubernetes: signing images with notation, storing…
- [Cloud Server-Side WebAssembly](https://rawkode.academy/watch/cloud-server-side-webassembly.md): Mikkel Mørk Hegnhøj from Fermyon joins David and Laura to unpack Spin 3.0, WASI 0.3, and the WebAssembly component model. They cover running Wasm on Kubernetes…
- [Navigating Kubernetes: Insights, Challenges, and the Release Cycle with Kat Cosgrove](https://rawkode.academy/watch/navigating-kubernetes-insights-challenges-and-the-release-cycle-with-kat-cosgrove.md): Kat Cosgrove joins David and Laura to unpack how SIG Release ships Kubernetes: team structure, CI signal, bug triage, press embargoes, maintainer burnout, and…
- [Unlocking Global Edge Services with ngrok](https://rawkode.academy/watch/unlocking-global-edge-services-with-ngrok.md): BGP routes the internet like Google Maps, but running your own POPs is hard. ngrok's global load balancer spans 8 POPs with automatic failover, demoed here…
- [Exploring ngrok's Traffic Policies for Secure Application Development](https://rawkode.academy/watch/exploring-ngroks-traffic-policies-for-secure-application-development.md): Using ngrok Traffic Policies and CEL expressions to lock down a Deno API: restrict the /metrics endpoint to specific IPs, then geo-restrict /uk to United…
- [From Kubernetes to Cloud Run: Chainguard's Journey](https://rawkode.academy/watch/from-kubernetes-to-cloud-run-chainguards-journey.md): Jason Hall walks through Chainguard's migration of its image-serving infrastructure from Kubernetes and Knative to Google Cloud Run, covering multi-region…
- [Hands-on with Cyhernetes](https://rawkode.academy/watch/hands-on-with-cyhernetes.md): Avital Tamir demos Cyphernetes, a Cypher-inspired query language for Kubernetes. Use ASCII-art graph patterns to match resources, traverse relationships across…
- [Hands-on with Comtrya](https://rawkode.academy/watch/hands-on-with-comtrya.md): Todd Martin, primary maintainer of Comtrya, joins David to walk through this Rust-based workstation configuration tool. They cover installation, writing…
- [Hands-on with Qovery](https://rawkode.academy/watch/hands-on-with-qovery.md): David goes hands-on with Qovery and CEO Romaric Philogene, deploying applications to a Kubernetes cluster on AWS. They explore the Rust-based engine, install…
- [Hands-on with RUNME](https://rawkode.academy/watch/hands-on-with-runme.md): Sebastian Tiedtke, CTO of Stateful, gives a hands-on tour of Runme: turning Markdown into runnable notebooks via the CLI and VS Code, mixing shell, Python and…
- [Simplify Kubernetes Ingress & API Gateways using ngrok](https://rawkode.academy/watch/simplify-kubernetes-ingress-and-api-gateways-using-ngrok-2.md): Install the ngrok Kubernetes operator via Helm, wire up GatewayClass, Gateway, and HTTPRoute against a custom ngrok.dev domain, route to three sample services,…
- [Hands-on with Daytona](https://rawkode.academy/watch/hands-on-with-daytona.md): Ivan Burazin demos Daytona, the open source dev environment manager. One daytona create spins up a workspace from a Git repo and devcontainer, running in local…
- [Hands-on Introduction to Restate](https://rawkode.academy/watch/hands-on-introduction-to-restate.md): Jack Kleeman walks through Restate, a single-binary durable execution engine written in Rust. We cover context.run, keyed state, suspending and resuming…
- [Developing & Building Open Source with Dagger](https://rawkode.academy/watch/developing-and-building-open-source-with-dagger.md): Mark Bernstein joins to Daggerize OpenUnison: writing a Dagger pipeline that spins up an ephemeral k3s cluster and deploys the OpenUnison Helm charts, swapping…
- [Developing & Building Open Source with Dagger for Kargo](https://rawkode.academy/watch/developing-and-building-open-source-with-dagger-for-kargo.md): Kat Cosgrove joins to Daggerize the Cargo project. We start with the Python SDK, explore container composition and caching, debug async issues, and end with a…
- [The Roast of the Linux Desktop](https://rawkode.academy/watch/the-roast-of-the-linux-desktop.md): David and Hayden trade OS war stories: David's Fedora/Universal Blue setup versus Hayden's Windows 11 with WSL2. They demo workflows, debate paper cuts like…
- [Building a Real Application with Guidepad](https://rawkode.academy/watch/building-a-real-application-with-guidepad.md): Reggie Wilkerson and Matt Citarella, the founders of Guidepad, join David to build a real application on the platform: an AWS Lambda replacement that runs…
- [Development Environments with Devenv](https://rawkode.academy/watch/development-environments-with-devenv.md): Domen Kozar joins to walk through Devenv, the Nix-based tool for declarative per-project dev environments. We cover devenv.nix structure, Rust language…
- [Writing New Micro-services Using AI with GitLab Duo Code Suggestions](https://rawkode.academy/watch/writing-new-micro-services-using-ai-with-gitlab-duo-code-suggestions.md): David uses GitLab Duo's chat and code suggestions to build a Python pipeline that extracts frames from a video with OpenCV, runs OCR via PyTesseract,…
- [Docker Build Cloud](https://rawkode.academy/watch/docker-build-cloud.md): Michael Irwin demos Docker Build Cloud, covering managed builders, context transfer, shared cache, collaborative debugging via Docker Desktop, native…
- [Hands-on Introduction to Docker Build Cloud](https://rawkode.academy/watch/hands-on-introduction-to-docker-build-cloud.md): Michael Irwin from Docker walks David through Docker Build Cloud, a hosted BuildKit service. They cover the shared remote cache, native AMD64/ARM64 builders,…
- [Hands-on Introduction to Infisical](https://rawkode.academy/watch/hands-on-introduction-to-infisical.md): Vlad Matsiiako gives a hands-on tour of Infisical, the open-source secrets manager: projects, environments and folders, RBAC and approval policies, versioning…
- [Restrict Access to Secure Files with Tetragon](https://rawkode.academy/watch/restrict-access-to-secure-files-with-tetragon.md): Write Tetragon TracingPolicy CRDs with kprobes to observe file access in a Kubernetes cluster, then filter on syswrite and paths under /etc using matchArgs,…
- [eBPF for Runtime Enforcement](https://rawkode.academy/watch/ebpf-for-runtime-enforcement.md): Install Tetragon on a Linux host via the GitHub release and as a systemd service, then deploy it to Kubernetes with Helm. Add a TracingPolicy that hooks kernel…
- [Hands-on Introduction to Grafbase](https://rawkode.academy/watch/hands-on-introduction-to-grafbase.md): Hands-on with Grafbase and founder Fredrik Bjork. We build standalone GraphQL subgraphs with the TypeScript SDK, compose products and reviews into a federated…
- [Hands-on Introduction to Zitadel](https://rawkode.academy/watch/hands-on-introduction-to-zitadel.md): Florian Forster, CEO and cofounder of Zitadel, walks through self-hosting the identity platform with Docker Compose, wiring up an OAuth proxy, and the…
- [Using Guidepad.io to Primitives to Simplify Future Facing Problems](https://rawkode.academy/watch/using-guidepad-io-to-primitives-to-simplify-future-facing-problems.md): Terraform's resource model only understands CRUD and polls for drift. Using Guidepad primitives (environments, control planes, state machines, requirements),…
- [Microservice Troubleshooting, Built for Developers](https://rawkode.academy/watch/microservice-troubleshooting-built-for-developers.md): Deploy the Lumigo operator to Kubernetes with Helm, auto-instrument the OpenTelemetry demo app, then walk the system map, transactions, timeline traces, and…
- [Hands-on Introduction to Quickwit](https://rawkode.academy/watch/hands-on-introduction-to-quickwit.md): Francois Massot walks through Quickwit hands-on: spinning up an index, ingesting logs and OpenTelemetry traces on Kubernetes, querying via the UI and CLI, and…
- [Hands-on Introduction to Gitea Actions](https://rawkode.academy/watch/hands-on-introduction-to-gitea-actions.md): Matti Ranta joins David to walk through Gitea Actions end-to-end: installing act-runner, registering it against Gitea Cloud, and writing a workflow for a Go…
- [Hands-on Introduction to Dapr](https://rawkode.academy/watch/hands-on-introduction-to-dapr.md): Hands-on tour of Dapr's distributed application runtime: building blocks and sidecar pattern, state management with the JavaScript SDK and Redis, outbox…
- [Komodor Vs. Klustered](https://rawkode.academy/watch/komodor-vs-klustered.md): Komodor's CTO and engineers debug a maliciously broken Kubernetes cluster live, using their timeline to track down Cilium CNI RBAC, Flux GitOps reconciliation,…
- [Making Kubernetes Network Policies Effortless with Otterize](https://rawkode.academy/watch/making-kubernetes-network-policies-effortless-with-otterize.md): Otterize replaces hand-written Kubernetes NetworkPolicies with intent-based access control: developers declare which services they call in ClientIntents CRs,…
- [Feature Flags via GitOps with Flipt](https://rawkode.academy/watch/feature-flags-via-gitops-with-flipt.md): Mark Phelps and George MacRorie show how Flipt manages feature flags as code, syncing flag state from a Git repository (Gitea) and OCI registries. Demo covers…
- [Timoni: CUE Powered Package Management for Kubernetes](https://rawkode.academy/watch/timoni-cue-powered-package-management-for-kubernetes.md): Stefan Prodan joins to introduce Timoni, a Kubernetes package manager built on CUE and OCI artifacts. Modules and bundles replace Helm charts and YAML…
