Kapil Agrawal's Avatar

Kapil Agrawal

@netops2devops.net.bsky.social

Kubernetes platform Security Engineer by profession. Also a recovering network engineer. Open source exuberant. Fan of open standards. Spends way too much time in homelab

158 Followers  |  796 Following  |  67 Posts  |  Joined: 01.09.2023  |  1.5783

Latest posts by netops2devops.net on Bluesky

Add Network Policy By default, Kubernetes allows communications across all Pods within a cluster. The NetworkPolicy resource and a CNI plug-in that supports NetworkPolicy must be used to restrict communications. A defau...

kyverno.io/policies/bes...

03.08.2025 02:53 โ€” ๐Ÿ‘ 0    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0

#Kyverno also has this super awesome feature to generate new objects (like NetworkPolicy) during admission review which is definitely not a thing in Gatekeeper from what I can tell.

03.08.2025 02:51 โ€” ๐Ÿ‘ 0    ๐Ÿ” 0    ๐Ÿ’ฌ 1    ๐Ÿ“Œ 0
Namespace Protection Cases where RBAC may be applied at a higher level and where Namespace-level protections may be necessary can be accomplished with a separate policy. For example, one may want to protect creates, updat...

the policy I was trying to write already comes ready made in #Kyverno policy library and it's less than 20 lines of YAML!!
kyverno.io/policies/oth...
As much as I love #OPA the developer experience around using it with gatekeeper is a bit rough (IMO).

03.08.2025 02:49 โ€” ๐Ÿ‘ 0    ๐Ÿ” 0    ๐Ÿ’ฌ 1    ๐Ÿ“Œ 0

After struggling with embedding Rego inside YAML on top of having to write constraint template, then a constraint file just to create 1 basic admission policy, I am switching teams from #Gatekeeper to #Kyverno and as it turns out ..

03.08.2025 02:45 โ€” ๐Ÿ‘ 0    ๐Ÿ” 0    ๐Ÿ’ฌ 1    ๐Ÿ“Œ 0

Could you elaborate on the problem you're currently working on? Just curious ๐Ÿ˜

02.08.2025 03:18 โ€” ๐Ÿ‘ 0    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0

The nano textured display with a slight matte finish on the new MacBook Pro laptops is just ๐Ÿ”ฅ Totally worth the $$$

28.07.2025 01:06 โ€” ๐Ÿ‘ 0    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0

Are you using OPA with kube-mgmt ? As in whatโ€™s doing the policy enforcement here?

17.07.2025 01:29 โ€” ๐Ÿ‘ 2    ๐Ÿ” 0    ๐Ÿ’ฌ 1    ๐Ÿ“Œ 0

Checkout taskfile ๐Ÿ˜… no Makefile just YAML

08.07.2025 01:11 โ€” ๐Ÿ‘ 1    ๐Ÿ” 0    ๐Ÿ’ฌ 1    ๐Ÿ“Œ 0

Are you using โ€œomitemptyโ€ in your struct tags?

25.06.2025 23:15 โ€” ๐Ÿ‘ 0    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0
Preview
GitHub - uber-go/nilaway: Static analysis tool to detect potential nil panics in Go code Static analysis tool to detect potential nil panics in Go code - uber-go/nilaway

github.com/uber-go/nila...

25.06.2025 14:42 โ€” ๐Ÿ‘ 1    ๐Ÿ” 0    ๐Ÿ’ฌ 1    ๐Ÿ“Œ 0

#Kubernetes tends to seem more complex from the outside than it truly is once you realize it's just an API server managing the infra.

18.06.2025 20:17 โ€” ๐Ÿ‘ 1    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0

I am really starting to appreciate how @openpolicyagent.bsky.social docs have been re-organized in the recent update!

15.06.2025 19:36 โ€” ๐Ÿ‘ 1    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0
Post image

Is pkg.go.dev down? #golang

12.06.2025 19:50 โ€” ๐Ÿ‘ 1    ๐Ÿ” 0    ๐Ÿ’ฌ 1    ๐Ÿ“Œ 0
Preview
Support tunneling over IPv6 ยท Issue #17240 ยท cilium/cilium Bug report Hello. First of all, thank you for an amazing product. I am trying to configure an IPv6 only kubernetes network(, which means that all the interfaces on my node are not given ipv4 addres...

Upcoming changes in #Cilium 1.18.0 will bring significant improvements for operating #Kubernetes in #IPv6 only networks! One big ticket item is that now you can use the default tunnel mode with an IPv6 only underlay. I shared my configs in GitHub issue comments github.com/cilium/ciliu...

26.05.2025 00:40 โ€” ๐Ÿ‘ 4    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0

Is gorilla/mux even maintained anymore?

12.05.2025 01:12 โ€” ๐Ÿ‘ 1    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0

Actually not hard at all. I have been running an IPv6 only K3s cluster using #cilium in native routing mode for over a year now and itโ€™s been pretty rock solid!

