Learn Kubernetes weekly — issue 18

Articles

1. Kcp: Kubernetes-like control plane

   cloudnativesimplified.substack.com

   kcp is a control plane for workloads on many clusters.

   In this article, you will explore how to use it to manage multiple tenants:

   1. In a single cluster with workspaces (isolated namespaces).
   2. In multiple clusters with SyncTarget and Placements.

2. Backup and restore containers with Kubernetes checkpointing API

   martinheinz.dev

   Kubernetes v1.25 has introduced Container Checkpointing API.

   This article will teach you how to use it for container backup and restore or forensic analysis.

3. Benchmarking Kubernetes node initialization

   symbiosis.host

   In this benchmark, you will compare cluster initialization time across 8 managed Kubernetes providers.

4. Tuning JVM containers for better CPU and memory utilisation in Kubernetes

   medium.com

   In this article, you'll discuss JVM warmup issues, high heap memory utilisation and how those affect Java apps deployed in Kubernetes.

   You'll then learn how to work around them.

5. Kubernetes mutating webhook with Python and Fastapi

   kmitevski.com

   In this article, you will learn how to easily create a mutating webhook to intercept Kubernetes objects and modify them on the fly.

6. Abusing pod priority

   nunoadrego.com

   Pod Priority can be useful for some use cases, such as prioritizing critical applications, but definitely can catch you off guard if you don't have the right guardrails in place.

   This post illustrates the potential consequences of not having them.

Articles worth checking out:

• Buildkit & Docker buildx

• Tricky Kubernetes memory management for Java applications

• Modernizing the architecture of quick serve restaurant (QSR) infrastructure

• Kubernetes cluster security from the perspective of attackers

• Configuring routing for MetalLB in L2 mode

• Journey of a microservice application in the Kubernetes world

• Building an RPi Kubernetes cluster

• How to delete pods from a Kubernetes node and avoid downtime

• Disaster recovery solution for AKS persistent volume storage

• Monitoring Kubernetes services/endpoints with Prometheus blackbox exporter

• An overview of Kubernetes services

• Quicknotes: handling ingress in GKE

Tutorials

1. Write your Kubernetes infrastructure as go code — manage AWS services

   itnext.io

   AWS ACK helps bridge the gap between traditional Kubernetes resources and AWS services by allowing you to manage both from a single control plane.

   In this tutorial, you learn how to use it to provision DynamoDB and an app deployed on Kubernetes.

2. Hashicorp Vault cluster on the AWS Elastic Kubernetes Service

   medium.com

   In this tutorial, you will learn how to deploy a Vault cluster on EKS with a Helm chart and consume the secrets from a Spring Boot app.

Kubernetes jobs

1. • Software Engineer with Cast AI

   • Salary: €72K to €96K a year

   • Location: remote from Europe

   • Tech stack: Kubernetes, AWS, GCP, Azure, ArgoCD, Go, Python, Gitlab, Prometheus

2. • DevOps Engineer with Nordcloud

   • Salary: CHF 100K to CHF 130K a year

   • Location: remote from Switzerland

   • Tech stack: Kubernetes, Azure, AWS, OpenShift, Helm, Docker, Python, Javascript, SQL, Terraform

Discover more Kubernetes jobs on Kube Careers →

Code & tools

1. grafana/tanka

   github.com/grafana

   Tanka is the clean, concise and flexible alternative to YAML for your Kubernetes cluster.

2. box/kube-iptables-tailer

   github.com/box

   kube-iptables-tailer is a service that gives you better visibility on networking issues in your Kubernetes cluster by detecting the traffic denied by iptables and surfacing corresponding information to the affected Pods via Kubernetes events.

3. we-dcode/kubetunnel

   github.com/we-dcode

   KubeTunnel lets you develop locally while being connected to Kubernetes.

4. wagoodman/dive

   github.com/wagoodman

   dive is a tool for exploring a docker image, layer contents, and discovering ways to shrink the size of your Docker/OCI image.

5. jodevsa/wireguard-operator

   github.com/jodevsa

   wireguard-operator is a WireGuard operator created to easily provision a VPN in a Kubernetes cluster.

Other interesting projects:

• kubernetes-sigs/ingress2gateway

• projectsveltos/sveltosctl

• exdx/dcp

• gardener/etcd-backup-restore

Upcoming Kubernetes events

1. Mar

   16

   Why you need performance tests for proper Kubernetes scaling

   Online meetup organized by The San Francisco Java User Group.

   • This is a virtual event

   • This is a free event.

2. Mar

   16

   Kubernetes Community Days Ukraine

   Online conference organized by KCD Ukraine Fundraiser 2023.

   • This is a virtual event

   • This event requires an entrance fee

3. Mar

   20

   Gaining insight into GitOps

   Online webinar organized by Day-To-Day DevOps.

   • This is a virtual event

   • This is a free event.

4. Mar

   22

   The DEVOPS Conference

   Online conference organized by Eficode.

   • This is a virtual event

   • This is a free event.

5. Mar

   23

   Kubernetes Community Days Israel

   In-person conference organized by KCD Israel 2023.

   • Location: Tel-Aviv, IL

   • This event requires an entrance fee

Discover more Kubernetes events on Kube Events →

Kubernetes call for papers

1. expired

   Devopsdays Seattle

   The Call For Paper was open until 20 March 2023 at UTC. More info →

   • Location: Seattle, US

   • In-person conference organized by Devopsdays.

   • The conference starts on the 1 August 2023.

   • Apply here

Until next time!

— Dan