- [InfluxDB 3 & Rust](https://rawkode.academy/watch/influxdb-3-and-rust.md): InfluxDB, a time series database, underwent a major rewrite to create InfluxDB 3.0, also known as IOx. The decision to rewrite the database was driven by the…
- [Trust and Validation in AI](https://rawkode.academy/watch/trust-and-validation-in-ai.md): JJ Asgar joins to discuss IBM watsonx.ai and why enterprises distrust today's black-box AI. The conversation covers training data provenance, The Pile, Hugging…
- [Kluctl New Features & Updates](https://rawkode.academy/watch/kluctl-new-features-and-updates.md): Alexander Block returns to walk through what's new in Kluctl: the GitOps controller for pull-based deploys alongside the CLI, the WebUI for visibility, and a…
- [ngrok's Kubernetes Ingress Controller is AMAZING](https://rawkode.academy/watch/ngroks-kubernetes-ingress-controller-is-amazing-2.md): Walks through ngrok's Kubernetes Ingress Controller as an alternative to a cloud load balancer on EKS. Installs the controller via Helm, exposes a service…
- [Hands-on Introduction to GitOps with Gimlet](https://rawkode.academy/watch/hands-on-introduction-to-gitops-with-gimlet.md): Laszlo Fogas walks through Gimlet, a GitOps developer platform that pairs Flux with the OneChart Helm chart and a UI. We install it on k3d, wire up GitHub,…
- [The Magic of eBPF](https://rawkode.academy/watch/the-magic-of-ebpf.md): Liz Rice explains how eBPF lets you safely run programs inside the Linux kernel, why the verifier makes it safer than kernel modules, and how projects like…
- [Empowering EKS Cluster Deployments and GitOps with Portainer's Simplified Workflow](https://rawkode.academy/watch/empowering-eks-cluster-deployments-and-gitops-with-portainers-simplified-workflow.md): Provision an AWS EKS cluster from the Portainer UI, deploy the Google Cloud Platform microservices demo via a Git manifest, then hit the cluster with…
- [wei/pull and tea.xyz](https://rawkode.academy/watch/wei-pull-and-tea-xyz.md): Brian demos wei/pull, a GitHub app that auto-opens pull requests to keep forks in sync with upstream. David then walks through tea.xyz (now pkgx), running…
- [aquaproj & Dagger](https://rawkode.academy/watch/aquaproj-and-dagger.md): Brian demos aquaproj for pinning CLI tool versions per-project and globally via its YAML registry, then David walks through a Go Dagger pipeline that builds a…
- [podmansh & Infisical](https://rawkode.academy/watch/podmansh-and-infisical.md): Brian demos podmansh, using Podman containers as Linux login shells configured via Quadlet systemd units with three isolation levels. David demos Infisical for…
- [Hands-on Tutorial of Project Sveltos](https://rawkode.academy/watch/hands-on-tutorial-of-project-sveltos.md): Live tutorial with Gianluca Mardente on Project Sveltos. He walks through ClusterProfile add-on deployment, the classifier with Lua filters, dry-run and…
- [Ambient Mesh with Marino Wijay & Matt Turner](https://rawkode.academy/watch/ambient-mesh-with-marino-wijay-and-matt-turner.md): Marino Wijay and Matt Turner unpack Istio Ambient Mesh, walking through ztunnel, HBONE, and waypoint proxies, the trade-offs against sidecars, and how eBPF,…
- [Universal Blue & System Initiative](https://rawkode.academy/watch/universal-blue-and-system-initiative.md): Brian shows his daily-driver Bluefin desktop, a Universal Blue image with rpm-ostree rollbacks, Distrobox, Nix and Flatpak baked in. David then demos System…
- [Is WebAssembly the Future of Cloud Native?](https://rawkode.academy/watch/is-webassembly-the-future-of-cloud-native.md): In this episode, hosts David and Laura, sit down with Laslo Fogas; a self proclaimed WebAssembly sceptic. They discuss the future of Cloud Native and improving…
- [Hands-on Tutorial of mirrord](https://rawkode.academy/watch/hands-on-tutorial-of-mirrord.md): Aviram and Tal from MetalBear show how mirrord runs a local process inside a remote Kubernetes pod's context, mirroring traffic, env vars and files, then demo…
- [Dynamic Scrape Targets](https://rawkode.academy/watch/dynamic-scrape-targets.md): Configure the Parca config map with a Prometheus-style scrape job that uses Kubernetes service discovery, keeps pods by parca.dev annotations, and adds the…
- [Parca & Grafana](https://rawkode.academy/watch/parca-and-grafana.md): Add the Grafana Parca data source plugin, point it at your Parca server, and debug a misbehaving app with flame graphs and function filters without leaving…
- [A Hands-on Overview of guidepad](https://rawkode.academy/watch/a-hands-on-overview-of-guidepad.md): David builds a Pocket-style bookmark app on Guidepad. Create and list entities from the CLI, auto-enrich URLs with Microlink metadata and ChatGPT summaries,…
- [BlueSky Embed with Spin WebAssembly](https://rawkode.academy/watch/bluesky-embed-with-spin-webassembly.md): Build a Bluesky post embed with Spin and WebAssembly. We wire up a Lit web component to a TypeScript Spin backend, handle CORS, cache auth tokens in the…
- [Event-Driven Architectures at Wix](https://rawkode.academy/watch/event-driven-architectures-at-wix.md): Natan Silnitsky shares how Wix operates 2,500+ microservices and 70 billion Kafka events per day. We cover when to choose event-driven over RPC, schema…
- [Integrating Spin with Static Site Generators (SSGs)](https://rawkode.academy/watch/integrating-spin-with-static-site-generators-ssgs.md): Builds a multi-component Spin app, a JavaScript backend that calls OpenAI to detect languages plus a static frontend, then swaps the vanilla HTML for an Astro…
- [Introduction & Overview of Parca for Continuous Profiling](https://rawkode.academy/watch/introduction-and-overview-of-parca-for-continuous-profiling.md): Diagnose a runaway CPU spike on Kubernetes with Parca, the open-source continuous profiler from Polar Signals. Deploy the server and eBPF agent, explore icicle…
- [Kubernetes Security with Identity & OIDC](https://rawkode.academy/watch/kubernetes-security-with-identity-and-oidc.md): Marc Boorshtein, CTO of Tremolo Security, explains why long-lived kubeconfig certificates are an anti-pattern, how OIDC and impersonation deliver revocable…
- [Hands-on Introduction to KRR (Kubernetes Resource Recommendations)](https://rawkode.academy/watch/hands-on-introduction-to-krr-kubernetes-resource-recommendations.md): Natan Yellin from Robusta walks David through KRR, a CLI that queries existing Prometheus data to recommend CPU and memory requests and limits for Kubernetes…
- [Testing a 3-Tier Application with Dagger's Go SDK](https://rawkode.academy/watch/testing-a-3-tier-application-with-daggers-go-sdk.md): Build and test a Go backend, JavaScript frontend, and Postgres database using Dagger's Go SDK. Covers composable pipelines, secret redaction, dependent service…
- [Live Demo of DevPod](https://rawkode.academy/watch/live-demo-of-devpod.md): Lukas Gentele from Loft Labs demos DevPod, walking through the UI and CLI, the Docker provider, spinning up a workspace on Google Cloud, custom YAML providers,…
- [Migrating to Kubernetes](https://rawkode.academy/watch/migrating-to-kubernetes.md): Rachel Sweeney shares Built Technologies' migration to Kubernetes: when (and when not) to adopt it, taming developer experience with DevSpace, and the…
- [Supply Chain Security with a CLI: valint](https://rawkode.academy/watch/supply-chain-security-with-a-cli-valint.md): Tutorial on Valint, Scribe Security's supply chain CLI. Generate SLSA and CycloneDX SBOMs for containers, Git repos, and Go projects, sign evidence with…
- [Cloud, Containers, & Kubernetes](https://rawkode.academy/watch/cloud-containers-and-kubernetes.md): Eli (Scaleway), Neil (Portainer), and Abdel (Google) join the inaugural Cloud Native Compass to debate cloud pricing beyond the big three, whether Docker is…
- [Event Sourcing](https://rawkode.academy/watch/event-sourcing.md): In this episode, David interviews Frank, a staff engineer at Personio, a big HR company based out of Germany. Frank has been in the industry for close to 15…
- [Server-Side WebAssembly](https://rawkode.academy/watch/server-side-webassembly.md): Kate Goldenring (Fermyon), Connor Hicks (Suborbital), and Kevin Hoffman (Cosmonic/wasmCloud) explore server-side WebAssembly: WASI, the component model,…
- [Building & Running Spin Applications with Docker](https://rawkode.academy/watch/building-and-running-spin-applications-with-docker.md): Spin 1.0 ships Spin apps as OCI artifacts. Push to GHCR with spin registry push, run with spin up -f, then build a Dockerfile so docker run and docker compose…
- [Secure Container Images The EASY Way](https://rawkode.academy/watch/secure-container-images-the-easy-way.md): Slim Toolkit probes a running container with HTTP or exec probes to learn which files the workload actually uses, then rebuilds a minimal image. Demos shrink…
- [Improve Your Supply Chain Security Pipeline with Scribe Security](https://rawkode.academy/watch/improve-your-supply-chain-security-pipeline-with-scribe-security.md): Walkthrough of Scribe Security's free tier, scanning a forked Directus project to review SLSA compliance, vulnerabilities, the SBOM and licenses, then wiring…
- [Stateful WebAssembly Apps with Key-Value Stores](https://rawkode.academy/watch/stateful-webassembly-apps-with-key-value-stores.md): Let's take a look at storing state in our Spin applications, using the Spin SDK KV stores; powered by SQLite.