03.05.2025 16:36 โ€” ๐Ÿ‘ 2    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0
Using Cilium as a standalone NAT46x64Gateway IPv4 and IPv6 are two different protocols they are incompatible with one another i.

While #Cilium is most commonly used as a CNI, not much has been documented about its capabilities outside of #Kubernetes, specially as a standalone NAT46x64 gateway for #IPv6 only networks. netops2devops.net/posts/cilium...

01.05.2025 20:29 โ€” ๐Ÿ‘ 3    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0
Preview
concurrency/repoClone at main ยท netops2devops/concurrency Contribute to netops2devops/concurrency development by creating an account on GitHub.

github.com/netops2devop...

18.04.2025 00:50 โ€” ๐Ÿ‘ 2    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0

I've been learning some concurrency in #Go using goroutines so I wrote a really dumb program that launches a workerpool to clone all publicly available repositories of an organization from Github. The obvious natural step next is to feed those repos to a secret scanning tool such as #gitleaks ๐Ÿ˜‚

18.04.2025 00:50 โ€” ๐Ÿ‘ 4    ๐Ÿ” 0    ๐Ÿ’ฌ 1    ๐Ÿ“Œ 0
perspective.it

Itโ€™s a matter of perspective. Letโ€™s look at it the other way around

- In C/C++ thereโ€™s absolutely no garbage collector whatsoever

- Go has a built in garbage collector

- In Rust, you are the garbage collector

17.04.2025 15:18 โ€” ๐Ÿ‘ 2    ๐Ÿ” 0    ๐Ÿ’ฌ 1    ๐Ÿ“Œ 0

I explicitly wanted to use a CNI that can also be used in production :) #kind is ๐Ÿ”ฅ

15.04.2025 23:36 โ€” ๐Ÿ‘ 1    ๐Ÿ” 0    ๐Ÿ’ฌ 1    ๐Ÿ“Œ 0
High performance, extensible, minimalist Go web framework | Echo Echo is a high-performance web framework for building robust and scalable applications in Go. With its minimalist design and powerful features, Echo enables developers to create efficient APIs and w...

Depends on how simple of a web server you want to build. If your use case is minimal I think the built in httpServer is a great option. Iโ€™ve been reading Echo docs echo.labstack.com and it seems much better in terms of documentation compared to Gin. Iโ€™m sure Gin works great too. Itโ€™s stil maintained

13.04.2025 17:04 โ€” ๐Ÿ‘ 1    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0

Most engineers who level up and eventually become executives usually drift away from their engineering grassroots as they become less hands on and focus more on business. But then there are people like Mitchell Hashimoto who still enjoy getting into the weeds and for that he has my respect ๐Ÿซก

13.04.2025 05:57 โ€” ๐Ÿ‘ 1    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0
Post image

Granted less than ideal but if it helps you can download a go module to your GOMODCACHE and generate docs there for reading.

12.04.2025 05:18 โ€” ๐Ÿ‘ 0    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0

But yea I do agree in that Slices can definitely be a trip wire for anyone who is new to Go ๐Ÿ˜… I had my fair share of those during advent of code last year

10.04.2025 02:04 โ€” ๐Ÿ‘ 0    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0

My eyes open up wide any time I see any pointers being passed around to a function because of this. But the intro to go docs makes it pretty clear that one should pass pointers only when mutating the original data is desired.

10.04.2025 02:00 โ€” ๐Ÿ‘ 0    ๐Ÿ” 0    ๐Ÿ’ฌ 1    ๐Ÿ“Œ 0

Changing any values while passing reference (explicitly or implicitly) will mutate the data

09.04.2025 22:49 โ€” ๐Ÿ‘ 1    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0

Iโ€™m new to Go so correct me if Iโ€™m wrong here but the default behavior in Go functions is to use call by value so the values get copied over to bork() and original data is not mutated except when youโ€™re passing a slice (which in itself is a reference to an array)

09.04.2025 22:47 โ€” ๐Ÿ‘ 2    ๐Ÿ” 0    ๐Ÿ’ฌ 2    ๐Ÿ“Œ 0
Practical Go Lessons

As someone new to #Golang (who is still very much learning) so far I have gotten a LOT of value from www.practical-go-lessons.com After reading almost half of the ebook online (for free) I started felt guilty and ended up purchasing the e-Book. Totally worth it in my opinion.

09.04.2025 04:41 โ€” ๐Ÿ‘ 3    ๐Ÿ” 0    ๐Ÿ’ฌ 1    ๐Ÿ“Œ 0
Preview
GitHub - golang-standards/project-layout: Standard Go Project Layout Standard Go Project Layout. Contribute to golang-standards/project-layout development by creating an account on GitHub.

Also see github.com/golang-stand...

26.03.2025 03:32 โ€” ๐Ÿ‘ 3    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0

@netops2devops.net is following 19 prominent accounts