This project is an example of using the NixOS Kubernetes module in an advanced way, setting up a highly available cluster on all levels.

More: https://github.com/justinas/nixos-ha-kubernetes

This week on the Learn Kubernetes Weekly:

♻️ From 0 to 10'000 Jenkins builds a week
1️⃣ Only one label to improve your security posture
🔐 Vault integration
🔨 Testing on Kubernetes with Testkube
🆙 Migrating from MetaLB to Cilium

Read it now: https://learnk8s.io/issues/69

Kubernetes doesn't provide a support for the GPU sharing.

You must allocate the entire GPU to a workload, even if the actual GPU usage is less than 100%.

This project helps to improve GPU utilization by allowing GPU sharing between multiple workloads.

More: https://github.com/cnvrg/metagpu

kproximate is a node autoscaler project for Proxmox, allowing a Kubernetes cluster to scale across a Proxmox cluster dynamically.

More: https://github.com/lupinelab/kproximate

The local volume static provisioner manages PersistentVolume lifecycle for pre-allocated disks by detecting and creating PVs for each local disk on the host and cleaning up the disks when released.

It does not support dynamic provisioning.

More: https://github.com/kubernetes-sigs/sig-storage-local-static-provisioner

Fission is a fast serverless framework for Kubernetes, focusing on developer productivity and high performance.

Fission operates on just the code: Docker and Kubernetes are abstracted away under regular operation.

More: https://github.com/fission/fission

ko is a simple, fast container image builder for Go applications.

It's ideal for use cases where your image contains a single Go application without any/many dependencies on the OS base image (e.g., no cgo, no OS package dependencies).

More: https://github.com/ko-build/ko

Source-to-Image is a toolkit and workflow for building reproducible container images from source code.

It produces ready-to-run images by injecting source code into a container image and letting the container prepare that source code for execution.

More: https://github.com/openshift/source-to-image

This week's 6 Kubernetes junior jobs are:

Software Engineer with Verkada
💰 $120K to $280K a year
🏠 From the office in San Mateo, CA, USA
→ https://kube.careers/t/10cf1909-acea-49c0-9782-da2228f00d66?s=55

Machine Learning Engineer with Extropic
💰 $75K to $150K a year
🏠🏃🏻‍♂️🌎 San Francisco, CA, USA
→ https://kube.careers/t/a3999e9c-e95a-4764-aca1-92f7e855c170?s=55

DevOps Engineer with Lucid Motors
💰 $53.76K to $130.56K a year
🏠 From the office in Newark, CA, USA
→ https://kube.careers/t/dc132b56-d818-4bd5-8650-7987a29a64f7?s=55

Software Engineer with Air Space Intelligence
💰 $49.34K to $105.59K a year
🏠 From the office in Gdańsk, PL
→ https://kube.careers/t/b7a083a8-8ef1-4055-9973-d6946f906ec7?s=55

Data Engineer with Numberly
💰 $18.2K to $22.1K a year
👨‍💻 Remote from France
→ https://kube.careers/t/9fb829d4-1725-438c-a249-989f1f000b01?s=55

👉 Browse all 447 Kubernetes jobs on Kube Careers https://kube.careers

Scaphandre is an agent dedicated to electrical power consumption metrics.

The goal is to permit any company or individual to measure the power consumption of its tech services and obtain this data conveniently.

More: https://github.com/hubblo-org/scaphandre

Kubernetes: 50 namespaces vs 50 control planes vs 50 clusters.

For the last episode of "Building Kubernetes platforms", we decided to run an experiment: how much does multi-tenancy cost?

We created three scenarios:

- 50 tenants using the Hierarchical Namespace Controller.
- 50 tenants using vCluster.
- 50 dedicated clusters managed via Karmada.

Which one was the most expensive?

Spoiler: the dedicated clusters are very expensive.

But is it worth the investment?

Chris will cover it live on Thursday!

📆 Thu, 14th Mar
⏰ 8am PT | 5pm CET

👉 https://www.vcluster.com/event/workshop-series-3/

EKS Rolling Update is a utility for updating the launch configuration or template of worker nodes in an EKS cluster.

