Leigh is building Flox and is active with the Kubernetes and Flux projects.

He has a background in infrastructure software with a security niche.

He authored Flux 2's security model and kubeadm's mTLS implementation and is currently working on Kubernetes authorization with SIG Auth.

Leigh and his wife love to snowboard in Colorado and have 3 dogs.

https://flox.dev

https://github.com/flox/flox

Presentations

22x

Rethinking the Container Layer with Nix

How many layers can you put in a container?
Do you know why there's a limit?

Containers are a fantastic virtualization technology.
They even have some packaging properties!

However, we can learn a lot of new cloud-native magic tricks if we bring packaging discipline a little further through the stack of bits that make up our container image layers and OCI manifests.

Nix uses stores that isolate packages into hashed folders that can be used independently from each other and combined with each other!

Sounds a lot like a container registry, doesn't it?

See Presentation
22x

Developing as a Team for Kubernetes with Nix and Flox

In this workshop, Leigh, Tanja, and Nick will show a GitOps workflow for both your team's laptops and Kubernetes clusters.

We'll cover the basics of Nix and Flox, a collaborative interface for using Nix as a team.

Attendees will work together in the hands-on portion to:
- bootstrap a frontend and backend project with Javascript, Go, and Postgres
- declare cross-platform tools and dependencies for build and development
- containerize their build in a Nix-native way
- use GitOps via Flux to promote their service to Kubernetes clusters with zero-downtime deploys

See Presentation
21x

Gateway API: Basics, Nuance, and the Real World

A Kubernetes computer is supposed to house all of our apps!

How do we expose them to the people who need them?

We used to use the Ingress API for this, but we can do better.

Gateway API is an improved approach that allows cluster operators and application owners to own the pieces and policies they need to route traffic to applications.

In this session, you'll learn the basics of Gateway API.

What are the resources and how are they used together?

What considerations are needed for zero downtime deploys?

We will cover this and more.

Expect a live demo and some *performance art* :)

See Presentation
20x

RBAC 101: Basics, Misconceptions, and the Real World

Every day, someone new wants to deploy their cloud native app.

Suddenly, all sorts of people have questions and need to make changes.

How should platform teams give folks the access they need?

This session will show how the basics of Kubernetes Role-Based Access Control (RBAC) compose a flexible system that lets teams work together.

Come learn about:

- RBAC Basics

- Identity

- Common Misunderstandings

- RBAC's Limitations

- Helpful Patterns for Real World Usage

Expect to leave better equipped to support the transparent, collaborative, self-service ownership of a DevOps culture.

See Presentation
20x

Workshop: GitOps - Collaborating at Organizational Scale

In this workshop, Leigh and Eddie will show why GitOps is changing the industry.

We’ll start with a short presentation on the principles of GitOps.

The hands-on will use Flux to teach how a control repo can be shared.

Expect to learn:

- Bootstrap of Cluster Config

- Declarative Rollout of Dependencies

- Repo Layout

- Team Delegation / Dropping Privileges

- RBAC, Tracing, & Debugging

- Pull Workflows + Webhooks

- Notifications & Developer UX

- Release Engineering Strategies

We’ll end this session with advanced topics:

- Progressive Delivery

- Virtual Clusters

See Presentation