netfetch is a tool designed to scan Kubernetes namespaces for network policies and check whether a network policy targets your workloads.

More: https://github.com/deggja/netfetch

The article explores how kubectl works, focusing on the authentication process and the REST API calls.

It also provides a step-by-step guide on how to fork the Kubernetes repository and write your commands.

More: https://medium.com/@bingolbalihasan/how-does-kubectl-work-writing-custom-kubectl-commands-da86e5d49c74

In this tutorial, you will learn how to aggregate data from various sources to achieve centralized real-time monitoring across multiple highly resilient clusters using Thanos.

More: https://medium.com/globant/monitoring-a-multi-cluster-kubernetes-deployment-9e7a418a06b7

Thomas Graf, VP and CTO of Cloud Networking and Security at Isovalent (part of Cisco), emphasizes that eBPF's kernel-level operation can significantly improve service mesh performance and security.

Thomas evaluates service meshes based on their scalability, security, and observability features, areas where he believes eBPF can provide substantial benefits.

Watch the full interview: https://kube.fm/on-prem-challenges-thomas

This interview is a reaction to William's episode https://kube.fm/service-mesh-william

This article provides a deep dive into kube-scheduler, focusing on customizing preemption for ML workloads.

Key topics covered include misconceptions, an overview of the scheduling framework, and a detailed explanation of default preemption.

More: https://awelm.com/posts/kube-scheduler

This week's 6 best Kubernetes Platform Engineer jobs are:

Platform Engineer with OpenAI
💰 $300K to $450K a year
🏠 From the office in San Francisco, CA, USA
→ https://kube.careers/t/27f27934-60d2-4bca-b480-e20f2d5b9263?s=55

Platform Engineer with Adept
💰 $175K to $350K a year
🏠🏃🏻‍♂️🌎 San Francisco, CA, USA
→ https://kube.careers/t/9e96008f-b78b-490b-a143-3f2db05a8559?s=55

Platform Engineer with Zoox
💰 $203K to $293K a year
🏠🏃🏻‍♂️🌎 Foster City, CA, USA
→ https://kube.careers/t/168a7256-0ae9-495f-bbb4-b007fd8d48ef?s=55

Platform Engineer with Primer
💰 $225K to $250K a year
🏠 From the office in San Francisco, CA, USA
→ https://kube.careers/t/41375119-5d20-4f0c-bb02-05bca7132cba?s=55

Platform Engineer with Tecton
💰 $216K to $258K a year
👨‍💻 Remote from the United States
→ https://kube.careers/t/ab4a16be-7f91-45bc-846a-79e80a8b3f86?s=55

👉 Browse all 439 Kubernetes jobs on Kube Careers https://kube.careers

In this KubeFM episode, Mircea shares his journey of migrating a home lab to Kubernetes, specifically choosing Talos over other operating systems like Ubuntu, Flatcar, or Bottlerocket.

Mircea also discusses his decision-making process and experiences in setting up and optimizing his Kubernetes home lab. You will learn:

- What is Talos Linux and how it compares to other operating systems.
- The challenges and considerations involved in migrating to Kubernetes, including selecting network plugins and GitOps.
- Insights into managing and securing Kubernetes clusters, focusing on the advantages of immutable operating systems.

Watch (or listen to) it here: https://kube.fm/talos-mircea

🙏 Many thanks to DigitalOcean for supporting our work and sponsoring this episode. Make sure to check out their managed Kubernetes service (and enjoy $200 free credits) https://do.co/kubefm

With @Birthmarkb "Crazy Rich Asian" Farrell

Autok8s aims to fully automate the installation and configuration of a Kubernetes control-plane node along with the worker nodes with no more than one command per node.

More: https://github.com/7wingfly/autok8s

The registry-creds operator propagates a single ImagePullSecret to all namespaces within your cluster so that images can be pulled using authentication.

More: https://github.com/alexellis/registry-creds

This article explores Linkerd's mutating webhook, highlighting issues when the sidecar is not injected into pods.

It explains how the injection works, the importance of HA mode, and the implementation of a failure policy to enforce the proxy injection.