- [Custom Controls with GPT](https://rawkode.academy/watch/custom-controls-with-gpt.md): Armo Platform's ChatGPT integration turns plain-English prompts into Rego for Kubescape custom controls. We build a "no latest tag" rule, then a CAPSYSADMIN…
- [Automated Kubernetes Operations with Komodor and vcluster](https://rawkode.academy/watch/automated-kubernetes-operations-with-komodor-and-vcluster.md): Integrate Komodor with vCluster to auto-deploy the Komodor agent into every ephemeral virtual cluster via Helm init charts, then use Komodor to observe and…
- [Bringing Clarity to Infrastructure as Code with Env0](https://rawkode.academy/watch/bringing-clarity-to-infrastructure-as-code-with-env0.md): Walk through env0 orchestrating a multi-IaC stack: Pulumi spins up a Civo cluster, Terraform manages Cloudflare DNS, and CDKTF joins via workflows. Covers…
- [Writing Server Side WebAssembly with Python](https://rawkode.academy/watch/writing-server-side-webassembly-with-python.md): Walk through Fermyon's Spin Python SDK: installing the py2wasm plugin, returning JSON, parsing headers, body, and query strings, and making outbound HTTP…
- [Hands-on Introduction to KWasm](https://rawkode.academy/watch/hands-on-introduction-to-kwasm.md): Christopher and Sven from Liquid Reply walk through KWasm, the operator that installs containerd Wasm shims onto nodes via annotations. We deploy it to a kind…
- [Helm, Kustomize, and Pod Security Policies](https://rawkode.academy/watch/helm-kustomize-and-pod-security-policies.md): Install Portainer on Kubernetes two ways (helm upgrade --install and kubectl -k with Kustomize), then use Portainer's UI to enable pod security constraints…
- [Hands-on Introduction to GitGat](https://rawkode.academy/watch/hands-on-introduction-to-gitgat.md): Barak Brudo from Scribe Security walks through GitGat, an open source tool written in Rego on OPA that audits GitHub security posture: 2FA, branch protection,…
- [CNCF Glossary & Linkerd with Catherine Paganini & Jason Morgan](https://rawkode.academy/watch/cncf-glossary-and-linkerd-with-catherine-paganini-and-jason-morgan.md): Catherine Paganini and Jason Morgan explain how the vendor-neutral CNCF Cloud Native Glossary makes cloud native terms accessible (and localised) for…
- [Server Side WebAssembly at the Edge](https://rawkode.academy/watch/server-side-webassembly-at-the-edge.md): Deploying the Fermyon Platform to Equinix Metal with Terraform, using BGP anycast across Dallas and Amsterdam to route Spin WebAssembly applications to the…
- [Keep Authentication Simple with Portainers OAuth Connectors](https://rawkode.academy/watch/keep-authentication-simple-with-portainers-oauth-connectors.md): Swap Portainer's local user management for single sign-on. Walk through configuring OAuth with GitHub and Google, registering client IDs and secrets,…
- [Your Own WebAssembly Cloud](https://rawkode.academy/watch/your-own-webassembly-cloud.md): Deploy a Spin app to Fermyon Cloud, then stand up your own self-hosted WebAssembly platform on Civo with the fermyon/installer Terraform automation, walking…
- [Have You Ever Seen a Production Grade, Server Side, WebAssembly Application?](https://rawkode.academy/watch/have-you-ever-seen-a-production-grade-server-side-webassembly-application.md): Justin, a senior solutions engineer at Fermyon, built his own social network on Spin. Join us as we explore the codebase, add a new feature, and talk about…
- [What's New with Spin (v0.8)](https://rawkode.academy/watch/whats-new-with-spin-v0-8.md): A tour of Spin 0.8: the Itty-style JavaScript router for multi-path components, TLS support for outbound Postgres and MySQL connections, and first-class OCI…
- [Sentry, Prometheus, & Grafana Integrations](https://rawkode.academy/watch/sentry-prometheus-and-grafana-integrations.md): Part 2 of the Komodor tutorial: wire Sentry, Prometheus Alertmanager, and Grafana alerting into Komodor so application exceptions and cluster alerts appear…
- [Hands-on Overview of Komodor](https://rawkode.academy/watch/hands-on-overview-of-komodor.md): Hands-on tour of Komodor for Kubernetes troubleshooting. Installing the agent via Helm, browsing service and event timelines, best-practice checks,…
- [NodeJS SDK (TypeScript)](https://rawkode.academy/watch/nodejs-sdk-typescript.md): A walkthrough of Fermyon Spin's Node.js SDK in TypeScript: handling request headers, ArrayBuffer bodies, JSON parsing with Zod for runtime safety, query…
- [Go SDK](https://rawkode.academy/watch/go-sdk.md): Walk through the Spin Go SDK by writing an HTTP handler, reading request headers, body, and query parameters, then making outbound HTTP requests and…
- [Monitoring Your Security Posture with Prometheus](https://rawkode.academy/watch/monitoring-your-security-posture-with-prometheus.md): Run Kubescape as an in-cluster operator, scrape its Prometheus metrics via a ServiceMonitor, and import the Grafana dashboard to track cluster risk score,…
- [Building Custom Frameworks](https://rawkode.academy/watch/building-custom-frameworks.md): Build a custom Kubescape framework two ways: the easy path through ARMO Cloud's UI, then a local-only flow that authors controls in CUE, exports to JSON, and…
- [Rust SDK Walkthrough](https://rawkode.academy/watch/rust-sdk-walkthrough.md): A hands-on tour of Spin's Rust SDK: writing and routing an HTTP component, reading headers, decoding the request body, parsing query strings, and making…
- [Why WebAssembly? Code Once, Run Everywhere](https://rawkode.academy/watch/why-webassembly-code-once-run-everywhere.md): Kicking off the Fermyon Spin course with the why of WebAssembly. A Rust password validator becomes a shared domain crate consumed by a Spin HTTP backend and a…
- [Hands-on Introduction to WunderGraph](https://rawkode.academy/watch/hands-on-introduction-to-wundergraph.md): Jens Neuse joins David for a hands-on tour of WunderGraph, introspecting data sources, defining GraphQL and TypeScript operations, generating type-safe…
- [Automating Deployments to the Edge](https://rawkode.academy/watch/automating-deployments-to-the-edge.md): Using Terraform CDK, we provision four bare metal nodes on Equinix Metal with Anycast BGP, then use Portainer's Edge Compute to deploy an NGINX container to…
- [Advanced Kubernetes Scheduling](https://rawkode.academy/watch/advanced-kubernetes-scheduling.md): A deep dive into Kubernetes pod scheduling, from nodeName and node selectors through node and pod affinity, topology spread constraints, priority classes and…
- [Kubescape CLI & GitHub Action](https://rawkode.academy/watch/kubescape-cli-and-github-action.md): Use the Kubescape CLI to scan plain manifests, Kustomize overlays, and Helm charts against frameworks like NSA/CISA, then wire the GitHub Action into CI to…
- [Kubescape Operator & SaaS](https://rawkode.academy/watch/kubescape-operator-and-saas.md): Deploy the Kubescape operator across AKS, EKS, and GKE with Pulumi, then use Kubescape Cloud to triage configuration risks, CVEs, and RBAC across workloads…
- [Monitoring Kubernetes with Prometheus & Robusta](https://rawkode.academy/watch/monitoring-kubernetes-with-prometheus-and-robusta.md): Natan Yellin and Eric return to walk through Robusta's playbooks and enrichers, demoing CrashLoopBackOff and OOMKill alerts, custom Stack Overflow enrichment,…
- [Continuously Deploy with GitOps](https://rawkode.academy/watch/continuously-deploy-with-gitops.md): Bring GitOps to non-Kubernetes environments using Portainer Stacks backed by a Git repository and a docker-compose.yml, with continuous delivery triggered by…
- [Managing TLS](https://rawkode.academy/watch/managing-tls.md): Three ways to give Portainer real TLS certificates: keep the built-in self signed certs, run Certbot on the host with a systemd timer for renewals, or put…
- [Hands-on Introduction to Namespace](https://rawkode.academy/watch/hands-on-introduction-to-namespace.md): Hugo Santos walks through Namespace, an end-to-end application platform built on Kubernetes. We bootstrap a local K3s cluster, define services in CUE, build…
- [Full Stack WebAssembly Applications with Spin](https://rawkode.academy/watch/full-stack-webassembly-applications-with-spin.md): Building a full-stack WebAssembly application with Spin: a Bartholomew CMS frontend plus two API components, a Rust addition service and a Grain subtraction…
- [Alex Jones & Alistair Hey](https://rawkode.academy/watch/alex-jones-and-alistair-hey.md): Alex Jones and Alistair Hay break each other's Kubernetes clusters. Alex hunts a disabled replica set controller, a blocking NetworkPolicy, and a tampered…
- [Hands-on Introduction to Spin: WebAssembly Microservices](https://rawkode.academy/watch/hands-on-introduction-to-spin-webassembly-microservices.md): David explores Fermyon's Spin, comparing its Nomad-based runtime to Kubernetes via Krustlet, then builds a Rust HTTP microservice backed by Prisma and…
- [Hans Kristian Flaatten & Zach Wachtel](https://rawkode.academy/watch/hans-kristian-flaatten-and-zach-wachtel.md): Hans Kristian Flaatten and Zach Wachtel tackle two broken Kubernetes clusters, debugging a bad kubeconfig IP, an encryption provider config, a disk IO throttle…
- [Hands-on Introduction to helm-dashboard](https://rawkode.academy/watch/hands-on-introduction-to-helm-dashboard.md): Andre Pokhilko from Komodor walks David through Helm Dashboard, an open source Helm plugin that puts a focused web UI over the Helm CLI. The demo covers…
