Learn Kubernetes Weekly issue 64 · 31 Jan 2024

State of Kubernetes Jobs, Reducing cost by $300k, Kubernetes needs an LTS, Debugging running pods, guide to runtime security and system hardening

Articles

1. The State of Kubernetes Jobs in 2023 Q4

   kube.careers

   What's the average salary for a Kubernetes engineer? It's €64-84k in Europe & $144-202k in North America.

   How necessary are certifications? Not as much as you think.

   Find this and more answer in our Kubernetes job market report for 2023.

2. The culture of cost optimization  —  reducing Kubernetes cost by $300,000

   engineering.razorpay.com

   In this 3-part series, you'll delve into how the team at Razorpay optimise their cloud bill and save $300k.

   • Part 1: Spot instances.
   • Part 2: Graviton.
   • Part 3: Overprovisioning and resource fine-tuning.

3. Why Kubernetes needs an LTS

   matduggan.com

   In this article, the author argues that Kubernetes needs a Long Term Release (LTS) plan in addition to keeping the current release cycle of one every 15 weeks.

   Mat also cites the newly formed LTS workgroup as something to look forward to.

4. How Render scaled Knative to 100k+ web apps

   render.com

   Render, overwhelmed by user growth after Heroku's free tier ended, optimized its Kubernetes with Knative, reducing networking overhead and the number of Services to enhance performance and stability.

   Learn more in this article.

5. Debugging running pods on Kubernetes

   medium.com

   This article teaches troubleshooting methods like kubectl exec and using kubectl debug.

   It introduces kubectl superdebug for enhanced debugging with shared volumes and highlights kpexec and non-native methods for advanced scenarios.

6. Securing Kubernetes: a comprehensive guide to runtime security and system hardening

   medium.com

   In this article, you'll discuss three ways to secure Kubernetes pods using AppArmor, Seccomp, and immutable pods.

   These techniques can help to prevent malicious attacks and protect your Kubernetes cluster.

Articles worth checking out:

• Zero trust architecture on Kubernetes with Istio service mesh

• The making of admission webhooks

• How to optimize Kubernetes pod & JVM's CPU/memory size for a large number of concurrent users

• Creating Kubernetes Auto Scaling Groups for multiple availability zones

• How purpose-built observability will speed up your Kubernetes troubleshooting

Tutorials

1. Multi-service progressive delivery with Argo Rollouts

   codefresh.io

   In this tutorial, you will learn how to implement Argo Rollouts for progressive delivery, catering to both modern, independent microservices and legacy, tightly coupled services.

2. How to integrate Docker & JetBrains into Telepresence

   dev.to

   Learn to debug Kubernetes containerized apps with Telepresence, set remote IDE breakpoints, manage Docker builds, and access cluster services.

   This guide covers environment setup, development practices, and IDE support for JVM and Go applications.

3. Demystifying kernel dumps on OpenShift

   medium.com

   In this guide, learn to interpret OpenShift kernel dumps: configuring kdump, reading vmcore via Crash utility, and crash analysis essentials like permissions, memory management, and using diagnostic commands for unravelling system crash causes.

4. GitHub Actions, self-hosted runners on Amazon EKS & spot instances

   levelup.gitconnected.com

   This tutorial teaches how to optimize GitHub Actions CI/CD workflows for web apps with high update frequency by leveraging self-hosted runners on AWS EKS using spot instances.

Kubernetes jobs

1. • Engineering Manager with Binti

   • Salary: $240K to $270K a year

   • Location: remote from the United States

   • Tech stack: Kubernetes, GCP, GraphQL, Javascript, Ruby, PostgreSQL

2. • DevSecOps Engineer with Mattermost

   • Salary: $150K to $240K a year

   • Location: remote from the United States

   • Tech stack: Kubernetes, AWS, Docker, Go, Javascript

3. • Software Engineer with cargo-partner

   • Salary: €48K a year

   • Location: remote from Slovakia

   • Tech stack: Kubernetes, AWS, Java, Redis, Kafka, Jenkins, Ansible, Graylog

Discover more Kubernetes jobs on Kube Careers →

Code & tools

1. VolSync: replicate persistent volumes

   github.com/backube

   VolSync asynchronously replicates Kubernetes persistent volumes between clusters using rsync or rclone.

