Forwarded from Kube Architect
KubeBrain is a project that aims to replace etcd with a pluggable storage engine for Kubernetes.
More: https://github.com/kubewharf/kubebrain
More: https://github.com/kubewharf/kubebrain
In this article, you will explore the Kubernetes API and interact with it directly.
More: https://medium.com/cp-massive-programming/kubernetes-api-server-discovery-ac3b358e878e
More: https://medium.com/cp-massive-programming/kubernetes-api-server-discovery-ac3b358e878e
Forwarded from Kube Architect
In this article, you'll learn how to deploy a web application to Azure Kubernetes Service (AKS) without writing any Docker or Kubernetes manifest files.
Instead, you'll use Draft and Acorn.
More: https://medium.com/@pauldotyu/app-to-aks-with-draft-and-acorn-2d25f19649b7
Instead, you'll use Draft and Acorn.
More: https://medium.com/@pauldotyu/app-to-aks-with-draft-and-acorn-2d25f19649b7
This week on the Learn Kubernetes Weekly:
☁️ Using topology aware hints in EKS
👮♀️ 12 security scanners for Kubernetes
👻 Temporary environments with ApplicationSet
🦐 oslabs-beta/Palaemon
📦 Endpoints monitoring with blackbox-exporter
Read it now: https://learnk8s.io/learn-kubernetes-weekly
☁️ Using topology aware hints in EKS
👮♀️ 12 security scanners for Kubernetes
👻 Temporary environments with ApplicationSet
🦐 oslabs-beta/Palaemon
📦 Endpoints monitoring with blackbox-exporter
Read it now: https://learnk8s.io/learn-kubernetes-weekly
k8s-ecr-login-renew renews Docker login credentials for an AWS ECR container registry.
It deploys as a cron job and ensures that your Kubernetes cluster can always pull Docker images from ECR.
More: https://github.com/nabsul/k8s-ecr-login-renew
It deploys as a cron job and ensures that your Kubernetes cluster can always pull Docker images from ECR.
More: https://github.com/nabsul/k8s-ecr-login-renew
Forwarded from Kube Architect
In this article, you will learn how you can use Google's Multi-cluster services (MCS) to reach GKE services on different VPCs between projects.
You'll also discuss some of the limitations and how this may be only a temporary solution.
More: https://medium.com/zeals-tech-blog/cross-project-cross-vpc-communication-with-gke-multi-cluster-services-1e48d912614c
You'll also discuss some of the limitations and how this may be only a temporary solution.
More: https://medium.com/zeals-tech-blog/cross-project-cross-vpc-communication-with-gke-multi-cluster-services-1e48d912614c
Forwarded from Kubesploit
Google Secret Manager Provider for Secret Store CSI Driver allows you to access secrets stored in Secret Manager as files mounted in Kubernetes pods.
More: https://github.com/GoogleCloudPlatform/secrets-store-csi-driver-provider-gcp
More: https://github.com/GoogleCloudPlatform/secrets-store-csi-driver-provider-gcp
Node Feature Discovery is a Kubernetes add-on for detecting hardware features and system configuration.
It detects hardware features available on each node in a Kubernetes cluster and advertises those features using node labels.
More: https://github.com/kubernetes-sigs/node-feature-discovery
It detects hardware features available on each node in a Kubernetes cluster and advertises those features using node labels.
More: https://github.com/kubernetes-sigs/node-feature-discovery
Forwarded from Kube Architect
In this tutorial, you'll learn how to deploy Prometheus and Grafana on Kubernetes.
Then you'll deploy an application that can publish custom metrics to Prometheus.
And finally, you'll use KEDA to auto-scale based on these metrics.
More: https://medium.com/@akarX23/deploying-prometheus-and-grafana-in-a-multi-node-kubernetes-cluster-and-auto-scaling-with-keda-eccecfbd8950
Then you'll deploy an application that can publish custom metrics to Prometheus.
And finally, you'll use KEDA to auto-scale based on these metrics.
More: https://medium.com/@akarX23/deploying-prometheus-and-grafana-in-a-multi-node-kubernetes-cluster-and-auto-scaling-with-keda-eccecfbd8950
In this article, you will learn how to correctly set up your containers to forward the SIGTERM signal to the main process.
This is crucial for gracefully shutting down apps in Kubernetes.
More: https://lucaspin.medium.com/where-is-my-sigterm-docker-ff7fd8aec757
This is crucial for gracefully shutting down apps in Kubernetes.