- [Hands-on Introduction to kluctl](https://rawkode.academy/watch/hands-on-introduction-to-kluctl.md): Alexander Block, creator of Kluctl, walks through the deployment problems it was built to solve and demos targets, templated vars, and a diff-first…
- [Hands-on Introduction to Portainer](https://rawkode.academy/watch/hands-on-introduction-to-portainer.md): Co-founder Neil Cresswell joins David to demo Portainer as a universal manager for Kubernetes, Docker, Swarm, and Nomad. Covers namespace policies, OPA…
- [Hands-on Introduction to DevStand](https://rawkode.academy/watch/hands-on-introduction-to-devstand.md): Max shows how DevStand lowers the Kubernetes barrier for application developers, with a visual editor and VS Code extension that authors manifests, ingress,…
- [Hands-on Introduction to DevSpace](https://rawkode.academy/watch/hands-on-introduction-to-devspace.md): Leon from Loft joins David for a hands-on tour of DevSpace. They initialise a Node.js project, deploy it to Kubernetes with a Helm chart, swap into dev mode,…
- [Hands-on Introduction to Gitea](https://rawkode.academy/watch/hands-on-introduction-to-gitea.md): David is joined by Matti (project owner) to install Gitea from binary on an Equinix Metal Ubuntu box, walk the web installer with SQLite, then tour repos, SSH…
- [Hands-on Introduction to OpenUnison](https://rawkode.academy/watch/hands-on-introduction-to-openunison.md): Marc Boorshtein walks through OpenUnison as an identity portal for Kubernetes, covering SSO into the dashboard and kubectl, the ou-control deployer, the…
- [Hands-on Introduction to DockerSlim](https://rawkode.academy/watch/hands-on-introduction-to-dockerslim.md): Martin Wimpress and Ivan Velichko join David to walk through DockerSlim's build, xray, and probing workflow, then live-slim a CentOS+curl image and a Node.js…
- [Hands-on Introduction to Kubevious](https://rawkode.academy/watch/hands-on-introduction-to-kubevious.md): Ruben Hakopian walks through Kubevious, installing it via Helm and exploring the application-centric UI, time machine, custom rules, and the Guard CLI for…
- [Hands-on Introduction to Acorn](https://rawkode.academy/watch/hands-on-introduction-to-acorn.md): Darren Shepherd, chief architect at Acorn Labs and creator of k3s, walks through Acorn: an Acornfile-driven way to package containers, secrets, and ingress…
- [Hands-on Introduction to Kamaji](https://rawkode.academy/watch/hands-on-introduction-to-kamaji.md): Adriano Pezzuto walks through Kamaji, running tenant Kubernetes control planes as pods inside a management cluster, then provisions a tenant and joins AWS…
- [Jetstack & CrashBeerBackOff](https://rawkode.academy/watch/jetstack-and-crashbeerbackoff.md): Team JetStack and Team CrashBeerBackOff tackle two broken Kubernetes clusters, debugging containerd log limits, a disabled deployment controller, kubelet…
- [Acing the DevOps Interview](https://rawkode.academy/watch/acing-the-devops-interview.md): Rohit Ghumare maps out a DevOps learning roadmap with Rawkode: Linux and networking, containers, Kubernetes, cloud, CI/CD, infrastructure as code and…
- [Global DNS with BGP](https://rawkode.academy/watch/global-dns-with-bgp.md): Run CoreDNS in three metros on Equinix Metal and advertise a single anycast IP over BGP with BIRD, then reproduce the whole setup with Pulumi and CUE so the…
- [Let's Take a Look at Teleport 10](https://rawkode.academy/watch/lets-take-a-look-at-teleport-10.md): Ben Abbott (DevRel at Teleport) walks through what's new in Teleport 10: passwordless access via WebAuthn, FIDO and YubiKeys, resource-level access requests,…
- [Hands-on Introduction to kpt](https://rawkode.academy/watch/hands-on-introduction-to-kpt.md): Brian Grant and Justin Santa Barbara from Google walk through kpt hands-on: installing the CLI and Porch, registering blueprint and deployment Git repos,…
- [Introduction to BGP](https://rawkode.academy/watch/introduction-to-bgp.md): Rawkode and Jeremy Tanner introduce BGP, covering autonomous systems, prefixes, anycast routing and CDN failover. They then deploy NGINX across two Equinix…
- [The Community Vs. Rawkode](https://rawkode.academy/watch/the-community-vs-rawkode.md): Community volunteers each get ten minutes to debug two broken Kubernetes clusters live. Cluster one hides a renamed etcd static pod manifest; cluster two has a…
- [IBM & Nisum](https://rawkode.academy/watch/ibm-and-nisum.md): Teams from IBM and Nisum take on broken Kubernetes clusters live, hunting down sabotaged Cilium operator labels, a tampered CoreDNS ConfigMap, and other breaks…
- [Marino Wijay & John Anderson](https://rawkode.academy/watch/marino-wijay-and-john-anderson.md): Marino Wijay and John Anderson fix a sabotaged cluster: Kyverno admission webhooks, a Not Ready node with a bad kubelet eviction flag, controller manager RBAC,…
- [GitHub Authentication](https://rawkode.academy/watch/github-authentication.md): Live walkthrough of configuring single sign on against GitHub teams and organizations for an existing Teleport cluster: creating the OAuth app, writing the…
- [Adobe & Zapier](https://rawkode.academy/watch/adobe-and-zapier.md): Teams from Adobe and Zapier debug each other's broken Kubernetes clusters. Issues span admission webhooks, Cilium networking, image pull policies, resource…
- [Rawkode & The Null Channel Vs. The Community](https://rawkode.academy/watch/rawkode-and-the-null-channel-vs-the-community.md): Rawkode teams up with Marek Houns (The Null Channel) to debug two community-submitted broken clusters featuring a fake kubelet binary, a restricted-bash shell,…
- [Klustered Teams - Aerospike & PixieLabs](https://rawkode.academy/watch/klustered-teams-aerospike-and-pixielabs.md): Teams Aerospike and Pixie Labs tackle broken Kubernetes clusters via Teleport. Aerospike untangles etcd auth, ImagePullPolicy and registry DNS; Pixie hits etcd…
- [22. Leigh Capili vs. Marcus Noble](https://rawkode.academy/watch/22-leigh-capili-vs-marcus-noble.md): Leigh Capili and Marcus Noble debug broken Kubernetes clusters: kubelet systemd units, kubeconfig ports, admission webhooks from Kyverno, Pod Security…
- [Q&A - Let's Meet Teleport 9](https://rawkode.academy/watch/q-and-a-lets-meet-teleport-9.md): Ben Abbott joins David to walk through Teleport 9, covering Machine ID for automated workloads with Ansible, new database access for Redis, MariaDB and SQL…
- [Klustered Teams - Chainguard Vs. Chainguard](https://rawkode.academy/watch/klustered-teams-chainguard-vs-chainguard-2.md): Two Chainguard teams race to repair broken Kubernetes clusters, digging into containerd config, service selectors, Cilium CNI, Postgres StatefulSets, corrupted…
- [Klustered Teams - Armo & Kong](https://rawkode.academy/watch/klustered-teams-armo-and-kong.md): Teams Kong and Armo trade broken clusters, debugging liveness probes, Postgres ConfigMap init scripts, a malicious mutating webhook, a rogue NodePort process,…
- [Introducing apko & melange](https://rawkode.academy/watch/introducing-apko-and-melange.md): Ariadne Conill, primary author of apko and melange, walks through assembling distroless OCI images from APK packages: building an NGINX image with apko,…
- [Klustered Teams - PolarSignals & Pulumi](https://rawkode.academy/watch/klustered-teams-polarsignals-and-pulumi.md): Teams from Polar Signals and Pulumi tackle broken Kubernetes clusters, chasing a controller manager pointed at the wrong API server address, Postgres DNS…
- [22. Borko Vs. Bojan](https://rawkode.academy/watch/22-borko-vs-bojan.md): Identical twins Borko and Bojan tackle broken Kubernetes clusters. Borko hunts a malformed image name and a Cilium deny policy, then fixes a CoreDNS rewrite.…
- [Klustered 21](https://rawkode.academy/watch/klustered-21.md): Two broken clusters from Adyen and William. Debug a Cilium CNI image typo, chase a rogue service rewriting resolv.conf, then unpick etcd client auth, a…
- [Klustered Teams - Ambassador Labs & Fairwinds](https://rawkode.academy/watch/klustered-teams-ambassador-labs-and-fairwinds.md): Ambassador Labs and Fairwinds break each other's Kubernetes clusters. Fixes include OOM memory limits, a CoreDNS rewrite hijack pointing to a rogue Postgres in…
- [Hands-on Introduction to Kubescape](https://rawkode.academy/watch/hands-on-introduction-to-kubescape.md): Ben Hirschberg from ARMO walks through Kubescape, scanning clusters and YAML against the NSA/CISA hardening framework, writing controls in Rego on OPA,…
- [Workshop - Access Control & Roles Deep Dive](https://rawkode.academy/watch/workshop-access-control-and-roles-deep-dive.md): Deep dive into Teleport RBAC: explore the editor, auditor, and access base roles, modify user traits and logins, restrict access with node labels, build…
- [Klustered Teams - Giant Swarm & Wildlife Studios](https://rawkode.academy/watch/klustered-teams-giant-swarm-and-wildlife-studios.md): Teams from Giant Swarm and Wildlife Studios swap broken Kubernetes clusters and debug live, working through Cilium CNI sabotage, tampered pause images,…
- [Hands-on Introduction to Trivy](https://rawkode.academy/watch/hands-on-introduction-to-trivy.md): Rory McCune joins to demo Trivy, Aqua Security's scanner for container images, filesystems, Git repos, Kubernetes manifests, and Terraform. Hands-on…
- [Klustered 20](https://rawkode.academy/watch/klustered-20.md): Russell and Marek return to break two clusters. Russell hides a recompiled kubectl, a rogue process killing deployments, a CoreDNS ConfigMap edit, and a…
- [Hands-on Introduction to SchemaHero](https://rawkode.academy/watch/hands-on-introduction-to-schemahero.md): Mark Campbell from Replicated joins to demo SchemaHero, a Kubernetes operator that turns database schemas into declarative custom resources. We install it via…
