Tim Allclair

Are you struggling with migrating off PSP? Come to this #kubecon talk to learn about the PodSecurityPolicy migration tool from @tallclair & Sam Stoelinga sched.co/182Jx

@bdowney According to this, out is better: youtu.be/1L2ef1CP-yw

I've been helping my wife (child psychologist) build a site for mental health children's books recommendations, and I'm proud of the work she's done. If you're a parent or read books with kids, I hope you find it useful! dranniesbookshelf.com/?ref=tw

I'm really excited that Pod Security Admission is stable in #Kubernetes v1.25. It provides super-simple out-of-the-box pod security, and I'm optimistic that it will raise the bar for baseline Kubernetes hardening. kubernetes.io/blog/2022/08/2…

I'm looking forward to presenting some strategies for migrating off of Pod Security Policy with @samosx at the next #kubecon sched.co/182Jx

@stevenharms That fixed it, thanks!

@tallclair Did it swap over to the algorithmic one? If you click the star / sparkle icon you can swap it back to chronological

Something happened to my twitter feed, and it’s now 90% viral content. Anyone else notice this or did I just click on one too many viral tweets?

@jaicesd Yikes, hope you get well soon!

@MrBobbyTables Yikes! Good luck!

Didn't think I'd spend Wednesday night in the utility room with all the animals and a tornado warning going, but here we are 😬

Unfortunately PSP doesn't give us any good tools to identify mutations, so the process is still more manual than I'd like.

I recently rewrote the #kubernetes Pod Security migration guide. If you're thinking of moving from PSP to Pod Secruity, check it out! kubernetes.io/docs/tasks/con…

@jaicesd Snooze.

It was fun talking with @pablokbs about Kubernetes and container security. The interview is in English, if you want to check it out.

🤔 Want to learn why Dockershim is being deprecated on Kubernetes 1.24 from industry experts? Register for the panel "After the storm: Dockershim deprecation demystified" here 👉 goo.gle/35FoESd starting at 9:00 AM PDT on March 31st.

Some notes on a new Linux kernel CVE that dropped last week and could allow for container breakout in Kubernetes environments blog.aquasec.com/cve-2022-0185-… . Interesting to note that using a seccomp filter (as in default Docker) can help mitigate this issue.

@kaslinfields Thank you for your service!

When I'm reviewing CFPs, especially for KubeCon, I basically go through every single submission at least twice. I do a first pass to write down initial thoughts. That first pass allows me to calibrate the bar, then I do a more rigorous round of rating.

@lumjjb @Google Congrats! I hope we get to work together! Hit me up if you have any questions.

I am excited to share that I'll be starting at @Google next week! I'll be joining a bunch of awesome folks to work on Open Source Security (OSS)! More specifically, software supply chain! Looking forward to continue working with the community!😃

@puerco @chainguard_dev Congrats! I hope you continue to contribute to Kubernetes too :D

This is the day!! Starting today I'm joining the impossibly amazing team @chainguard_dev to help secure software supply chains across the Open Source world 🥳 Those chains are not going to secure themselves, so let's get to work! 🚀

@a_sykim Me too! I'll keep an eye out for you in onboarding classes (is that still a thing?)

Today is my first day at Google, where I'll be jumping back into the Kubernetes / OSS world! Looking forward to working with new/old friends!

My time away helped me realize a lot of the great parts of Google's culture that I'd taken for granted. Hopefully I picked up some positive new perspectives to bring back with me too.

Today is my first day back at Google after a 1.5 year hiatus. I'm excited to be rejoining the GKE team, focusing more on Kubernetes upstream, and branching out from security.