All about the topic

Daniel Bodky

Last post

Secure AI Agents: Docker sbx, OpenCode, and Autonomous LLMs

Secure AI Agents: Docker sbx, OpenCode, and Autonomous LLMs

by | Sep 30, 2026 | ,

If you’ve experimented with Claude Code, Codex, Copilot, and the like over the past two years, or even work with them on a daily basis, you’ve surely noticed a few quirks of these AI agents: Searching for and downloading content from the internet on their own, attempting to run opaque ad-hoc code in Python or Bash on your system, or creating new files in your project that you didn’t even notice at first. In addition, especially in recent months, there have been reports of AI agents launching...

read more

All contributions

GitOps in Practice: GitOps with ArgoCD and Flux

GitOps in Practice: GitOps with ArgoCD and Flux

by

GitOps with ArgoCD and Flux has established itself as the standard approach to continuous delivery on Kubernetes. At NWS, for example, we use ArgoCD to operate the NETWAYS Cloud. Both tools are CNCF Graduated projects, but they follow different philosophies. The...

Pod Security Standards in Kubernetes

Pod Security Standards in Kubernetes

by

It has been over five years since Pod Security Policies (PSP) in Kubernetes were replaced by the newer Pod Security Standards (PSS). One of the main reasons for this major change was to simplify management - and yet, even today, Pod Security Standards are still far...

KubeCon 2026: Gliders, Drones and Lots of Kubernetes

KubeCon 2026: Gliders, Drones and Lots of Kubernetes

by

What do a glider, drones, CERN and Uber have in common? They all shared the keynote stage at KubeCon 2026 in Amsterdam last week. As a Silver Member of the CNCF, NWS was once again on site with part of the team. Find out what Sebastian, Achim, Justin, Dominik, Martin...

X-Forwarded-For and proxy protocol with kgateway

X-Forwarded-For and proxy protocol with kgateway

by

In many cases, it is helpful for applications to know the source IP of a request. With this information, your application can do many useful things, e.g. use GeoIP data to display the appropriate language for the visitor on a website.Unfortunately, in the cloud and...

What comes after ingress-nginx?

What comes after ingress-nginx?

by

Last November, the Kubernetes project announced the discontinuation of the popular ingress controller ingress-nginx. After a best-effort transition phase until March 2026, the project will no longer receive any releases, bug fixes or security updates from this point...

Deploying Ceph on Kubernetes with Rook

Deploying Ceph on Kubernetes with Rook

by

Most applications require persistent storage in one way or another. Whether profile pictures, text documents or product information in an outsourced database, data always has to be stored somewhere. In the cloud, block storage or object storage is normally used for...

Cloud Deployment in 15 Minutes with Terraform and Docker

Cloud Deployment in 15 Minutes with Terraform and Docker

by

In today's world of the cloud, it's easy to lose track: VMs, Kubernetes, Serverless, the possibilities are almost endless, and the "best" way to run applications is not always clear. It is often worth creating a proof of concept and going through a cloud deployment...

Kubernetes Release v1.35: What’s New?

Kubernetes Release v1.35: What’s New?

by

The latest Kubernetes release was published just in time for the end of 2025. We therefore kicked off the new year with the usual detailed release notes. As with every Kubernetes version, the release team has once again chosen a name and a release motto. Kubernetes...

Review: OpenInfra Summit 2025

Review: OpenInfra Summit 2025

by

The OpenInfra Summit 2025 was once again held in Europe last month. Just outside Paris, developers, operators and decision-makers from all corners of the world came together to discuss the latest developments in cloud-native infrastructure, edge computing and...

Anomaly Detection with Falco

Anomaly Detection with Falco

by

We rely on containers and Kubernetes to operate the NETWAYS Cloud and our other services. Among other things, this approach allows us to cleanly separate different microservices on the same hypervisor and operate multi-tenant SaaS solutions.However, this architecture...

CoreDNS and Kubernetes: an overview

CoreDNS and Kubernetes: an overview

by

CoreDNS is one of the unsung heroes of Kubernetes. It can be found in almost every Kubernetes setup and performs its tasks reliably and unnoticed. It can also be found in NETWAYS Managed Kubernetes®.That's why I was recently surprised to suddenly have to interact with...

Kubernetes Gateway API explained

Kubernetes Gateway API explained

by

If you run applications, you usually want to interact with them. This basic statement is almost always true: whether it's a web store, database or cloud storage, you have to access the services via a network somehow. Very few applications run in a network vacuum. In...

What’s new in Grafana 12?

What’s new in Grafana 12?

by

Last week, the annual GrafanaCON took place in the USA in Seattle (Washington). Fans and users of the LGTM stack (Loki, Grafana, Tempo, Mimir) know what that means: a new Grafana release! Consequently, there is only one topic today: What's new in Grafana 12? As a user...