- [Hands-on Introduction to Parca](https://rawkode.academy/watch/hands-on-introduction-to-parca.md): Frederic Branczyk of Polar Signals joins to install Parca on a fresh Kubernetes cluster, walk through the eBPF agent and server, and explore flame graphs,…
- [Part 2 - Tutorial 1: Installation](https://rawkode.academy/watch/part-2-tutorial-1-installation.md): Walk through five ways to install InfluxDB 2: brew on macOS, the apt repository on Debian/Ubuntu, the yum repo on Red Hat, the official Docker image with a…
- [Part 3 - Tutorial 2: Getting Started with InfluxDB](https://rawkode.academy/watch/part-3-tutorial-2-getting-started-with-influxdb.md): Walk through the InfluxDB 2 first-run setup (admin user, org, bucket), then tour the UI: Data (Telegraf plugins, scrapers, tokens), Explore, Boards, Tasks for…
- [Part 4 - Tutorial 3: Collecting Metrics with Telegraf](https://rawkode.academy/watch/part-4-tutorial-3-collecting-metrics-with-telegraf.md): Walk through Telegraf running against InfluxDB 2: remote TOML config, agent options like batch size, buffer limit, jitter and precision, fanning out to a…
- [Part 5 - Workshop 1: Introduction to Flux](https://rawkode.academy/watch/part-5-workshop-1-introduction-to-flux.md): Workshop on the Flux query language for InfluxDB 2: set up InfluxDB and Telegraf, write queries with from, range, filter, yield, group, window, and…
- [Workshop - Database Access (mongoDB) with Teleport](https://rawkode.academy/watch/workshop-database-access-mongodb-with-teleport.md): Use Teleport's database proxy to provide identity-aware, certificate-based access to MongoDB. Covers configuring a self-hosted mongod with X.509 auth, issuing…
- [Workshop - Deploying Teleport on Kubernetes](https://rawkode.academy/watch/workshop-deploying-teleport-on-kubernetes.md): Hands-on workshop deploying Teleport on Kubernetes using the official Helm charts. Covers the teleport-cluster chart with LoadBalancer and Ingress, the…
- [Workshop - Database Access (Postgres) with Teleport](https://rawkode.academy/watch/workshop-database-access-postgres-with-teleport.md): Find out more at https://rawkode.live/teleport
- [What's New in Teleport 8?](https://rawkode.academy/watch/whats-new-in-teleport-8.md): Steven Martin walks through what landed in Teleport 8: Windows desktop access without RDP, single-port 443 connectivity, WebAuthn with Touch ID, EC2 node…
- [Klustered Teams: Raft & RX-M](https://rawkode.academy/watch/klustered-teams-raft-and-rx-m.md): Two teams, RXM and Raft, debug broken Kubernetes clusters. RXM chase an etcd cert path typo and an API server namespace typo, then a missing Postgres manifest.…
- [Part 6. Workshop - Application Access with Teleport](https://rawkode.academy/watch/part-6-workshop-application-access-with-teleport.md): Live workshop covering Teleport application access: configure auth/proxy with ACME, join a worker node, then expose NGINX and Grafana as Teleport apps.…
- [Part 4. Workshop - Server Access with Teleport](https://rawkode.academy/watch/part-4-workshop-server-access-with-teleport.md): Hands-on Teleport workshop covering agent node registration, static and dynamic labels, user and role management, eBPF enhanced session recording, and…
- [Part 3. Tutorial - Running Teleport with Docker](https://rawkode.academy/watch/part-3-tutorial-running-teleport-with-docker.md): Run Teleport in containers: inspect the official image, generate a config with the configure subcommand, mount it alongside a named volume for state, and…
- [Part 2. Tutorial -  Installing Teleport](https://rawkode.academy/watch/part-2-tutorial-installing-teleport.md): Three ways to install Teleport on Linux: the Debian APT repo, the Red Hat YUM repo, and a curl script for other distros. Then start the server, create the…
- [Klustered Teams: Control Plane & Learnk8s](https://rawkode.academy/watch/klustered-teams-control-plane-and-learnk8s.md): Control Plane and Learnk8s go head-to-head debugging each other's broken Kubernetes clusters. Issues include a rogue iptables rule, an etcd read-only manifest,…
- [Hands-on Introduction to Tyk](https://rawkode.academy/watch/hands-on-introduction-to-tyk.md): Andy Smith and Budha Bhattacharya from Tyk walk through the open-source API gateway: installing it on Kubernetes with Helm, configuring keyless and API-key…
- [Hands-on Introduction to jsPolicy](https://rawkode.academy/watch/hands-on-introduction-to-jspolicy.md): Lukas Gentele from Loft Labs joins to introduce jsPolicy, a Kubernetes admission controller that lets you write validating, mutating, and controller policies…
- [Klustered #19](https://rawkode.academy/watch/klustered-19.md): Matt Turner and Borko debug two broken Kubernetes clusters live. Issues include a missing API server, etcd resource limits, a decoy DaemonSet, DNS policy,…
- [Crossplane in Action](https://rawkode.academy/watch/crossplane-in-action.md): Viktor Farcic walks through Crossplane as a control plane for everything, contrasts it with Terraform and Pulumi, then live-demos provisioning a GKE cluster,…
- [Hands-on Introduction to CueBlox](https://rawkode.academy/watch/hands-on-introduction-to-cueblox.md): Brian Ketelsen and David walk through CueBlox: defining content schemas in CUE, validating Markdown/YAML data, serving it as a GraphQL API, and extending the…
- [Should we still be using docker-compose for local development?](https://rawkode.academy/watch/should-we-still-be-using-docker-compose-for-local-development.md): Bret Fisher walks through Docker Compose v2 and the new Compose Spec: the rewritten Go CLI as a Docker plugin, profiles for grouping services, dependson with…
- [Klustered #18](https://rawkode.academy/watch/klustered-18.md): Eric Smalling and Carlos Santana race the clock to debug broken Kubernetes clusters. Expect rogue static pods, ZomboCom surprises, broken Cilium network…
- [Hands-on with BuildKit & buildx](https://rawkode.academy/watch/hands-on-with-buildkit-and-buildx.md): BuildKit maintainer Tõnis Tiigi joins David to rebuild a Go Dockerfile from scratch, covering multi-stage builds, cache mounts, local binary outputs,…
- [Klustered #17](https://rawkode.academy/watch/klustered-17.md): Adam Szücs-Mátyás and William Lightning debug two broken Kubernetes clusters. Fixes cover cordoned nodes, a CoreDNS ConfigMap, a Harbor image redirect via…
- [Hands-on with Rust: Async / Await](https://rawkode.academy/watch/hands-on-with-rust-async-await.md): Senyo Simpson joins David to dig into Rust's async/await. They cover lazy futures, the Tokio executor, spawn and join, then build a custom Future, executor,…
- [Hands-on Introduction to Waypoint](https://rawkode.academy/watch/hands-on-introduction-to-waypoint.md): Taylor Dolezal walks through HashiCorp Waypoint's build, deploy, and release model, showing the HCL config, GitOps workflow, the server and runner…
- [Klustered: Community vs. Rawkode](https://rawkode.academy/watch/klustered-community-vs-rawkode.md): Rawkode debugs three broken Kubernetes clusters solo: Russell W's bash alias and static manifest trick, Noel Georgi's eBPF kubelet redirect, and a…
- [Hands-on Introduction to K0s](https://rawkode.academy/watch/hands-on-introduction-to-k0s.md): Jussi Nummelin walks through k0s, the single-binary Kubernetes distribution from Mirantis. We cover control plane isolation, single-node and HA install, then…
- [Hands-on Introduction to Lens](https://rawkode.academy/watch/hands-on-introduction-to-lens.md): Edward from Mirantis tours Lens, the Kubernetes IDE: unified catalog, hotbar, command palette, built-in Prometheus metrics, smart terminal context switching,…
- [Klustered Teams: Carta & Fairwinds](https://rawkode.academy/watch/klustered-teams-carta-and-fairwinds.md): Teams from Carta and Fairwinds debug each other's broken Kubernetes clusters live, tackling admission webhooks, rogue pod re-creation, kubelet and scheduler…
- [Hands-on Introduction to sigstore](https://rawkode.academy/watch/hands-on-introduction-to-sigstore.md): Dan Lorenc walks through sigstore: signing and verifying container images with cosign, keyless signing via OIDC, querying the Rekor transparency log, in-toto…
- [Klustered Teams: DigitalOcean & Skyscanner](https://rawkode.academy/watch/klustered-teams-digitalocean-and-skyscanner.md): Skyscanner and DigitalOcean each take on a broken Kubernetes cluster. Fixes span expired certs, etcd probes and resource limits, a kube-vip VIP, a rogue…
- [Part 1 - Lecture 1: Introduction to Time Series](https://rawkode.academy/watch/part-1-lecture-1-introduction-to-time-series.md): Lecture one of the InfluxDB 2 course. David traces the history of encoding and sharding from ancient Rome, defines time series data (metrics versus events),…
- [Hands-on with Litmus 2.0](https://rawkode.academy/watch/hands-on-with-litmus-2-0.md): Litmus maintainer Karthik Satchitanand previews Litmus 2.0: the new ChaosCenter portal, public and private ChaosHubs, resilience scoring, GitOps sync, and…
- [Klustered #16](https://rawkode.academy/watch/klustered-16.md): Rachel and Andy bring sabotaged Kubernetes clusters. Rachel's hides disabled schedulers, a 1m CPU limit, and a mangled Service. Andy's stacks a fake kubectl,…
- [Klustered Teams: RedHat & Talos Systems](https://rawkode.academy/watch/klustered-teams-redhat-and-talos-systems.md): Teams from Talos Systems and Red Hat break each other's Kubernetes clusters and race to fix them, debugging expired certificates, etcd quorum loss and snapshot…
