Learn Kubernetes weekly — issue 6

Hi there!

You might have noticed a hiatus in the past week. Issue 5 of the newsletter was regularly published, but we hit some issues with LinkedIn. It should all be sorted now, but if you don't want to miss any releases, you can subscribe to the "regular" email newsletter here.

Also... Merry Christmas from the team at Learnk8s and myself! ????

If you like the content, there are a few ways to support us:

• ?? Recommend?this newsletter?to your friends: it really helps!
• ???Retweet the Learn Kubernetes weekly announcement!
• ?? Reply to this email: feedback is welcome.

Let's get to the content from this week:

?? ?? Articles

1.??? Scaling Kubernetes to thousands of CRDs

In this post, you'll?explore the limitations of running too many CRDs in your cluster and you could overcome them.?Noteworthy:

• Each CRD uses ~4MB of memory.
• It takes 20 seconds for kubectl to discover the API with 300 API groups.

2.??? Kubernetes-in-Kubernetes and the WEDOS PXE bootable server farm

Learn how you can simplify the?management of data centers, thousands of physical servers, virtual machines and hosting for hundreds of thousands of sites?with Kubernetes-in-Kubernetes (nested Kubernetes clusters).

3.??? How did we upgrade our EKS clusters from 1.15 to 1.22 without Kubernetes knowledge?

In this case study, you'll learn how the team at AutoScout24 inherited an?EKS cluster with almost 700 services and migrated it from version 1.15 to 1.22?without any prior knowledge of Kubernetes.

4.?Kubernetes driver for Docker buildx

In this article, you will?learn how Docker BuildX supports building images using BuildKit?pods on a Kubernetes cluster.

5.?Top kubectl plugins

This blog article cover 6 popular kubectl plugins:

1. kubectx & kubens
2. Ingress-nginx
3. Cert-manager
4. Popeye
5. Kyverno
6. kubectl-explore

6.?Deploy with kustomize, fluxcd and remote resources

Kustomize provides a mechanism to fetch remote resources?(using git under the hood).

This article will teach you how to use Kustomize and remote resources in FluxCD.

More articles worth checking out:

• Give users and groups access to Kubernetes cluster using RBAC
• Deploy a pod to the local Kubernetes cluster
• Let's talk about Kubernetes on the internet
• Back to basics: accessing Kubernetes pods
• Pod disruption budget
• oboukili/terraform-provider-argocd
• Host your web apps on EKS with NGINX ingress and external DNS
• How to expose Kubernetes services to external traffic using Istio gateway
• Leveraging CNI custom networking alongside security groups for pods in EKS

?? ?? Tutorials

1.??? GitOps fundamentals

In this course, you will learn the basics of GitOps with ArgoCD and Argo Rollouts.

2.?Evaluating and improving the performance of your ingress controller

In this article, you'll?learn how to deploy the nginx-ingress, generate load using locust and capture the generated metrics.

You'll then analyse them using Grafana, identify potential latency issues, and discuss how to mitigate them.

3.?Implement distributed tracing with Jaeger & Open Telemetry on Kubernetes

In this article, you'll learn how to?implement distributed tracing for your apps?running on Kubernetes using Open Telemetry & Jaeger.

?? ?? Kubernetes jobs

Senior DevOps Engineer

• Salary:?€50K - 70K
• Location:?Remote (Germany) ????
• Tech stack:?Kubernetes, Ansible, On-premise, PostgreSQL, CockroachDB, CI/CD, Prometheus

Cloud Engineer

• Salary:?US$60K - 70K
• Location:?Remote (United Kingdom) ????
• Tech stack:?Kubernetes, GCP, Azure, Terraform, Go, Python, C#, CI/CD

?? ?? Tools and libraries

1.??? kinvolk/inspektor-gadget

Inspektor Gadget is a collection of tools to debug and inspect Kubernetes resources and apps.

It manages the packaging, deployment and execution of eBPF programs and it automatically maps low-level kernel primitives to high-level Kubernetes resources.

2.?containers/oci-seccomp-bpf-hook

This project provides an?OCI hook to generate seccomp profiles by tracing the syscalls made by the container.

The generated profile would allow all the syscalls made and deny every other syscall.

3.?helmfile/helmfile

Helmfile is a declarative specification for deploying Helm charts.

It lets you:

• Keep a directory of chart value files and maintain changes in version control.
• Apply CI/CD to configuration changes.
• Periodically sync to avoid skew in environments.

4.?keyval-dev/odigos

Odigos is an?open-source observability control plane?that allows developers to easily?create and build their observability pipelines?by abstracting away the complexities of technologies such as eBPF and OpenTelemetry.

5.?deluxeowl/subdomain-mapper-operator

This operator patches an ingress to automatically create?subdomains for services based on annotations.

6.?emberstack/kubernetes-reflector

Reflector is a Kubernetes addon designed to monitor changes to resources (secrets and configmaps) and?reflect changes to mirror resources in the same or other namespaces.

7.?parseablehq/parseable

Parseable is an?open-source log storage and observability platform,?built for Kubernetes.

More interesting projects:

• cuber-cloud/cuber-gem
• mmontes11/mariadb-operator
• GitHub - robert-nemet/klock: lock for k8s
• casbin/k8s-gatekeeper

?? Upcoming Kubernetes events

The future of continuous delivery

Online meetup.

• ?? 21 Dec
• ? 5:00 pm UTC
• ?? This is a?virtual event

Kubernetes deployment tutorial

Online webinar.

• ?? 22 Dec
• ? 2:30 pm UTC
• ?? This is a?virtual event

Correlating observability signals and advance troubleshooting tactics

Online meetup.

• ?? 24 Dec
• ? 5:00 pm UTC
• ?? This is a?virtual event

CKS bootcamp

Online workshop This event requires an entrance fee..

• ?? 26 Dec
• ? 2:00 pm UTC
• ?? This is a?virtual event

Ansible and Kubernetes deep dive

Online meetup.

• ?? 28 Dec
• ? 6:30 pm UTC
• ?? This is a?virtual event

?? Advanced Kubernetes course

In-person workshop This event requires an entrance fee..

• ?? 14 Feb
• ? 9:00 am UTC
• ???Amsterdam, NL

Until next time!

— Dan