Tim Allclair

Kubernetes @Google. Opinions are my own. He / him. #BlackLivesMatter

[Rita Zhang @ritazzhang]

Are you struggling with migrating off PSP? Come to this #kubecon talk to learn about the PodSecurityPolicy migration tool from @tallclair & Sam Stoelinga https://t.co/K6Y6KOE3Wg

[Tim Allclair @tallclair]

@bdowney According to this, out is better: https://t.co/k6uypiBcmr

[Tim Allclair @tallclair]

I've been helping my wife (child psychologist) build a site for mental health children's books recommendations, and I'm proud of the work she's done. If you're a parent or read books with kids, I hope you find it useful!

https://t.co/CUtIS7LeyA

[Tim Allclair @tallclair]

I'm really excited that Pod Security Admission is stable in #Kubernetes v1.25. It provides super-simple out-of-the-box pod security, and I'm optimistic that it will raise the bar for baseline Kubernetes hardening.

https://t.co/te02IFuX2f

[Tim Allclair @tallclair]

I'm looking forward to presenting some strategies for migrating off of Pod Security Policy with @samosx at the next #kubecon

https://t.co/LIYiswrK9i

[Tim Allclair @tallclair]

@stevenharms That fixed it, thanks!

[Tim Allclair @tallclair]

Something happened to my twitter feed, and it’s now 90% viral content. Anyone else notice this or did I just click on one too many viral tweets?

[Tim Allclair @tallclair]

@jaicesd Yikes, hope you get well soon!

[Tim Allclair @tallclair]

@MrBobbyTables Yikes! Good luck!

[Tim Allclair @tallclair]

Unfortunately PSP doesn't give us any good tools to identify mutations, so the process is still more manual than I'd like.

[Tim Allclair @tallclair]

I recently rewrote the #kubernetes Pod Security migration guide. If you're thinking of moving from PSP to Pod Secruity, check it out!
https://t.co/bqHghPOLhZ

[Tim Allclair @tallclair]

@jaicesd Snooze.

[Tim Allclair @tallclair]

It was fun talking with @pablokbs about Kubernetes and container security. The interview is in English, if you want to check it out.

[Pablo Fredrikson @PeladoNerd]

En el podcast de hoy, charlo con un ingeniero de Google y grosso en seguridad de Kubernetes. No se la pierdan

https://t.co/ZKovEB8lVH

PD: El 31/03 hay un evento gratuito donde van a hablar de la deprecación de Dockershim en Kubernetes 1.24! https://t.co/0iV8YlP9vD anótenseeeee

[Google Open Source @GoogleOSS]

🤔 Want to learn why Dockershim is being deprecated on Kubernetes 1.24 from industry experts?

Register for the panel "After the storm: Dockershim deprecation demystified" here 👉 https://t.co/8QkPleqxCQ starting at 9:00 AM PDT on March 31st.

[Rory McCune @raesene]

Some notes on a new Linux kernel CVE that dropped last week and could allow for container breakout in Kubernetes environments https://t.co/BowzceglSR . Interesting to note that using a seccomp filter (as in default Docker) can help mitigate this issue.

[Tim Allclair @tallclair]

@kaslinfields Thank you for your service!

[Tim Allclair @tallclair]

@lumjjb @Google Congrats! I hope we get to work together! Hit me up if you have any questions.

[Tim Allclair @tallclair]

@puerco @chainguard_dev Congrats! I hope you continue to contribute to Kubernetes too :D

[Tim Allclair @tallclair]

@a_sykim Me too! I'll keep an eye out for you in onboarding classes (is that still a thing?)

[Tim Allclair @tallclair]

My time away helped me realize a lot of the great parts of Google's culture that I'd taken for granted. Hopefully I picked up some positive new perspectives to bring back with me too.

[Tim Allclair @tallclair]

Today is my first day back at Google after a 1.5 year hiatus. I'm excited to be rejoining the GKE team, focusing more on Kubernetes upstream, and branching out from security.