It updates worker nodes in a rolling fashion and performs health checks of your EKS cluster to ensure no disruption to service.

More: https://github.com/hellofresh/eks-rolling-update

AWS ACM Private CA is a module of the AWS Certificate Manager that can set up and manage private CAs.

This project acts as an addon to cert-manager that signs off certificate requests using AWS PCA.

More: https://github.com/cert-manager/aws-privateca-issuer

EKS NG AMI Updater is a project that can be used to update Kubernetes node group images.

By default, it will find all node groups in all your EKS clusters and update them to the newest node group AMI if one is available.

More: https://github.com/loomhq/eks-ng-ami-updater

Helm Compose is a tool for managing multiple releases of one or many different Helm charts.

Docker Compose heavily inspires it and is an extension of the package manager idea behind Helm itself.

More: https://github.com/seacrew/helm-compose

This week's 6 best Kubernetes Platform Engineer jobs are:

Platform Engineer with OpenAI
💰 $300K to $450K a year
🏠 From the office in San Francisco, CA, USA
→ https://kube.careers/t/27f27934-60d2-4bca-b480-e20f2d5b9263?s=55

Platform Engineer with Adept
💰 $175K to $350K a year
🏠🏃🏻‍♂️🌎 San Francisco, CA, USA
→ https://kube.careers/t/9e96008f-b78b-490b-a143-3f2db05a8559?s=55

Platform Engineer with Zoox
💰 $203K to $293K a year
🏠🏃🏻‍♂️🌎 Foster City, CA, USA
→ https://kube.careers/t/168a7256-0ae9-495f-bbb4-b007fd8d48ef?s=55

Platform Engineer with Anduril Industries
💰 $196K to $294K a year
🏠 From the office in Boston, MA, USA
→ https://kube.careers/t/eb2b9e1b-58ca-4bd9-89f9-33d46c7b8c21?s=55

Platform Engineer with Primer
💰 $225K to $250K a year
🏠 From the office in San Francisco, CA, USA
→ https://kube.careers/t/41375119-5d20-4f0c-bb02-05bca7132cba?s=55

👉 Browse all 448 Kubernetes jobs on Kube Careers https://kube.careers

Service meshes and the community's opinion of them have changed drastically over the years.

From being perceived as unnecessary, complicated and bloated, they matured into security and observability powerhouses (while still retaining much of their complexity).

In this KubeFM episode, William deep dives into the world of service meshes and explains a few of the technical choices and trade-offs of service meshes in simple terms.

You will learn:

- What is a service mesh and its design (i.e. control plane and data plane).
- How Ambient mesh departs from the traditional sidecar model and how it affects reliability and security.
- Why there's more than just eBPF in sidecarless service meshes and the limitation of this technology.
- The direct costs (compute) and human factors involved in operating a service mesh.

Watch (or listen to) it here: https://kube.fm/service-mesh-william

Alaz is an open-source eBPF agent that can inspect and collect Kubernetes service traffic without needing code instrumentation, sidecars, or service restarts.

More: https://github.com/ddosify/alaz

In this article, you will take a comprehensive look at the OWASP Kubernetes Top 10, discuss each risk in detail, and provide recommendations for mitigating it.

Finally, you'll look at tools and techniques for auditing your configuration.

More: https://medium.com/@seifeddinerajhi/owasp-kubernetes-top-10-a-comprehensive-guide-f03af6fd66ed

Kubernetes Easy Engine (k8e) is a lightweight, scalable enterprise-grade Kubernetes distribution that allows users to manage, protect and obtain out-of-the-box Kubernetes clusters in a unified manner.

More: https://getk8e.com

This week on the Learn Kubernetes Weekly:

✍️ Signing container images: sigstore, Notary, and Docker content trust
✉️ Envelope encryption in EKS
🏅 OWASP Kubernetes top 10
🗃️ imgpkg
🛜 webmesh-cni

Read it now: https://learnk8s.io/issues/70