Learn Kubernetes weekly — issue 8

?? ?? Articles

1.??? A set of modern Grafana dashboards for Kubernetes

In this article, you will find?a set of modern Grafana dashboards for Kubernetes?and the reasoning behind them.

2.?Protect Kubernetes APIs with rate limiting

Popular apps can be vulnerable to traffic surges that overwhelm the APIs and cause cascade failures.

In this tutorial, you'll?learn how to use multiple Ingress Controllers to prevent Kubernetes apps and APIs from crashing.

3.?Why leaving pods in crashloopbackoff can have a bigger impact than you might think

In this article, you will discuss the?impact of continuously restarting containers in your cluster?from "leaking" cgroups to higher resource usage.

You will also learn how to monitor and avoid this issue going forward.

4.?Playing with Crossplane, for real

In this article, you will follow?Sebastien's journey in discovering and unpacking how Crossplane works.

5.?Containers vs pods — taking a deeper look

What is the difference between a Docker Container and a Kubernetes Pod?

Can a Pod be created with plain Docker commands?

How are Pods implemented under the hood?

Find the answers in this article.

6.?Performance evaluation of container runtimes

In this study, two commonly used container runtimes are evaluated:

1. containerd and
2. CRI-O

Evaluation aspects of container runtimes include the?performance of running containers, the performance of container runtime operations, and scalability.

More articles worth checking out:

• Best practices for understanding Kubernetes costs
• Using Kiali with Istio in Kubernetes
• GKE with gRPC and ingress-NGINX
• Kubernetes: imagepullbackoff!
• Introduction to Kubernetes admission controllers
• Kubernetes load testing: 8 tools & best practices
• Managing Kubernetes control plane events in EKS
• Manage secrets on Kubernetes with ArgoCD and Vault

?? ?? Tutorials

1.?Continuous deployments of Kubernetes applications using Argo CD GitOps & Helm charts

In this tutorial, you will?learn how to easily set up Argo CD as an app of apps with Helm, deploy applications with Argo CD and subsequently manage these applications.

2.?Playing with volume for statefulsets

Unlike Deployments, StatefulSets require some special care if you want to:

1. Increase the available storage space.
2. Move the data?to another zone or region.

In this article, you will discuss the steps involved in completing those tasks.

3.?Using CDK to perform continuous deployments in multi-region Kubernetes environments

This post demonstrated how to?create a continuous deployment pipeline to deploy applications in multiple EKS clusters running in different regions.

The accompanying CDK code creates EKS clusters and the CI/CD stack to continuously deploy applications.

?? ?? Kubernetes jobs

System Engineer

• Salary:?CHF?100K - 120K
• Location:?Zurich, Switzerland ????
• Tech stack:?Kubernetes, Shell, PostgreSQL, MySQL, Database, Icinga

Cloud Engineer

• Salary:?$120K - 150K
• Location:?Remote (US) ??
• Tech stack:?Kubernetes, AWS, GCP, Azure, Terraform, Ansible, Docker, CI/CD, Jenkins, ArgoCD

?? ?? Tools and libraries

1.??? box/kube-exec-controller

kube-exec-controller is an admission controller for handling container drift?(caused by?kubectl exec,?attach,?cp, or other interactive requests) inside a Kubernetes cluster.

The project also includes a kubectl plugin for checking pods.

2.??? k8spacket/k8spacket

k8spacket helps to understand TCP packets traffic in your kubernetes cluster:

• Shows traffic between workloads in the cluster.
• Informs where the traffic is routed outside the cluster.
• Displays information about closing sockets by connections.

3.?datreeio/crds-catalog

This repository aggregates?over 100 popular Kubernetes CRDs?(CustomResourceDefinition) in JSON schema format.

These schemas can be used by various tools, such as Datree, Kubeconform and Kubeval, as an alternative to?kubectl --dry-run.

4.?backube/volsync

VolSync asynchronously?replicates Kubernetes persistent volumes between clusters using either rsync or rclone.

It also supports creating backups of persistent volumes via restic.

5.?chenjiandongx/kubectl-count

With kubectl-count you can count Kubernetes resources by?kind.

6.?kubernetes-sigs/security-profiles-operator

The Kubernetes Security Profiles Operator aims to make it easier for users to?use SELinux, seccomp and AppArmor in Kubernetes clusters.

7.?resmoio/kubernetes-event-exporter

kubernetes-event-exporter allows exporting the often missed Kubernetes events to various outputs so that they can be?used for observability or alerting?purposes.

More interesting projects:

• kubernetes-sigs/kubebuilder
• doitintl/kube-secrets-init
• pulumi/kube2pulumi
• rothgar/bashscheduler
• Weaveworks/kured

?? Upcoming Kubernetes events

How Audi boosted time-to-market through cultural change & security first

Online webinar.

• ?? 5 Jan
• ? 10:00 am UTC
• ?? This is a?virtual event

Kubernetes configuration security and compliance on AKS

Online workshop.

• ?? 5 Jan
• ? 10:00 am UTC
• ?? This is a?virtual event

Implementing observability to secure containers and Kubernetes for AKS

Online workshop.

• ?? 5 Jan
• ? 5:00 pm UTC
• ?? This is a?virtual event

Overcoming Kubernetes container access and scalability challenges

Online webinar.

• ?? 5 Jan
• ? 6:00 pm UTC
• ?? This is a?virtual event

Kubernetes v1.25 everything you should know

Online meetup.

• ?? 7 Jan
• ? 5:15 am UTC
• ?? This is a?virtual event

?? Advanced Kubernetes course

In-person workshop This event requires an entrance fee..

• ?? 14 Feb
• ? 9:00 am UTC
• ???Amsterdam, NL

In other news,?I spent some time looking back at what I achieved in 2022.

Do you have any Kubernetes resolutions for the new year?

Let me know!

Until next time!

— Dan