More: https://medium.com/@hirushanonline/kubernetes-webhook-failure-policy-for-linkerd-proxy-injector-d58e3dcdc327

This week on the Learn Kubernetes Weekly:

🐦‍⬛ The basics of observing Kubernetes
🔵 From blue to green: EKS upgrade
🤿 A deeper dive of kube-scheduler
⚒️ Writing custom kubectl commands
🪝 Helm Hooks for fun and profit

Read it now: https://learnk8s.io/issues/79

E2E Framework is a Go framework for end-to-end testing of components running in Kubernetes clusters.

The primary goal is to use the native Go testing API to define end-to-end test suites that can be used to test Kubernetes components.

More: https://github.com/kubernetes-sigs/e2e-framework

This article considers various techniques in offensive Kubernetes security related to RBAC, Kubelet, Etcd, EKS, and admission controllers.

More: https://medium.com/@noah_h/top-offensive-techniques-for-kubernetes-a71399d133b2

The article discusses a DNS issue where Nginx does not re-query DNS for updated content, leading to timeouts.

The solution includes periodic reloads or using variables to force Nginx to query DNS for each connection in Kubernetes.

More: https://hwchiu.medium.com/nginx-reverse-proxy-dns-issue-671d911dc5fa

Master Kubernetes with Learnk8s' Advanced Kubernetes workshops!

What should you expect?

- Learn how to architect and design clusters from the ground up (in the cloud or on-prem).
- Explore the Kubernetes internal component and how the system is designed with resiliency in mind.
- Deep-dive into the networking components and observe the packets flowing into the cluster.
- Hands-on labs to test the theory with real-world scenarios!
- And more.

The next courses start in June (online & in Munich): https://learnk8s.io/training

We also run in-person courses and corporate training: https://learnk8s.io/corporate-training

Cloudflare Operator is a Kubernetes operator that creates and manages Cloudflare Tunnels and DNS records for (HTTP/TCP/UDP*) service resources.

More: https://github.com/adyanth/cloudflare-operator

This article discusses fine-tuning Llama2 on Kubernetes, highlighting the resource-intensive nature of the task.

It covers the setup, training script, dataset, and deployment on single-node single GPU, single-node multi GPU, and multi-node multi GPU.

More: https://medium.com/@bchenjh/full-fine-tuning-of-llama2-on-kubernetes-a983e1eb2259

This case study follows two engineers who encountered issues with Elasticsearch pods, leading to high CPU spikes.

Excessive environment variables in Kubernetes namespaces caused the root cause, which was resolved by turning off enableServiceLinks.

More: https://medium.com/@oren.kessler/reaching-the-limitations-of-linux-with-environment-variables-9591a704a0f0

This repository contains a list of free trials/credits for Managed Kubernetes Services.

More: https://github.com/learnk8s/free-kubernetes

This week's 6 Kubernetes junior jobs are:

Software Engineer with Verkada
💰 $120K to $280K a year
🏠 From the office in San Mateo, CA, USA
→ https://kube.careers/t/10cf1909-acea-49c0-9782-da2228f00d66?s=55

Machine Learning Engineer with Extropic
💰 $75K to $150K a year
🏠🏃🏻‍♂️🌎 San Francisco, CA, USA
→ https://kube.careers/t/a3999e9c-e95a-4764-aca1-92f7e855c170?s=55

Software Engineer with Air Space Intelligence
💰 $50.29K to $107.63K a year
🏠 From the office in Gdańsk, PL
→ https://kube.careers/t/b7a083a8-8ef1-4055-9973-d6946f906ec7?s=55

Software Engineer with Mercari
💰 $31.22K to $41.2K a year
👨‍💻 Remote from Japan
→ https://kube.careers/t/fe70bcf8-dcef-4fd5-a5f2-bd2cb16f39e8?s=55

Software Engineer with Sezzle
💰 $18K to $36K a year
👨‍💻 Remote from Peru
→ https://kube.careers/t/f7084863-be31-4bc4-bdda-a4d82922f795?s=55

👉 Browse all 438 Kubernetes jobs on Kube Careers https://kube.careers

The article discusses isolating DNS traffic on a Kubernetes cluster serving two VLANs using MetalLB.

The author configures the server interface with a non-default VLAN tag and sets up IP pool reservations and L2 advertisements.

More: https://blog.miraco.la/a-tale-of-two-vlans