Changes to a Secret of ConfigMap mounted into a pod can take 60 to 90 seconds to propagate to the container.

In this article, you'll discuss how you could speed up the process with a Kyverno policy.

More: https://neonmirrors.net/post/2022-12/reducing-pod-volume-update-times

This tutorial will teach you how to scan secrets in environment variables using Kubewarden and the env-variable-secrets-scanner-policy.

More: https://kubewarden.io/blog/2022/10/env-var-secrets

Finch is an open-source client for container development.

It works with containerd for container management, and with BuildKit to handle Open Container Initiative (OCI) image builds.

More: https://github.com/runfinch/finch

In this article, you will learn how to customize the image repository in Kubeadm.

In the process, you'll follow Sina's journey into reading the Kubernetes source code to debug an issue with the CoreDNS container image.

More: https://medium.com/@ssttehrani/customize-the-kubeadm-image-repository-c33ebdef7d82

kptop is a command-line tool for Kubernetes that provides pretty monitoring for Nodes, Pods, Containers, and PVCs resources on the terminal through Prometheus metrics.

More: https://github.com/eslam-gomaa/kptop

The Otterize intents operator is a tool used to easily automate the creation of network policies and Kafka ACLs in a Kubernetes cluster using a human-readable format via a custom resource.

More: https://github.com/otterize/intents-operator

aws-auth-manager is a Kubernetes controller designed to manage the aws-auth ConfigMap in EKS using a new AWSAuthItem CRD.

More: https://github.com/maruina/aws-auth-manager

k8s-csi-s3 is a CSI driver for S3 (or S3 compatible) storage.

This can dynamically allocate buckets and mount them via a fuse mount into any container.

More: https://github.com/yandex-cloud/k8s-csi-s3

metalk8s is an opinionated Kubernetes distribution with a focus on long-term on-prem deployments.

More: https://github.com/scality/metalk8s

kube-ps1 is a script that lets you add the current Kubernetes context and namespace configured on kubectl to your Bash/Zsh prompt strings (i.e. the $PS1).

More: https://github.com/jonmosco/kube-ps1

This week on the Learn Kubernetes Weekly:

🔨 Reducing Pod volume update times
👯‍♀️ Multi-cluster with Cluster API and ArgoCD
💥 From Amazon VPC CNI to Cilum with zero downtime
🧐 Intelligently estimating resource needs

Read it now: https://learnk8s.io/learn-kubernetes-weekly

This 3-part series aims at providing a good understanding of container resource sizing in Kubernetes.

It also includes a case study with 50m VMs and guides you through the thought process of selecting the right requests and limits for memory and CPU.

More: https://medium.com/@vvsevel/a-guide-to-kubernetes-application-resource-tuning-part-1-bf0ba04db10

In this guide, you will discuss how to create key/certificate pairs using OpenSSL to facilitate secure communication between Kubernetes Cluster components.

More: https://ahmedy.hashnode.dev/creating-tls-certificates-for-k8s-components-with-openssl

Your Kubernetes Pods have internal IPs, but can since Pods are created and destroyed, can you rely on those?

Discover services and their types: ClusterIP, NodePort and LoadBalancer.

More: https://sysdig.com/blog/kubernetes-services-clusterip-nodeport-loadbalancer

Master Kubernetes with Learnk8s' Advanced Kubernetes workshops!

What should you expect?

- Learn how to architect and design clusters from the ground up (in the cloud or on-prem).
- Explore the Kubernetes internal component and how the system is designed with resiliency in mind.
- Deep-dive into the networking components and observe the packets flowing into the cluster.
- Hands-on labs to test the theory with real-world scenarios!
- And more.

The next course is on the 24th of April and you can sign up here: https://learnk8s.io/online-advanced-april-2023

Server-side apply (SSA) is an excellent mechanism to improve Kubernetes operators' performance and is becoming the default way to apply resources in a cluster.

Let how it works in this article.

More: https://betterprogramming.pub/how-to-use-server-side-apply-in-k8s-operators-5cbff023183c

Kustomize supports 2 main client-side patching methods for Kubernetes manifests: JSON Patching and Strategic Merge Patch.

This article discusses the pros and cons and shows how to add a merging strategy extension for Custom Resources.

More: https://tech.aabouzaid.com/2022/11/set-openapi-patch-strategy-for-kubernetes-custom-resources-kustomize.html

Kine is an etcdshim that translates etcd API to SQLite, Postgres, Mysql, and dqlite.

More: https://github.com/k3s-io/kine

DataCater helps you to build modern, real-time data pipelines with Apache Kafka and Kubernetes.

You can choose from an extensive repository of filter functions, apply transformations, or code your own transforms in Python.

More: https://github.com/DataCater/datacater

The /proc directory is a special directory that holds all the details about our Linux system, such as — kernel, processes, and configuration parameters.

In this article, you will learn how to explore the directory in a Kubernetes cluster.

More: https://levelup.gitconnected.com/access-kubernetes-objects-data-from-proc-directory-8d2ec6a0faba

MDos is a Kubernetes-based application runtime platform, it's aim is to greatly simplify the process of creating, building and deploying applications on a Kubernetes cluster without compromising on security and efficiency.

More: https://github.com/mdundek/mdos