Kapil Agrawal
Kapil Agrawal
@netops2devops.net
Kubernetes platform Security Engineer by profession. Also a recovering network engineer. Open source exuberant. Fan of open standards. Spends way too much time in homelab
247 followers1K following164 posts
I created a #Helm plugin for working with OCI based helm charts. Not being able to do simple things like `helm repo list` or `helm show values` for OCI based helm charts drove me crazy. #kubernetes #devops github.com/esnet/helm-oci
It’s just shocking to me how many IT veterans don’t know what @letsencrypt.bsky.social or #ACME or #certbot are 😵💫
I created a simple (and somewhat minimal) cookiecutter skeleton for #Go github.com/netops2devop...
What's been sitting in my Obsidian notes for over a year now, I finally took the time to put it up on my blog. I have a few more blog posts coming up as part of this series. #kubernetes #ipv6 #cilium netops2devops.net/series/kuber...
Part3 is out!! #kubernetes #cilium #ipv6 netops2devops.net/series/k8s-c...
Kapil Agrawal reposted
Case study: ESnet’s success with Cilium demonstrates that IPv6-only Kubernetes deployments are not only viable, but also work exceptionally well at government scale. This has provided a blueprint for other national laboratories facing similar mandates. Read more: www.cncf.io/case-studies...
What's been sitting in my Obsidian notes for over a year now, I finally took the time to put it up on my blog. I have a few more blog posts coming up as part of this series. #kubernetes #ipv6 #cilium netops2devops.net/series/kuber...
part1 covers underlying #ipv6 infrastructure requirements before installing #kubernetes netops2devops.net/series/k8s-c...
part2 covers building the simplest #IPv6 only #k3s cluster using @cilium.io netops2devops.net/series/k8s-c...
Really looking forward to this event! #kubernetes #cilium #ipv6 #kubecon
Join ESnet's Kapil Agrawal at #CiliumCon to hear how his team built an IPv6-first #Kubernetes environment using #Cilium for networking. Expect lessons learned on routing, scaling, and simplifying operations from deploying without IPv4. 🔗 colocatedeventsna2025.sched.com/event/28D0g/...
the new @golang.org 1.25.3 release does not seem to be available on MacOS via Homebrew yet? 🤔
1.25.3 is available now 😁https://formulae.brew.sh/formula/go#default
I enjoyed reading the first few chapters in antonz.org/go-concurren... so much that I ended up purchasing the eBook 😁 It's just $10 which is a small token of appreciation for all that @antonz.org gives to the #go community for free! Plus now I get to solve all the exercises in the book. 😋
A couple of awesome resources which I came across as I was learning concurrency patterns in #go 1. Gist of Go by @antonz.org antonz.org/go-concurren... 2. Interactive guide to concurrency patterns by Richard Chukwu concurrency.rocks
For anyone using or interested in running @cilium.io as standalone NAT46x64Gateway I have updated my blog post for the latest cilium v1.18.x releases. netops2devops.net/posts/cilium...
📣 New Blog Post Apparently, there are a few gotcha's when trying to checkpoint a running pod in #k3s which I learnt the hard way. I documented my findings in the blog post. #criu #kubernetes #forensics netops2devops.net/posts/checkp...
Whoever created #hubble for @cilium.io @isovalent.bsky.social should be given a gold medal. You have my utmost respect 🫡 Debugging Kubernetes networking issues has never been this easy.
Kapil Agrawal reposted
The schedule for #CiliumCon is live! It features talks and end user stories on IPv6, #Cilium Mesh, DNS in #eBPF from companies like Microsoft, SeatGeek, ESnet, and more. Register now and join the community Nov 10 in Atlanta during #KubeCon NA: colocatedeventsna2025.sched.com/overview/typ...
Kapil Agrawal reposted
CiliumCon schedule is out now From IPv6 only at ESNet to parsing DNS in eBPF at Microsoft to combining Cilium, Hubble, and Tetragon at Google to getting a service mesh into production in 90 days at SeatGeek colocatedeventsna2025.sched.com/overview/typ...
the policy I was trying to write already comes ready made in #Kyverno policy library and it's less than 20 lines of YAML!! kyverno.io/policies/oth... As much as I love #OPA the developer experience around using it with gatekeeper is a bit rough (IMO).
I am really starting to appreciate how @openpolicyagent.bsky.social docs have been re-organized in the recent update!
Upcoming changes in #Cilium 1.18.0 will bring significant improvements for operating #Kubernetes in #IPv6 only networks! One big ticket item is that now you can use the default tunnel mode with an IPv6 only underlay. I shared my configs in GitHub issue comments github.com/cilium/ciliu...
While #Cilium is most commonly used as a CNI, not much has been documented about its capabilities outside of #Kubernetes, specially as a standalone NAT46x64 gateway for #IPv6 only networks. netops2devops.net/posts/cilium...