Learn Kubernetes Weekly issue 59 · 27 Dec 2023

Assigning pod to nodes, Validation WebHook troubleshooting, Self-Managed Kubernetes, container runtimes 2023, Containers from scratch in C

Articles

1. Kubernetes 101: assigning pod to nodes

   hwchiu.medium.com

   This series of articles explores how to influence the Scheduler's scheduling decisions through Kubernetes built-in methods.

   Such configurations can achieve higher availability settings in structures like Zones/Regions.

2. Validation WebHook troubleshooting — how low can you go?

   medium.com

   In this case study, you'll follow Alternar's team journey in identifying and fixing an issue with their Calico networking configuration.

   You'll learn their thought process, the tool they used to narrow down the issue & the code changes they implemented.

3. Self-Managed Kubernetes

   nateb.xyz

   In this detailed tutorial, you'll be walking through how to bootstrap a local cluster of VMs using QEMU, set up a virtual network using the ip command, install Kubernetes using k0s, set up an ingress controller, and use HAProxy as a load balancer.

4. The internals and the latest trends of container runtimes 2023

   medium.com

   This article discusses:

   1. What are containers and their history.
   2. The internals of container runtimes: namespaces, cgroups, capabilities, etc.
   3. Latest trends: non-Docker containers, Rootless Containers, Kata Containers, gVisor, WebAssembly, etc.

5. barco: Linux Containers From Scratch in C

   cavall.in

   The article discusses "barco", a container runtime project developed to learn more about the Linux kernel and containers.

   It's written in C, using various libraries such as libseccomp for seccomp filters and libcap for container capabilities.

6. Kubernetes security standoff

   itnext.io

   In this article, you'll use the Shellshock vulnerability as a guiding framework to demonstrate the importance of strong security measures and AppArmor's role in safeguarding containerized applications.

Articles worth checking out:

• Protecting your Kubernetes environment with kubearmor

• How to apply policies in Kubernetes using Open Policy Agent Gatekeeper

• Secure secret management in Kubernetes: exploring different approaches

• Validating admission policies in Kubernetes: advanced use cases

• Effortless leader election: using leases in Kubernetes

Tutorials

1. Argo workflow — a pipeline to build and deploy containers

   medium.com

   In this tutorial, you'll learn how to use Argo Workflow to create a CI/CD pipeline for scanning, building, and deploying an image using tools like Trivy, CodeQL, buildctl, and cosign.

2. ArgoWorkflows for distributed MongoDB logical backup

   yossicohn.medium.com

   In this article, you will learn how to create a distributed flow of MongoDB Logical Backups while using ArgoWorkflows as the underlying infrastructure.

3. GitOps on AKS

   dev.to

   In this 4-part series, you will learn:

   1. How to use the FluxCD AKS Extension.
   2. Automating image updates on AKS with FluxCD.
   3. Using Flagger with Istio and FluxCD.
   4. Bootstrap your GitOps-enabled AKS cluster with Terraform.

4. Implementing Message Queues with NATS on Kubernetes

   medium.com

   The article provides a guide on installing and operating NATS on Kubernetes.

   It details the process of setting up the system for different types of messaging, such as basic Pub/Sub, 1:N Pub/Sub, Request-Reply, and Queueing.

Kubernetes jobs

1. • Site Reliability Engineer with Braintrust

   • Salary: $800 a day

   • Location: remote from the United States of America

   • Tech stack: Kubernetes, Elastic Search, Grafana, AWS, GCP, On call, Docker, Go, Python, Java

2. • Software Engineer with Torc Robotics

   • Salary: $139K to $166.8K a year

   • Location: remote from the United States of America

   • Tech stack: Kubernetes, AWS, Azure, GCP, Docker, Terraform, Ansible, Shell, Python, C++

3. • Infrastructure Architect with SoFi Stadium

   • Salary: $110K to $125K a year

   • Location: based in the office in SoFi Stadium, CA, USA

   • Tech stack: Kubernetes, Grafana, Bitbucket Pipeline, AWS, Azure, GCP, On call, Docker, Terraform, Ansible

Discover more Kubernetes jobs on Kube Careers →

Code & tools

1. Kubernetes event logger

   github.com/max-rocket-internet

   Kubernetes event logger watches Kubernetes Events and logs them to stdout in JSON to be collected and stored by your logging solution, e.g. fluentd, fluent-bit, Filebeat, or Promtail.