- [Introduction to C++](https://rawkode.academy/watch/introduction-to-c.md): Sy Brand walks David through modern C++ via Exercism's Hello World and Isogram exercises, covering Catch2 tests, CMake builds, namespaces, std::string vs…
- [Klustered Teams: Container Solutions & Civo Cloud](https://rawkode.academy/watch/klustered-teams-container-solutions-and-civo-cloud.md): Container Solutions and Civo Cloud race to repair broken Kubernetes clusters, fixing expired apiserver certs, a tab-corrupted scheduler manifest, a malicious…
- [Hands-on Introduction to Pixie](https://rawkode.academy/watch/hands-on-introduction-to-pixie.md): Natalie Serrino walks through Pixie, the eBPF-powered Kubernetes observability tool. We deploy Vizier with the etcd operator, explore PxL scripts, trace HTTP…
- [Buiding a WebAssembly GraphQL Client](https://rawkode.academy/watch/buiding-a-webassembly-graphql-client.md): Connor Hicks and Francis Gulotta join David to add a GraphQL host capability to Suborbital's Reactor, writing the Go-side client and exposing it to a Rust Wasm…
- [Klustered #15](https://rawkode.academy/watch/klustered-15.md): Marek Counts and Abdel Sghiouar join David to debug two broken Kubernetes clusters, fixing containerd socket paths, kubelet misconfigurations, a rogue eBPF…
- [Hands-on Introduction to Snyk](https://rawkode.academy/watch/hands-on-introduction-to-snyk.md): Matt Jarvis walks through Snyk hands-on, from importing a GitHub repo into the web UI and fixing dependency vulnerabilities via automated PRs, through Snyk…
- [Hands-on Introduction to Dagger](https://rawkode.academy/watch/hands-on-introduction-to-dagger.md): Solomon Hykes introduces Dagger, a programmable deployment system built on CUE and BuildKit. We install the CLI, write a Dagger plan to deploy a static todo…
- [Hands-on Introduction to vcluster](https://rawkode.academy/watch/hands-on-introduction-to-vcluster.md): Rich Burroughs and Lukas Gentele from Loft Labs walk through vCluster, a newly Kubernetes-certified distribution that runs a k3s control plane inside a…
- [Hands-on Introduction to Litestream](https://rawkode.academy/watch/hands-on-introduction-to-litestream.md): Ben Johnson walks through Litestream, his streaming replication tool for SQLite. We cover how it tails the WAL, ships segments to S3 or Azure, and restores…
- [Hands-on with Rust: Lifetimes & Ownership](https://rawkode.academy/watch/hands-on-with-rust-lifetimes-and-ownership.md): Ana Hobden joins David to work through Rust's borrow checker and lifetime system using the Rustlings move-semantics exercises, covering ownership, mutable…
- [Klustered #14](https://rawkode.academy/watch/klustered-14.md): Sid Palas and Arian van Putten each break a cluster for the other to fix. Cluster 31 hides a kubelet cgroup driver mismatch starving Postgres and Cilium, while…
- [CKA Tutorial with Killer.sh (Part 1)](https://rawkode.academy/watch/cka-tutorial-with-killer-sh-part-1.md): Rawkode tackles the Killer.sh CKA exam simulator live, working through kubectl contexts, scheduling pods onto control plane nodes, scaling StatefulSets,…
- [Klustered #13](https://rawkode.academy/watch/klustered-13.md): Mahmoud Saada and Marques Johansson debug two broken Kubernetes clusters, tackling a LimitRange blocking scaling, a bad image pull secret, resource quota and…
- [Klustered: Newcomers #1](https://rawkode.academy/watch/klustered-newcomers-1.md): Newcomers edition of Klustered. Jeremy, Jason, and Tom from Equinix Metal debug a broken Kubernetes cluster with kubectl, fixing a port mismatch, a 1Mi memory…
- [Pulumi: Multi Language Packages](https://rawkode.academy/watch/pulumi-multi-language-packages.md): Lee Briggs walks through Pulumi's multi-language component packages: writing a schema.json, implementing a Kubernetes deployment component in Go from the…
- [Hands-on Introduction to Firecracker](https://rawkode.academy/watch/hands-on-introduction-to-firecracker.md): Radu and Gabriel from AWS demo Firecracker from the ground up. They walk through firecracker and jailer binaries, booting a microVM over the REST API on a Unix…
- [Hands-on Introduction to Promscale](https://rawkode.academy/watch/hands-on-introduction-to-promscale.md): Mat and Vineeth from Timescale show how Promscale stores Prometheus metrics in TimescaleDB, then deploy it on Kubernetes with TOBS and query the data using…
- [Hands-on Introduction to Okteto](https://rawkode.academy/watch/hands-on-introduction-to-okteto.md): Ramiro Berrelleza walks through Okteto Cloud and the okteto CLI, deploying the Movies sample with Helm and BuildKit, then using okteto up to sync code into a…
- [Hands-on Introduction to Telepresence](https://rawkode.academy/watch/hands-on-introduction-to-telepresence.md): Daniel Bryant and Peter O'Neill from Ambassador Labs walk through Telepresence: installing the CLI, connecting to a remote cluster, intercepting traffic to a…
- [Hacking Kubernetes: CTF Edition](https://rawkode.academy/watch/hacking-kubernetes-ctf-edition.md): Andrew Martin of Control Plane walks David through Kubernetes CTF scenarios from KubeCon: escaping via host mounts, killing crypto-miner deployments through…
- [Klustered #12](https://rawkode.academy/watch/klustered-12.md): KubeCon special part three. Jeffrey Sica and Chris Carty break clusters with a modified kubelet, OPA Gatekeeper policies, a broken Cilium CNI, and a hidden…
- [Klustered #11](https://rawkode.academy/watch/klustered-11.md): KubeCon special part two with Thomas Stromberg and Kris Nova. Two broken clusters: a malicious static pod manifest persisted via a systemd service and…
- [Klustered #10](https://rawkode.academy/watch/klustered-10.md): Walid Shaari and Noel Georgi join Rawkode to debug three broken Kubernetes clusters, tackling kubelet failures, RBAC misconfigurations, a missing scheduler…
- [Hands-on Introduction to Loki](https://rawkode.academy/watch/hands-on-introduction-to-loki.md): Cyril Tovena from Grafana Labs walks through Loki hands-on: installing the Loki stack on Kubernetes via Helm, shipping logs with Promtail, and querying the…
- [Hands-on Introduction to CUE](https://rawkode.academy/watch/hands-on-introduction-to-cue.md): Marcel van Lohuizen, creator of CUE, joins Rawkode for a hands-on introduction to the data constraint language. They cover unification, the type lattice,…
- [Hands-on Introduction to Skaffold](https://rawkode.academy/watch/hands-on-introduction-to-skaffold.md): Vic Iglesias guides Rawkode through Skaffold, Google's tool that automates the build, push, and deploy loop for Kubernetes. Hands-on demos cover Go…
- [Hands-on Introduction to Kaniko](https://rawkode.academy/watch/hands-on-introduction-to-kaniko.md): Tejal Desai (Kaniko maintainer at Google) walks through building container images inside Kubernetes without Docker-in-Docker, covering the executor pod,…
- [Hands-on Introduction to Velero](https://rawkode.academy/watch/hands-on-introduction-to-velero.md): Velero maintainer Carlisia Thompson joins David to install Velero against a MinIO S3 backend, back up Kubernetes objects and persistent volumes, then simulate…
- [Kubernetes Security Lab](https://rawkode.academy/watch/kubernetes-security-lab.md): Rory McCune walks through a hands-on Kubernetes security lab built on kind, attacking five deliberately vulnerable clusters: insecure API server port,…
- [Klustered #9](https://rawkode.academy/watch/klustered-9.md): Marcos Nils joins to debug two Kubernetes clusters: cluster 17 from Sascha Grunert (a rogue node debugger pod and a containerd 'honk' error pointing at BPF)…
- [Klustered (Part VIII-II)](https://rawkode.academy/watch/klustered-part-viii-ii.md): Noel Georgi returns to debug Kluster 015, where a corrupted Cilium CNI binary and a malicious systemd-collector-d binary hijacking the containerd shim leave…
- [Hands-on with Policy Reporter](https://rawkode.academy/watch/hands-on-with-policy-reporter.md): Frank Jogeleit joins to walk through Policy Reporter, the open source tool that turns Kyverno PolicyReports into Prometheus metrics, a UI dashboard, and…
- [Klustered (Part VIII)](https://rawkode.academy/watch/klustered-part-viii.md): Noel Georgi joins David to debug two broken Kubernetes clusters: a TLS 1.3 handshake mismatch blocking the API server, and rogue Cilium host network policies…
- [Klustered (Part VII)](https://rawkode.academy/watch/klustered-part-vii.md): Guinevere Saenger joins to debug two broken clusters: a Cilium CNI failure tangled with Kyverno mutating webhooks and a sneaky Pod Security Policy, then a…
- [Hands-on Introduction to cdk8s](https://rawkode.academy/watch/hands-on-introduction-to-cdk8s.md): Live walkthrough of cdk8s with creator Elad Ben Israel, covering the App and Chart model, snapshot testing, cdk8s+, importing CRDs, wrapping Helm charts, and…
- [Introduction to Kubeflow](https://rawkode.academy/watch/introduction-to-kubeflow.md): Michael Tanenbaum walks through Kubeflow 1.3, covering the architecture, Notebooks, and Pipelines, then trains an image classification model on the Kaggle…
- [Klustered (Part VI)](https://rawkode.academy/watch/klustered-part-vi.md): Duffie Cooley joins to debug two broken Kubernetes clusters: an ImagePolicyWebhook, Kyverno ClusterPolicy, deny NetworkPolicy and kubelet config typo on…
- [Introduction to Tremor](https://rawkode.academy/watch/introduction-to-tremor.md): The Tremor team walk through the Rust-based event processing engine born at Wayfair for load shedding at scale, then live-code a Discord bot using YAML…
