iiinova — where your digital self keeps evolving

Lucas Käldström @luxas.dev · 27/05/2026

On top of this, one could build RBAC++, yes. It won't be the existing APIs though, to keep those simple and give more power in other APIs.

000

Lucas Käldström @luxas.dev · 27/05/2026

There's work also on Conditional Authorization, KEP-5681, that together with 4601 and automated reasoning (SMT logic) could give a unified way to handle reads and write policies. Some links: speakerdeck.com/luxas/tools-... PoC impl here github.com/upbound/kube...

speakerdeck.com

Tools and Strategies for Making the Most of Kubernetes Access Control

Presented at KubeCon Atlanta 2025 together with Micah Hausler. Location: Atlanta Convention Center, 285 Andrew Young International Blvd NW, Atlanta, …

110

Lucas Käldström @luxas.dev · 18/12/2025

Cool, send me a message on LinkedIn 👍

200

Lucas Käldström @luxas.dev · 15/12/2025

Want to know how it could be used in the Kubernetes ecosystem? Check out github.com/upbound/kube... on Github and my talks on the Cedar at Speakerdeck: speakerdeck.com/luxas

lnkd.in

This link will take you to a page that’s not on LinkedIn

010

Lucas Käldström @luxas.dev · 15/12/2025

I gave a quote for the launch blog post as follows: “What I appreciate the most about Cedar is the deep knowledge that is encoded into why it works the way it works… the careful balance between expressiveness and analyzability.”

100

Lucas Käldström @luxas.dev · 15/12/2025

This feels very similar to when I first saw Kubernetes more than 10 years ago. A project with the potential to transform an entire industry, with creators that have been facing these problems for a long time, and with already many prior iterations experience is drawn from.

200

Lucas Käldström @luxas.dev · 15/12/2025

Cedar Policy joins the CNCF! 🚀 The cloud native community can now rely on a fast, safe, expressive, analyzable and formally verified authorization library when implementing access control🔓 This is a game-changer for implementing ACLs both safely & quickly aws.amazon.com/blogs/openso...

aws.amazon.com

Cedar Joins CNCF as a Sandbox Project | Amazon Web Services

Cedar, an open source authorization policy language and SDK, has joined the Cloud Native Computing Foundation (CNCF) as a Sandbox project. CNCF provides a neutral home for early stage and developing o...

290

Reposted by Lucas Käldström

Bridget Kromhout @bridgetkromhout.bsky.social · 05/12/2025

Trust in open source communities: figuring out where humans connect (not just companies and tools.) Whom do we trust? Trust requires context and judgement.💯 @sarahnovotny.com #KCDRomandie

Community > Company; Distribution > Centralization; Improvement > Stagnation; Automation > process

In an open source community, things grow to look like the people that are most active. Ross Gardler

073

Lucas Käldström @luxas.dev · 05/12/2025

It was super fun visiting KCD Suisse Romande and CERN, and talking about Kubernetes Access Control! 😁 Thanks Ricardo Rocha and team for organizing and @bridgetkromhout.bsky.social for the pictures 🙌

020

Reposted by Lucas Käldström

Crossplane project @crossplane.io · 06/11/2025

🚀Crossplane is now a CNCF Graduated Project! 🎓 From an idea at @upbound.io to a global community shaping platform engineering. 💜 3,000+ contribs. 450+ orgs. 100M+ downloads 🔗 www.cncf.io/announcement... #CNCF #Crossplane #Kubernetes #PlatformEngineering

2217

Lucas Käldström @luxas.dev · 08/08/2025

Super excited to be speaking at KubeCon Atlanta about recent Kubernetes access control developments with @micahhausler.com 🥳🚀

080

Lucas Käldström @luxas.dev · 08/08/2025

Welcome to the Nordics! Make sure to check Finland out as well and let me know if you do 😁

120

Lucas Käldström @luxas.dev · 01/07/2025

I spoke with a SPIFFE maintainer about something similar the other day. He prototyped an example of the token equivalent here github.com/spiffe/k8s-s... I wrote in my thesis that it'd be fun to see how far retrofitting SPIFFE into k8s would go in practice.

github.com

GitHub - spiffe/k8s-spiffe-workload-auth-config

Contribute to spiffe/k8s-spiffe-workload-auth-config development by creating an account on GitHub.

