[home]
RSS

Production-to-Dev in One Button: My Talk at Percona Live 2026 Amsterdam

•
1 min read
#kubernetes#mysql#percona#privacy#gdpr#talks

Earlier today I gave a talk in the MySQL track at Percona Live Amsterdam called Production-to-Dev in One Button: K8s-native PII anonymization for Percona XtraDB Cluster Backups. It's about turning the latest production backup into an anonymized dev clone on Kubernetes without developers ever seeing real PII. Built on the Percona XtraDB Cluster Operator, the pipeline restores the backup into a throwaway cluster, runs a Python job that rewrites PII row by row with Faker according to a config file, then publishes the result as a new backup that dev and test environments bootstrap from through a single latest pointer.

The operator behind it, pxc-anonymizer, is now public on GitHub under the Apache 2.0 license. It's early (the newest tag is a 0.1.0 alpha), so if you try it and something breaks or the config format doesn't fit your schema, open an issue and I'll take a look.

Open the slides in a new tab (PDF)

$ find ./blog --related

I found a Vulnerability. They found a Lawyer.

What happens when you responsibly disclose a critical vulnerability exposing personal data - including that of minors - and the organization responds with legal threats instead of a thank you?

Bare-Metal Kubernetes HA: Floating IPs Over BGP With Cilium and UniFi's UCG-Fiber

Two floating LoadBalancer IPs over BGP on a 3-node k3s cluster - one fronting Traefik, one fronting the Kubernetes API server through cilium-envoy with active health checks. Full ansible + Helm config, and the Cilium 1.19 externalTrafficPolicy gotcha that silently broke the apiserver path.

Kubernetes Deployment Strategies for Zero Downtime

Exploring advanced Kubernetes deployment strategies including rolling updates, blue-green deployments, and canary releases to achieve zero-downtime deployments for production applications.