- [Klustered (Part V)](https://rawkode.academy/watch/klustered-part-v.md): Jason DeTiberus joins to debug two broken clusters from Thomas Stromberg and CloudNative Wales. Expect rogue processes, mangled resolv.conf, exhausted inodes…
- [Klustered (Part IV)](https://rawkode.academy/watch/klustered-part-iv.md): Lee Briggs joins to debug two broken Kubernetes clusters live: missing kubelet binaries, a renamed API server manifest, rogue validation and mutating webhooks,…
- [Klustered (Part III)](https://rawkode.academy/watch/klustered-part-iii.md): Michael Hausenblas joins to debug two broken Kubernetes clusters: Justin Garrison's cluster with expired control-plane certificates and MetalLB trouble, and…
- [Introduction to Litmus Chaos](https://rawkode.academy/watch/introduction-to-litmus-chaos.md): Uma and Kartik from the Chaos Native team walk through Litmus, a Kubernetes-native chaos engineering project. They cover the ChaosCenter portal, workflows and…
- [Monitoring & Scaling Laravel on Kubernetes (Part II)](https://rawkode.academy/watch/monitoring-and-scaling-laravel-on-kubernetes-part-ii.md): Leo joins Alex and David to wire Prometheus middleware into Laravel, scrape the metrics endpoint, deploy the Prometheus Adapter, and drive a Horizontal Pod…
- [Introduction to Vitess](https://rawkode.academy/watch/introduction-to-vitess.md): Vitess maintainers Deepthi Sigireddi and Alkin Tezuysal from PlanetScale walk through the architecture (VTGate, VTTablet, topology), then deploy a sharded…
- [Infrastructure as Code & GitOps](https://rawkode.academy/watch/infrastructure-as-code-and-gitops.md): Bootstrap a Kubernetes cluster on Equinix Metal with Pulumi, then hand workloads over to FluxCD. Covers Pulumi project layout, stacks vs Terraform workspaces,…
- [Klustered (Part II)](https://rawkode.academy/watch/klustered-part-ii.md): Dan Finneran joins Rawkode to debug two broken Kubernetes clusters, unpicking an etcd version mismatch, a bad kubelet flag, an etcd "no space" alarm and quota,…
- [Monitoring & Scaling Laravel on Kubernetes](https://rawkode.academy/watch/monitoring-and-scaling-laravel-on-kubernetes.md): Continuing the Laravel-on-Kubernetes series, David is joined by Alex Bowers and Ciaran McNulty to load-test with Siege, wire up a CPU-based HPA via…
- [Introduction to Kyverno](https://rawkode.academy/watch/introduction-to-kyverno.md): Jim Bugwadia and Shuting Zhao explain how Kyverno brings Kubernetes-native policy management via validate, mutate, and generate rules. Covers the admission…
- [Klustered (Part I)](https://rawkode.academy/watch/klustered-part-i.md): Rawkode and Walid Shaari debug two broken Kubernetes clusters deployed via Cluster API on Equinix Metal. They track down a Cilium iptables misconfig,…
- [Introduction to Meilisearch](https://rawkode.academy/watch/introduction-to-meilisearch.md): Frédéric Harper and Carolina Ferreira from the Meilisearch team walk through the Rust-based search engine: REST API, indexes, typo tolerance, ranking rules,…
- [Writing a Kubernetes Controller](https://rawkode.academy/watch/writing-a-kubernetes-controller.md): Suhail Patel joins Rawkode to build a Kubernetes mutating admission webhook in Go that rewrites pod image tags expressed as semver constraints into concrete…
- [Introduction to Timescale](https://rawkode.academy/watch/introduction-to-timescale.md): Avthar Sewrathan explains how TimescaleDB packages Postgres with hypertables, compression, and continuous aggregates. We launch a Forge instance, load NYC taxi…
- [Introduction to Kapitan](https://rawkode.academy/watch/introduction-to-kapitan.md): Alessandro de Maria and Ricardo Amaro walk through Kapitan's inventory model, targets and classes, the Kubernetes manifest generator, secret references, and…
- [Introduction to Second State](https://rawkode.academy/watch/introduction-to-second-state.md): Tim McCallum joins to demo Second State's serverless WebAssembly function-as-a-service. We write Rust, compile to Wasm, deploy via SSVM up, call functions…
- [Introduction to Keptn (Part II)](https://rawkode.academy/watch/introduction-to-keptn-part-ii.md): Juergen Etzlstorfer returns to walk through Keptn quality gates backed by Prometheus SLIs, deploy to Kubernetes via Helm, then trigger automatic remediation…
- [Introduction to Suborbital](https://rawkode.academy/watch/introduction-to-suborbital.md): Connor Hicks walks through Suborbital's ATMO runtime, writing Rust functions compiled to WebAssembly, composing them via the Directive YAML, and chaining…
- [Laravel on Kubernetes: Into Production](https://rawkode.academy/watch/laravel-on-kubernetes-into-production.md): Alex Bowers joins David to take a Laravel app from a basic deploy to a production-grade Kubernetes setup, wiring up MariaDB via Helm, ConfigMaps and Secrets,…
- [BDD Test Automation](https://rawkode.academy/watch/bdd-test-automation.md): Ciaran McNulty joins David to wire acceptance tests for a Git sync tool in Rust with the Cucumber Rust crate, mapping Gherkin steps to step definitions,…
- [Introduction to Fluentd & Fluent Bit](https://rawkode.academy/watch/introduction-to-fluentd-and-fluent-bit.md): In this episode, we take a look at using Fluentd for log collection within a Kubernetes cluster, as well as using Fluent Bit for stream processing.
- [How to Write a kubectl Plugin from Scratch](https://rawkode.academy/watch/how-to-write-a-kubectl-plugin-from-scratch.md): Matt Turner joins to write a kubectl plugin in Bash that swaps kubectl's verb-noun ordering to noun-verb, then packages it for distribution through the Krew…
- [Kubernetes Services](https://rawkode.academy/watch/kubernetes-services.md): Anaïs Urlichs and Philipp Strube join David to break down Kubernetes Services: ClusterIP, NodePort, port versus targetPort, selectors and endpoints, DNS-based…
- [Hands-on with Pipedream](https://rawkode.academy/watch/hands-on-with-pipedream.md): Hands-on tour of Pipedream with cofounder Dylan Sather, building event-driven workflows in the UI that wire Twitter searches into Spotify playlists and pipe…
- [Living Documentation with BDD](https://rawkode.academy/watch/living-documentation-with-bdd.md): Ciaran McNulty joins David to apply BDD to the git-sync Rust library. They turn example-mapping outcomes into Gherkin scenarios, refine wording, group rules,…
- [Introduction to Gitpod](https://rawkode.academy/watch/introduction-to-gitpod.md): Chris (chief architect) and Sven (CEO) of Gitpod demo cloud dev environments defined in code: .gitpod.yml, Dockerfile-based workspaces on Kubernetes, Go and…
- [Hands-on Introduction to TektonCD](https://rawkode.academy/watch/hands-on-introduction-to-tektoncd.md): Kevin McDermott walks through TektonCD on Kubernetes: installing pipelines, triggers, and the dashboard, building Tasks and TaskRuns with parameters and…
- [Introduction to Rust (Part III)](https://rawkode.academy/watch/introduction-to-rust-part-iii.md): Jane Lusby walks David through writing a CLI anagram finder in Rust, covering cargo project setup, editions, lifetimes, generics with impl Into and where…
- [Hands-on Autoscaling with Kubernetes](https://rawkode.academy/watch/hands-on-autoscaling-with-kubernetes.md): Guy Templeton, co-chair of SIG Autoscaling, walks through Kubernetes autoscaling end to end: horizontal pod autoscaling on resource, custom (Prometheus…
- [Introduction to the OperatorSDK](https://rawkode.academy/watch/introduction-to-the-operatorsdk.md): Dennis Kelly walks through the Operator SDK by building a Go-based "add" operator: scaffolding a project, defining a custom resource, writing the reconciler…
- [What is Advent of Code?](https://rawkode.academy/watch/what-is-advent-of-code.md): David and Ian George (Orlando Go meetup organizer) tackle Advent of Code 2020 Day 7, the bag rules puzzle, live in Go. They cover the philosophy of the…
- [Introduction to Rust (Part II)](https://rawkode.academy/watch/introduction-to-rust-part-ii.md): Part two of the Rustlings walkthrough with Rust core team member Manish Goregaokar. We cover if/else, match, move semantics and borrowing, Option<T> with if…
- [Introduction to Teleport](https://rawkode.academy/watch/introduction-to-teleport.md): Steven Martin walks through Teleport, the unified access plane for SSH nodes, Kubernetes clusters, and web apps. We cover short-lived certificates, session…
- [Example Mapping by Example](https://rawkode.academy/watch/example-mapping-by-example.md): Ciaran McNulty walks David through Example Mapping and BDD applied to a real Rust GitOps library, capturing rules and examples for cloning and reconciling Git…
- [Introduction to Rust (Part I)](https://rawkode.academy/watch/introduction-to-rust-part-i.md): Steve Klabnik, co-author of The Rust Programming Language book, joins to teach Rust from scratch. Working through Rustlings exercises, they cover variables,…
- [Introduction to Keptn (Part I)](https://rawkode.academy/watch/introduction-to-keptn-part-i.md): Jurgen Etzlstorfer introduces Keptn, the CNCF sandbox control plane for delivery and operations. We install Istio and Keptn on Kubernetes, write a shipyard,…
- [Hands-on with faasd & Inlets](https://rawkode.academy/watch/hands-on-with-faasd-and-inlets.md): Alex Ellis joins David to install faasd on Equinix Metal via cloud-init, deploy a Go function, demo containerd pause for fast cold starts and async callbacks,…
- [Introduction to Open Policy Agent](https://rawkode.academy/watch/introduction-to-open-policy-agent.md): Torin Sandall walks through Open Policy Agent end-to-end: Rego basics in the OPA Playground, Kubernetes admission policies for label and image-source…
