Recommendations, findings and learnings from running a 100TB+ Elasticsearch Logstash Kibana (ELK) stack running on Amazon Elastic Kubernetes Service (EKS) over 2.5 years.

Read more https://medium.com/@siddharth.j.telang/run-an-enterprise-level-elasticsearch-stack-on-a-kubernetes-cluster-2728864677bb

This article is an opinionated SRE point of view of an open source stack to easily request, graph, audit and secure any kind of data access of multiple data sources.

Read more https://blog.kumomind.com/trino-superset-and-ranger-on-kubernetes-what-why-how

Pipy is a programmable network proxy for the cloud, edge and IoT. Written in C++, Pipy is extremely lightweight and fast. It's also programmable by using PipyJS, a tailored version of the standard JavaScript language.

Read more https://github.com/flomesh-io/pipy

Sysdig is a Linux system exploration and troubleshooting tool with first-class support for containers

Read more https://github.com/draios/sysdig

This guide pretends to explain a quick and easy way to get our applications in Kubernetes/AKS running exposed to the internet with HTTPS using DuckDNS as a domain name provider.

Read more https://dev.to/javiermarasco/https-with-ingress-controller-cert-manager-and-duckdns-in-akskubernetes-2jd1

Azure AD workload identity is designed to associate a pod with an identity in Azure Active Directory so that you can grant permissions to access another resource (i.e. a storage account or an Azure SQL Database).

Learn how in this article.

Read more https://dev.to/maxx_don/implement-azure-ad-workload-identity-on-aks-with-terraform-3oho

Kubernetes Fluentd Operator (KFO) is a Fluentd config manager with batteries included, config validation, no needs to restart, with sensible defaults and best practices built-in. Use Kubernetes labels to filter/route logs per namespace.

Read more https://github.com/vmware/kube-fluentd-operator

This blog demonstrates how you can consume secrets from an external service (AWS Secrets Manager) using a Kubernetes dynamic admission controller.

Read more https://medium.com/@ishana98dadhich/consume-secrets-using-kubernetes-admission-controllers-part-2-a117d77acf76

In this repository, you will find a wireguard operator created to easily provision a VPN in a Kubernetes cluster.

Read more https://github.com/jodevsa/wireguard-operator

The Kubernetes OpenSearch Operator is used for automating the deployment, provisioning, management, and orchestration of OpenSearch clusters and OpenSearch dashboards.



Read more https://github.com/Opster/opensearch-k8s-operator

This article discusses combining Kong Istio Gateway with the Istio service mesh to improve:

- Security
- Observability
- Governance (e.g. rate-limiting)

Read more https://dev.to/rahulrai/enhancing-istio-operations-with-kong-istio-gateway-57e4

What does it take to get a job as a Kubernetes engineer?

Do you need a Kubernetes certification to apply for a job?

What's the average salary for a Kubernetes engineer?

We analyzed 97 Kubernetes jobs for the first three months of 2022 and found that:

- The average Kubernetes job pays €83,398 in Europe and $123,126 in North America.
- The majority of the job listings are for Senior DevOps Engineers.
- Only 1% of the total listings offer a position to Junior Engineers 😢
- As usual, AWS, Python, Terraform, Prometheus and Jenkins!!! are the top terms mentioned in any Kubernetes job descriptions.

You can read the full report here: https://kube.careers/kubernetes-trend-report-2022-q1

TF-controller is an experimental controller for Flux to reconcile Terraform resources in the GitOps way.

Read more https://github.com/weaveworks/tf-controller

KoolKits (Kubernetes t*oolkits*) are highly-opinionated, language-specific, batteries-included debug container images for Kubernetes.

Read more https://github.com/lightrun-platform/koolkits

It's often useful to be able to follow network traffic within a Kubernetes cluster to debug various networking situations that can occur. This guide outlines the network traffic of a pod communicating with another pod's HTTPS endpoint.

Read more https://lisowski0925.medium.com/demystifying-the-life-of-a-kubernetes-network-packet-with-calico-4dd402200080

Gefyra is a toolkit written in Python to run a local development infrastructure for Kubernetes.
Gefyra runs as a user-space app and controls the local Docker host and Kubernetes via the Kubernetes Python Client.

Read more https://github.com/Schille/gefyra

🗓 Kubernetes events starting in the next 24 hours:

25 Apr 9:00 am GMT - 🔥 Advanced Kubernetes course (Learnk8s) - 📍 Online workshop

25 Apr 1:00 pm GMT - Devopsdays Denver (Devopsdays) - 📍 Online conference

→ See all Kubernetes events

Kube No Trouble (kubent) is a simple tool to check whether you're using any of these API versions in your cluster and therefore should upgrade your workloads first, before upgrading your Kubernetes cluster.

Read more https://github.com/doitintl/kube-no-trouble

Kubernetes Rollout Operator coordinates the rollout of pods between different StatefulSets within a specific namespace and can be used to manage multi-AZ deployments where pods running in each AZ are managed by a dedicated StatefulSet.

Read more https://github.com/grafana/rollout-operator

In this article, you will learn how to use Cluster API to provision multiple EKS clusters with managed Node groups.

Read more https://dev.to/timtsoitt/use-cluster-api-to-provision-kubernetes-clusters-22c4

Kubernetes Certified Administration is a repository that contains online resources that will help you prepare for taking the Kubernetes Certified Administrator Certification exam.

Read more https://github.com/walidshaari/Kubernetes-Certified-Administrator