DARK provides a way to define and deploy Grafana dashboards with Custom Resource Definitions.

If you want to version your dashboards and deploy them across environments, this project is meant for you.

More: https://github.com/K-Phoen/dark

Helmify is a command line tool that converts Kubernetes YAML files to Helm charts. It is designed for operator charts but can also be used for other purposes.

More: https://github.com/arttor/helmify

In this article, you will learn how to bind to low ports (1024<) as a non-root user with Docker and Kubernetes.

You'll cover 3 different ways to solve this problem:

1. Use a High Port.
2. Setting Kernel Parameters with sysctl.
3. Setting Capabilities.

More: https://nickjanetakis.com/blog/binding-to-low-ports-as-a-non-root-user-with-docker-and-kubernetes

This week's 6 best Kubernetes Platform Engineer jobs are:

Platform Engineer with OpenAI
💰 $300K to $450K a year
🏠 From the office in San Francisco, CA, USA
→ https://kube.careers/t/27f27934-60d2-4bca-b480-e20f2d5b9263?s=55

Platform Engineer with Zoox
💰 $203K to $293K a year
🏠🏃🏻‍♂️🌎 Foster City, CA, USA
→ https://kube.careers/t/168a7256-0ae9-495f-bbb4-b007fd8d48ef?s=55

Platform Engineer with Primer
💰 $225K to $250K a year
🏠 From the office in San Francisco, CA, USA
→ https://kube.careers/t/41375119-5d20-4f0c-bb02-05bca7132cba?s=55

Platform Engineer with Tecton
💰 $216K to $258K a year
👨‍💻 Remote from the United States
→ https://kube.careers/t/ab4a16be-7f91-45bc-846a-79e80a8b3f86?s=55

Platform Engineer with Airbyte
💰 $211K to $250K a year
🏠🏃🏻‍♂️🌎 San Francisco, CA, USA
→ https://kube.careers/t/321aea74-4693-4400-b111-3ee6b90830d8?s=55

👉 Browse all 447 Kubernetes jobs on Kube Careers https://kube.careers

airgapify is a tool that will construct a Docker image archive from a set of Kubernetes manifests.

More: https://github.com/gpu-ninja/airgapify

In this article, you will learn how to change the Pod's pids.max value (e.g. the max number of allowed PIDs which means the number of running processes) for a Pod.

More: https://yossicohn.medium.com/pids-limit-how-to-change-k8s-pods-limit-d21121b7986c

This week on the Learn Kubernetes Weekly:

⛵️ From RSS to WSS: Kubernetes memory metrics
⏩ Portless ports
📝 Trusting self-signed certificates
🔗 Binding to Low Ports as a Non-root User
⚙️ PIDs limit: how to change them

Read it now: https://learnk8s.io/issues/60

Kermoo offers resilience testing with configurable process delays, back-end failures, CPU Simulations, and memory leaks.

More: https://github.com/evryn/kermoo

This article explores the fundamental concepts, syntax, semantics, and implementation considerations associated with Network Policies.

It also delves into best practices and real-world examples to illustrate their practical application and benefits.

More: https://blog.slycreator.com/network-policies-understanding-kubernetes-network-policies

Cluster API brings declarative Kubernetes-style APIs to cluster creation, configuration and management.

This provider lets you create Terraform Modules to implement Cluster API's contracts and run them in Terraform Cloud to provision the infrastructure.

More: https://github.com/hashicorp/cluster-api-provider-terraform-cloud

Master Kubernetes with Learnk8s' Advanced Kubernetes workshops!

What should you expect?

- Learn how to architect and design clusters from the ground up (in the cloud or on-prem).
- Explore the Kubernetes internal component and how the system is designed with resiliency in mind.
- Deep-dive into the networking components and observe the packets flowing into the cluster.
- Hands-on labs to test the theory with real-world scenarios!
- And more.

The next course starts next month in Amsterdam: https://learnk8s.io/amsterdam-advanced-february-2024

We also run in-person courses and corporate training: https://learnk8s.io/corporate-training

libvirt_autoscaler implements a gRPC server based on the externalgrpc Cloud Provider for the Kubernetes autoscaler project.

This server communicates to a libvirt/kvm installation to enable libvirt/kvm as a target for cluster autoscaling.

More: https://github.com/PeterGrace/libvirt_autoscaler

Burrito is a Kubernetes controller that makes it easy to interact and manage Terraform code via Custom Resource Definitions.

More: https://github.com/padok-team/burrito

The State of Kubernetes Cost Optimization Report is a cloud-agnostic quantitative research study examining how Kubernetes capabilities and signals can help identify critical areas to prioritize to achieve greater reliability and cost efficiency.

More: https://cloud.google.com/blog/products/containers-kubernetes/new-report-state-of-kubernetes-cost-optimization

The Go runtime is not aware of the CPU limits set on the container and will happily use all the CPU available.

Learn how you can mitigate it by setting GOMAXPROCS or using Uber's automaxprocs (or waiting for a potential native solution).

More: https://riverphillips.dev/blog/go-cfs

This article teaches managing application terminations in containers, handling signals SIGTERM, SIGINT, SIGKILL, using Tini to avoid the PID1 problem, and ensuring graceful shutdowns for resilient systems.

More: https://dev.to/antoinecoulon/avoid-this-when-running-containerized-applications-in-production-562k

This week's 6 Kubernetes junior jobs are:

Software Engineer with Verkada
💰 $120K to $280K a year
🏠 From the office in San Mateo, CA, USA
→ https://kube.careers/t/10cf1909-acea-49c0-9782-da2228f00d66?s=55

Software Engineer with Moody's
💰 $105K a year
🏠 From the office in New York, NY, USA
→ https://kube.careers/t/308de63b-578b-49d8-be96-2e9417678776?s=55

DevOps Engineer with Lucid Motors
💰 $53.76K to $130.56K a year
🏠 From the office in Newark, CA, USA
→ https://kube.careers/t/dc132b56-d818-4bd5-8650-7987a29a64f7?s=55

Software Engineer with Air Space Intelligence
💰 $49.36K to $105.63K a year
🏠 From the office in Gdańsk, PL
→ https://kube.careers/t/b7a083a8-8ef1-4055-9973-d6946f906ec7?s=55

Software Engineer with SingleStore
💰 $40K to $80K a year
🏠 From the office in San Francisco, CA, USA
→ https://kube.careers/t/03b38873-b1ac-4294-b062-cc7c51e221af?s=55

👉 Browse all 485 Kubernetes jobs on Kube Careers https://kube.careers

In this article, you will learn how Getir optimizes Kubernetes CPU/memory for almost 4000 deployments and over 10k pods.

More: https://medium.com/@alexandre.highrollers/the-challenges-of-configuring-kubernetes-resources-requests-limits-in-combination-with-hpa-at-92177cb5a378

Kubernetes Janitor processes all namespaces and all namespaced resources, including custom resource definitions, and deletes them if:

- A TTL rule indicates the resource as expired.
- The janitor/expires annotation marks the resource as expired.

More: https://codeberg.org/hjacobs/kube-janitor

In this article, you will learn how to deploy Kubernetes in sensitive, no-internet environments like banking or defence using Fedora, Docker, kubeadm, Helm, and Zarf for managing air-gapped clusters and dependencies.

More: https://kubernetes.io/blog/2023/10/12/bootstrap-an-air-gapped-cluster-with-kubeadm

This article teaches how to enhance Kubernetes with multi-cluster architecture for improved availability, fault tolerance, and performance with a Service Mesh such as Linkerd.

More: https://buoyant.io/blog/multi-cluster-multi-region-setup-using-linkerd-service-mesh