2. kubernetes-csi/csi-driver-nfs

   github.com/kubernetes-csi

   This CSI driver allows Kubernetes to access an NFS server on a Linux node.

3. Coroot: eBPF-based observability

   github.com/coroot

   Coroot is an open-source eBPF-based observability tool that turns telemetry data into actionable insights, helping you quickly identify and resolve application issues.

4. MariaDB operator

   github.com/mariadb-operator

   The MariaDB operator lets you declaratively manage your MariaDB using Kubernetes CRDs rather than imperative commands.

5. Helm Drift: configuration drift

   github.com/nikhilsbhat

   Helm Drift is a Helm plugin that identifies configuration drifts (primarily due to in-place edits) in the deployed Helm charts.

Other interesting projects:

• Cilium Gateway API demo

• flux2-kustomize-helm-example

• Capsule: multi-tenancy

• Autoscaling PVCs

• korb: move Kubernetes PVCs

• kine: etcdshim

• htk8s: HTPC on Kubernetes

• loxilb: load balancer with eBPF

Upcoming Kubernetes events

1. Jan

   1

   90DaysOfDevOps

   Online conference organized by Michael Cade.

   • This is a virtual event

   • This is a free event.

2. Jan

   24

   Chaos Carnival 2024

   Online conference organized by Harness.

   • This is a virtual event

   • This is a free event.

3. Feb

   5

   Advanced Kubernetes course (London)

   In-person workshop organized by Learnk8s.

   • Location: London, UK

   • This event requires an entrance fee

4. Feb

   17

   DevOps fwdays'24

   Online & in-person conference organized by fwdays.

   • Location: Kyiv, UA and virtual

   • This event requires an entrance fee

   • • Use 9D0C080340 to get 10% off

Discover more Kubernetes events on Kube Events →

Kubernetes call for papers

1. expired

   Kubernetes Community Days Costa Rica 2024

   The Call For Paper was open until 1 February 2024 at UTC. More info →

   • Location: Heredia, CR

   • In-person conference organized by KCD Costa Rica.

   • The conference starts on the 1 March 2024.

   • Apply here

2. expired

   Kubernetes Community Days Romania 2024

   The Call For Paper was open until 31 January 2024 at UTC. More info →

   • Location: Bucharest, RO

   • In-person conference organized by KCD Romania.

   • The conference starts on the 25 April 2024.

   • Apply here

3. expired

   Kubernetes Community Days Texas 2024

   The Call For Paper was open until 5 February 2024 at UTC. More info →

   • Location: Irving, TX, USA

   • In-person conference organized by KCD Texas.

   • The conference starts on the 12 April 2024.

   • Apply here

4. expired

   Kubernetes Community Days Guadalajara 2024

   The Call For Paper was open until 9 January 2024 at UTC. More info →

   • Location: Guadalajara, MX

   • In-person conference organized by KCD Guadalajara.

   • The conference starts on the 23 February 2024.

   • Apply here

5. expired

   Kubernetes Community Days Istanbul

   The Call For Paper was open until 31 January 2024 at UTC. More info →

   • Location: Istanbul, TR

   • In-person conference organized by KCD Istanbul.

   • The conference starts on the 15 May 2024.

   • Apply here

6. expired

   Kubernetes Community Days Munich 2024

   The Call For Paper was open until 31 January 2024 at UTC. More info →

   • Location: Munich, DE

   • In-person conference organized by KCD Munich.

   • The conference starts on the 2 July 2024.

   • Apply here

7. expired

   Cloud Native 2024

   The Call For Paper was open until 19 February 2024 at UTC. More info →

   • This is a virtual event

   • Online conference organized by Conf42.

   • The conference starts on the 21 March 2024.

   • Apply here

8. expired

   DevOps fwdays'24

   The Call For Paper was open until 17 January 2024 at UTC. More info →

   • Location: Kyiv, UA and virtual

   • Online & in-person conference organized by fwdays.

   • The conference starts on the 17 February 2024.

   • Apply here

9. expired

   GitopsCon North America

   The Call For Paper was open until 5 February 2024 at UTC. More info →

   • Location: Seattle, WA, USA

   • In-person conference organized by Linux Foundation.

   • The conference starts on the 15 April 2024.

   • Apply here

Until next time!

— Dan