000

Lucas Käldström @luxas.dev · 06/05/2025

I'm super excited to organize KCD Helsinki today, with my fellow co-organizers 🔥 📈 300+ attendees from 14 countries gathering at the OP Headquarters 🤩 34 talks across 3 tracks from Finnish and international experts 💡 13+ hours of Kubernetes content Let's go! See you there 🚀

0131

Reposted by Lucas Käldström

Bassam Tabbara @bassam.tabbara.com · 04/04/2025

Standing room only at the @crossplane.io v2 session #kubecon

074

Reposted by Lucas Käldström

Giant Swarm @giantswarm.io · 31/03/2025

Learning about the history of CEL in Kubernetes. Did you know it was first introduced 10 releases ago!? 🤯 We are fans of CEL in Kubernetes mainly thanks to them making Validating and MutatingAdmissionPolicies possible to avoid those risky webhooks in our clusters! #KubeCon #MaintainersSummit

112

Lucas Käldström @luxas.dev · 30/03/2025

Thanks @gregchase.bsky.social for this detailed thread about our talk! 🙌🤩

041

Lucas Käldström @luxas.dev · 30/03/2025

Super excited to be speaking at Cloud Native Rejekts 💯 We'll talk about "End to End Message Authenticity in Cloud Native Systems" with @micahhausler.com now 🙌 We'll cover how one can use the HTTP Message Signatures RFC 🔒

060

Lucas Käldström @luxas.dev · 29/03/2025

Awesome, looking forward to these! 🙌

020

Lucas Käldström @luxas.dev · 15/01/2025

Congrats, looking forward to it! 🙌

010

Reposted by Lucas Käldström

Cloud Native Rejekts @rejekts.io · 13/01/2025

🎉Happy New Year, folks! 📜It's notifications day for those who've submitted to KubeCon. Hence, CFP for #Rejekts2025 London is now open! ♻️Recycle your rejekted KubeCon talks and submit by January 27, 00:00 GMT (final deadline): tinyurl.com/2bsjpupp 🫰🏾Best of luck!!

03919

Reposted by Lucas Käldström

Hans Kristian @starefossen.bsky.social · 14/01/2025

Didn’t get accepted to #KubeCon? Fear not! Last chance to submit to Cloud Native Day Oslo is today 🚀 It is going to be legendary! sessionize.com/cloud-native...

sessionize.com

Cloud Native Day Oslo 2025: Call for Speakers

CFP GUIDEPlease review the CNCF CFP Guide to answer many common questions before submitting.DATES TO REMEMBER: CFP Opens: 1 October 2024 CFP Clo...

0105

Lucas Käldström @luxas.dev · 05/01/2025

Sorry for the delay, haven't been active here for a while, but www.women4cyberfinland.com/aboutus would be my best bet

women4cyberfinland.com

About us | Women4Cyber Finland

Tutustu toimintaamme.

031

Reposted by Lucas Käldström

mrbobbytabl.es @mrbobbytabl.es · 25/11/2024

Kubernetes apparently made it into an NCIS episode - DURING KubeCon. I guess theres any clear indicator that K8s has hit peek adoption, its that it gets used as techno-jargon to explain things in TV 🤣 Thanks @thisisnotapril.bsky.social for the find. youtu.be/AzrHurE_PSI

youtu.be

Bounce Their Evilness Right Back at 'em

YouTube video by NCIS

1110323

Lucas Käldström @luxas.dev · 26/11/2024

Wow, nice 😂 maybe CNCF should put into the project graduation criteria that "✅ is part of popular culture" with this as the standard 😂

010

Lucas Käldström @luxas.dev · 19/11/2024

Awesome work from Marek and @madhavjivrajani.bsky.social making the k8s API server cache more efficient! 🔥😍 And I heard more improvements are coming! 📈

1100

Lucas Käldström @luxas.dev · 19/11/2024

Awesome! 💪 Do you think this would apply to Kube SIG Network or more generally some CNCF-wide networking working group? One thing we didn't have time to mention, but I think is interesting is Tetrate's (closed source) implementation of NGAC youtu.be/sdA6wExZaZc?..., another type of ABAC graph system

youtu.be

Fine-Grained Policies RBAC with NGAC - José Carlos Chávez, Tetrate

YouTube video by CNCF [Cloud Native Computing Foundation]

000

Lucas Käldström @luxas.dev · 17/11/2024

Hope you enjoyed the talk! Lmk if you have comments or ideas where to apply some of these principles 😊

100

Reposted by Lucas Käldström

Joe Beda @h.olysh.it · 16/11/2024

If you could make everyone understand one truth, what would it be? I'll go first: Very few things in life are zero sum. We are all better off if we find ways for everyone to win instead of thinking that for us to win someone has to lose.