More: https://lucaspin.medium.com/where-is-my-sigterm-docker-ff7fd8aec757
Kubectl plugins for diagnosing pods that are "Not Ready" (that have failing Pod Conditions or containers).
This plugin also supports the standard Pod selection arguments and one or multiple pod names to explicitly diagnose.
More: https://github.com/alecjacobs5401/kubectl-sick-pods
This plugin also supports the standard Pod selection arguments and one or multiple pod names to explicitly diagnose.
More: https://github.com/alecjacobs5401/kubectl-sick-pods
❤1
Forwarded from Kube Architect
In this article, you will learn how to use virtual threads, build a native image with GraalVM and run such the Java app on Kubernetes.
More: https://piotrminkowski.com/2023/01/04/native-java-with-graalvm-and-virtual-threads-on-kubernetes
More: https://piotrminkowski.com/2023/01/04/native-java-with-graalvm-and-virtual-threads-on-kubernetes
In this (unusual) tutorial, you will use Terraform to create resources (e.g. deployments, namespaces) in a minikube cluster using HCL.
More: https://medium.com/rahasak/terraform-kubernetes-integration-with-minikube-334c43151931
More: https://medium.com/rahasak/terraform-kubernetes-integration-with-minikube-334c43151931
In this paper, you will learn how Kubernetes operators work and how you could automate testing operators by mutating the state that an operator depends on and observing the effects.
More: https://micahlerner.com/2022/07/24/automatic-reliability-testing-for-cluster-management-controllers.html
More: https://micahlerner.com/2022/07/24/automatic-reliability-testing-for-cluster-management-controllers.html
Forwarded from Kube Architect
In this article, you will learn how Uber built their remote development environment on Kubernetes using a custom operator and Custom Resource Definitions.
More: https://www.uber.com/en-MX/blog/devpod-improving-developer-productivity-at-uber
More: https://www.uber.com/en-MX/blog/devpod-improving-developer-productivity-at-uber
Draino automatically drains Kubernetes nodes based on labels and node conditions.
Nodes that match all of the supplied labels and any of the supplied node conditions will be cordoned immediately and drained after a configurable drain-buffer time.
More: https://github.com/planetlabs/draino
Nodes that match all of the supplied labels and any of the supplied node conditions will be cordoned immediately and drained after a configurable drain-buffer time.
More: https://github.com/planetlabs/draino
If you want to implement good container image creation practices for your apps easily, Buildpacks is an excellent choice.
Learn what Buildpacks are and how to use them in this article.
More: https://www.adaltas.com/en/2023/01/09/how-to-build-your-oci-images-using-buildpacks
Learn what Buildpacks are and how to use them in this article.
More: https://www.adaltas.com/en/2023/01/09/how-to-build-your-oci-images-using-buildpacks
Pod priority and preemption help ensure that mission-critical pods are up in the event of a resource crunch by deciding the order of scheduling and eviction.
Learn more in this article.
More: https://kubernetes.io/blog/2023/01/12/protect-mission-critical-pods-priorityclass
Learn more in this article.
More: https://kubernetes.io/blog/2023/01/12/protect-mission-critical-pods-priorityclass
Forwarded from Kubesploit
In this tutorial, you will deploy a vulnerable app to SQL and XSS injections in Kubernetes and learn how to protect it using Pipy and sidecar containers.
More: https://dev.to/flomesh/pipy-protecting-kubernetes-apps-from-sql-injection-xss-attacks-dol
More: https://dev.to/flomesh/pipy-protecting-kubernetes-apps-from-sql-injection-xss-attacks-dol
Have you ever tried to ping a Service IP address in Kubernetes?
You might have noticed that it doesn't work.
In this article, you will learn how ClusterIP services and kube-proxy work in Kubernetes.
More: https://dev.to/danielepolencic/learn-why-you-cant-ping-a-kubernetes-service-3nlm
You might have noticed that it doesn't work.
In this article, you will learn how ClusterIP services and kube-proxy work in Kubernetes.
More: https://dev.to/danielepolencic/learn-why-you-cant-ping-a-kubernetes-service-3nlm
Forwarded from Kube Builders
In this article, you will have a look at the following kubectl plugins:
1. neat.
2. view-secret.
3. access-matrix.
4. blame.
5. df-pv.
6. gke-outdated.
More: https://shardul.dev/most-useful-kubectl-plugins
1. neat.
2. view-secret.
3. access-matrix.
4. blame.
5. df-pv.
6. gke-outdated.
More: https://shardul.dev/most-useful-kubectl-plugins