- [Introduction to InfluxDB 2 & Flux](https://rawkode.academy/watch/introduction-to-influxdb-2-and-flux.md): Anais Dottis-Georgiou from InfluxData walks through InfluxDB 2 and Flux: installing the OSS release, collecting metrics with Telegraf, exploring data, building…
- [Introduction to Cilium (Part II)](https://rawkode.academy/watch/introduction-to-cilium-part-ii.md): Ilya Dmitrichenko joins David to install Cilium on a bare-metal Kubernetes cluster, run the Star Wars demo, apply L3/L4 and L7 (HTTP) network policies, explore…
- [Introduction to Thanos](https://rawkode.academy/watch/introduction-to-thanos.md): Bartek Plotka walks through Thanos, the CNCF project that extends Prometheus with global query, HA deduplication, and long-term storage. Covers the Sidecar,…
- [Introduction to Dgraph](https://rawkode.academy/watch/introduction-to-dgraph.md): Xuanyi Chew, community engineer at Dgraph, walks through running Dgraph in Docker, exploring the Ratel UI, writing queries and schemas in DQL versus native…
- [Introduction to n8n](https://rawkode.academy/watch/introduction-to-n8n.md): Tanay Pant walks David through n8n, building workflows in the editor UI with HTTP Request, Cron, Set, Webhook and Function nodes, then wiring up Philips Hue,…
- [Introduction to CoreDNS](https://rawkode.academy/watch/introduction-to-coredns.md): CoreDNS creator Miek Gieben walks through the plugin-driven Go DNS server: Corefile syntax, plugin ordering at compile time, DNS-over-HTTPS, multi-zone…
- [Introduction to Cortex](https://rawkode.academy/watch/introduction-to-cortex.md): Ganesh Vernekar joins to walk through Cortex: building from source, wiring Prometheus remotewrite, scaling it with Docker Compose and MinIO, the single-binary…
- [Introduction to Linkerd](https://rawkode.academy/watch/introduction-to-linkerd.md): Thomas Rampelberg from Buoyant walks through installing Linkerd 2 on Kubernetes, exploring the dashboard and CLI (tap, stat, top), running the EmojiVoto and…
- [Introduction to OpenTelemetry](https://rawkode.academy/watch/introduction-to-opentelemetry.md): Amy Tobey and Liz Fong-Jones join David to instrument a Go gRPC service (Tinkerbell) with OpenTelemetry from scratch, wiring up the SDK, a stdout exporter, a…
- [Introduction to Falco](https://rawkode.academy/watch/introduction-to-falco.md): Lorenzo Fontana and Leo Di Donato from Sysdig walk through Falco end-to-end: installing it on a host, the kernel module vs eBPF driver, writing rules in YAML,…
- [Introduction to Grafana](https://rawkode.academy/watch/introduction-to-grafana.md): Marcus Olsson joins to introduce Grafana from scratch: installing it on Equinix Metal, wiring up Prometheus and InfluxDB data sources, building dashboards,…
- [Introduction to WebAssembly & waSCC](https://rawkode.academy/watch/introduction-to-webassembly-and-wascc.md): Kevin Hoffman, author of Programming WebAssembly with Rust and tech lead of waSCC, walks through WebAssembly beyond the browser: the WAT text format, wasmtime,…
- [Introduction to OpenEBS](https://rawkode.academy/watch/introduction-to-openebs.md): Paul Burt and Jeffry Molanus join Rawkode for OpenEBS and its new Mayastor engine. They cover Container Attached Storage, DPDK/SPDK, huge pages, and NVMe-oF…
- [The Path to Cloud Native](https://rawkode.academy/watch/the-path-to-cloud-native.md): CNCF ambassador Ihor Dvoretskyi joins David to unpack cloud native adoption, the role of Kubernetes, when microservices make sense versus a monolith, stateful…
- [Introduction to Crossplane](https://rawkode.academy/watch/introduction-to-crossplane.md): Dan Mangum and Marques Johansson join Rawkode to introduce Crossplane, contrast it with Terraform and Pulumi, install the Equinix Metal provider, walk through…
- [GitOps Tutorial with FluxCD 2 (GitOps Toolkit)](https://rawkode.academy/watch/gitops-tutorial-with-fluxcd-2-gitops-toolkit.md): Stefan Prodan walks through the GitOps Toolkit (Flux v2): bootstrapping with gotk, the source, kustomize, helm, and notification controllers, then adding Git…
- [Introduction to Prometheus, PromQL, & PromLens](https://rawkode.academy/watch/introduction-to-prometheus-promql-and-promlens.md): Julius Volz, Prometheus co-founder, walks through the data model and four metric types, scraping nodeexporter, writing PromQL in PromLens, and building a…
- [Docker, Kubernetes, & PHP: Laravel Edition (Part III)](https://rawkode.academy/watch/docker-kubernetes-and-php-laravel-edition-part-iii.md): Ciaran McNulty and Alex Bowers join David to wire up a Laravel dev loop in Docker Compose: fixing the npm watcher, running Artisan migrations, chasing HMR port…
- [Introduction to Fleet, k3s, & Rancher](https://rawkode.academy/watch/introduction-to-fleet-k3s-and-rancher.md): Bastian Hofmann from Rancher walks through k3s as a lightweight single-binary Kubernetes, Rancher for multi-cluster management, and the new Fleet GitOps engine…
- [Introduction to Carvel](https://rawkode.academy/watch/introduction-to-carvel.md): Dmitriy Kalinin (VMware), maintainer of Carvel, walks through the suite formerly known as k14s: kapp for diff-aware deployments, ytt's structural YAML…
- [Introduction to Cilium](https://rawkode.academy/watch/introduction-to-cilium.md): Ilya Dmitrichenko joins David to install Cilium on a Cluster API cluster, debug IPAM and stale CiliumNode CRDs, and walk through eBPF-powered kube-proxy…
- [The Newcomers Guide to Kubernetes](https://rawkode.academy/watch/the-newcomers-guide-to-kubernetes.md): David Simmons joins with zero Kubernetes experience and gets walked through kubectl, pods, deployments, multi-container pods, services, ConfigMaps, Secrets,…
- [Docker, Kubernetes, & PHP: Laravel Edition (Part II)](https://rawkode.academy/watch/docker-kubernetes-and-php-laravel-edition-part-ii.md): Ciaran McNulty returns to refine the Laravel dev environment from Part I: tuning Docker for Mac volume performance, splitting Node.js asset compilation…
- [Introduction to Tilt](https://rawkode.academy/watch/introduction-to-tilt.md): Dan Bentley and Ellen Korbes show how Tilt automates the inner loop for Kubernetes development. We write a Tiltfile in Starlark, build a Docker image, deploy…
- [Introduction to containerd](https://rawkode.academy/watch/introduction-to-containerd.md): Phil Estes, containerd maintainer, walks through how containerd was extracted from Docker, its gRPC service architecture, snapshotters and CRI integration…
- [Profiling PHP Applications with Xdebug](https://rawkode.academy/watch/profiling-php-applications-with-xdebug.md): Derick Rethans walks through installing Xdebug via PECL, enabling its profiler, and reading the resulting Cachegrind files in QCachegrind to find hot paths,…
- [Managing Linux in Real Time with SaltStack](https://rawkode.academy/watch/managing-linux-in-real-time-with-saltstack.md): Edward Vielmetti joins to provision a mixed Ubuntu, CentOS and FreeBSD fleet on Packet bare metal using Pulumi with TypeScript, then drive it with Salt:…
- [Docker, Kubernetes, and PHP: Laravel Edition](https://rawkode.academy/watch/docker-kubernetes-and-php-laravel-edition.md): Ciaran McNulty joins David to containerize the Ping CRM Laravel app from scratch: building a docker-compose stack with PHP-FPM, Nginx and MariaDB, layering a…
- [Kubernetes 1.19: Accentuate the Paw-sitive (RTFM with Rawkode)](https://rawkode.academy/watch/kubernetes-1-19-accentuate-the-paw-sitive-rtfm-with-rawkode.md): Taylor Dolezal joins to walk through Kubernetes 1.19, including the extended 12-month support window, storage capacity tracking, CSI volume health, Ingress…
- [Introduction to the Kubernetes Seccomp Operator (RTFM with Rawkode)](https://rawkode.academy/watch/introduction-to-the-kubernetes-seccomp-operator-rtfm-with-rawkode.md): Daniel Mangum and Sascha Grunert walk through the Kubernetes seccomp operator: what seccomp is, installing the operator, applying profiles to nginx pods,…
- [Building PHP Applications with Docker, Docker Compose, and Kubernetes (RTFM with Rawkode)](https://rawkode.academy/watch/building-php-applications-with-docker-docker-compose-and-kubernetes-rtfm-with-rawkode.md): Ciaran McNulty joins to containerise a Slim Framework PHP app: NGINX and PHP-FPM as separate containers, Compose 2.x for health-check dependencies, a…
- [IPv6 ONLY Kubernetes Clusters (RTFM with Rawkode)](https://rawkode.academy/watch/ipv6-only-kubernetes-clusters-rtfm-with-rawkode.md): Arian van Putten walks through building an IPv6-only Kubernetes cluster on Packet bare metal: provisioning nodes with Pulumi and TypeScript, bootstrapping with…
- [Introduction to kube-vip: Bare Metal Load Balancing (RTFM with Rawkode)](https://rawkode.academy/watch/introduction-to-kube-vip-bare-metal-load-balancing-rtfm-with-rawkode.md): Dan Finneran walks through kube-vip, his bare-metal load balancer for Kubernetes. We cover Plunder for provisioning, then demo a control plane VIP via Raft…
- [Kubernetes Cluster API for Equinix Metal (Formely Packet)](https://rawkode.academy/watch/kubernetes-cluster-api-for-equinix-metal-formely-packet.md): Jason DeTiberus joins to walk through declaratively defining Kubernetes clusters with Cluster API, installing the Packet infrastructure provider, generating a…

## Optional

- [Full article corpus as a single document](https://rawkode.academy/llms-full.txt)
- [All-content RSS feed](https://rawkode.academy/api/feeds/all.xml)
- [Sitemap index](https://rawkode.academy/sitemap-index.xml)