811519

Reposted by Lucas Käldström

Davanum Srinivas (@dims) @dims.dev · 14/11/2024

YET another bluesky list of k8s folks, this time it's those who directly work in (and members of) various community github orgs. bsky.app/profile/did:... If you are one, add a bluesky url in your github profile and poke me to re-run my script. cc @kubernetes.dev @kubernetes.io #kubecon

74314

Reposted by Lucas Käldström

Lucy Sweet @lucy.sh · 15/11/2024

Spotted backstage #kubecon

3398

Reposted by Lucas Käldström

Marko Mudrinić @xmudrii.bsky.social · 15/11/2024

I’m very proud to share that I received “Lift and Shift” award from @cncf.bsky.social, along with my colleague @koksay.bsky.social and some very awesome folks from @kubernetes.io SIG K8s Infra! 🤩 We did some outstanding job, and huge thanks to CNCF for recognizing our work ✨💖

1172

Reposted by Lucas Käldström

Jimmy Zelinskie @jimmy.zelinskie.com · 13/11/2024

I have the pleasure of speaking about on everything authorization and Kubernetes today at 4:30 in Room 151G

Expanding the Capabilities of Kubernetes Access Control with Jimmy Zelinskie and Lucas Kaldstrom.

052

Reposted by Lucas Käldström

Micah Hausler @micahhausler.com · 14/11/2024

Nice Cedar shoutouts in an excellent talk on Kubernetes authorization by @jimmy.zelinskie.com and @luxask.bsky.social!

041

Reposted by Lucas Käldström

n3wscott @n3wscott.com · 13/11/2024

About to watch @jimmy.zelinskie.com and @luxask.bsky.social talk about expanding k8s access control!

191

Lucas Käldström @luxas.dev · 13/11/2024

@sttts.social and Mangirdas Judeikis dive deep into Generic Control Planes and kcp, showing what is the future of control planes are, with live demos 🔥🚀

Kubernetes Options-Config-Server pattern

061

Reposted by Lucas Käldström

SIG Boba 🧋 @sig-boba.github.io · 13/11/2024

Tasting things before tomorrow! (with @luxask.bsky.social) sign up :) sig-boba.github.io #kubecon

two boba drinks in stein glasses (peach green tea & mango milk tea) with Flox and special Flox glyph<3bobacup stickers, a vegetarian crepe, and an oero crepe

021

Reposted by Lucas Käldström

Davanum Srinivas (@dims) @dims.dev · 12/11/2024

(Resurrecting a thread i posted elsewhere!) "I want to contribute to Kubernetes, how do i get started?" First step join kubernetes slack at slack.k8s.io (Join at least #kubernetes-dev) Second step browse the contributor oriented resources at k8s.dev @kubernetes.dev @kubernetes.io #kubecon

slack.k8s.io

Join Kubernetes on Slack - Community Inviter

Join Kubernetes on Slack. Powered by Community Inviter. You will get an invitation soon. Check your inbox.

44420

Reposted by Lucas Käldström

SIG Boba 🧋 @sig-boba.github.io · 12/11/2024

It's happening again! Tomorrow night, 8-11pm here in SLC crepes, Mario kart, and great people (of course boba as well) Bring your friends :) sig-boba.github.io #kubecon

sig-boba.github.io

SIG Boba

The fun & safe cloud-native party 🧋🎉

032

Reposted by Lucas Käldström

Davanum Srinivas (@dims) @dims.dev · 11/11/2024

As you may know Kubernetes API as a suite of tests for conformance to ensure that the developer experience is consistent across Kubernetes distributions. For the longest time we had tech debt in the sense that we did not cover the entire API fully. We have been tracking this for a while!

1177

Reposted by Lucas Käldström

Andy Randall @ahrkrak.bsky.social · 11/11/2024

Quite a lot of discussion around @bsky.app here at #KubeCon, and consensus that it was @kelseyhightower.com 's clear exit from the other place that was the tipping point for the cloud native community coming over here en masse. Thank you Kelsey for your leadership in this and so many other ways.

917622