   It also supports creating backups of persistent volumes via restic.

2. Kubernetes Migrations Factory

   github.com/awslabs

   Kubernetes Migrations Factory (KMF) is a tool developed for migrating docker containers to Amazon EKS.

   KMF is written in Golang and offers a command-line interface.

3. Migrations Operator

   github.com/coderanger

   Migrations-Operator is a Kubernetes operator to manage database migrations or similar application setup tasks.

4. Skaffold: easy and repeatable Kubernetes development

   github.com/GoogleContainerTools

   Skaffold is a command line tool that facilitates continuous development for Kubernetes applications.

   You can iterate on your application source code locally and then deploy it to local or remote Kubernetes clusters.

5. Kubeconform: manifest validation

   github.com/yannh

   Kubeconform is a Kubernetes manifests validation tool.

   Similar to Kubeval, but with the following improvements:

   1. High performance.
   2. Remote or local schemas locations.
   3. Up-to-date schemas for all recent versions of Kubernetes.

Other interesting projects:

• DevSecOps for air gap & limited-connection systems

• Troubleshooting for Kubernetes environments

• Podinfo: Go microservice template for Kubernetes

• kubectx + kubens: Power tools for kubectl

• Selfra: policy-as-code

• Kubernetes Deprecated API Versions Exporter

• kusion: deliver intentions to Kubernetes

Upcoming Kubernetes events

1. Feb

   5

   Advanced Kubernetes course (London)

   In-person workshop organized by Learnk8s.

   • Location: London, UK

   • This event requires an entrance fee

2. Feb

   5

   Advanced Kubernetes course (New York)

   In-person workshop organized by Learnk8s.

   • Location: New York, NY, USA

   • This event requires an entrance fee

3. Feb

   3

   Kubernetes Community Days Kerala 2024

   In-person conference organized by KCD Kerala.

   • Location: Kochi, IN

   • This event requires an entrance fee

   • • Use LK8SINKCDKERALA to get 15% off

4. Feb

   4

   FOSDEM 2024

   In-person conference organized by FOSDEM.

   • Location: Brussels, BE

   • This event requires an entrance fee

5. Feb

   5

   Jfokus

   In-person conference organized by Jfokus.

   • Location: Stockholm, SE

   • This event requires an entrance fee

Discover more Kubernetes events on Kube Events →

Kubernetes call for papers

1. expired

   Kubernetes Community Days Costa Rica 2024

   The Call For Paper was open until 1 February 2024 at UTC. More info →

   • Location: Heredia, CR

   • In-person conference organized by KCD Costa Rica.

   • The conference starts on the 1 March 2024.

   • Apply here

2. expired

   Kubernetes Community Days Romania 2024

   The Call For Paper was open until 31 January 2024 at UTC. More info →

   • Location: Bucharest, RO

   • In-person conference organized by KCD Romania.

   • The conference starts on the 25 April 2024.

   • Apply here

3. expired

   Kubernetes Community Days Texas 2024

   The Call For Paper was open until 5 February 2024 at UTC. More info →

   • Location: Irving, TX, USA

   • In-person conference organized by KCD Texas.

   • The conference starts on the 12 April 2024.

   • Apply here

4. expired

   Kubernetes Community Days Istanbul

   The Call For Paper was open until 31 January 2024 at UTC. More info →

   • Location: Istanbul, TR

   • In-person conference organized by KCD Istanbul.

   • The conference starts on the 15 May 2024.

   • Apply here

5. expired

   Kubernetes Community Days Munich 2024

   The Call For Paper was open until 31 January 2024 at UTC. More info →

   • Location: Munich, DE

   • In-person conference organized by KCD Munich.

   • The conference starts on the 2 July 2024.

   • Apply here

6. expired

   KubeHuddle Toronto 2024

   The Call For Paper was open until 3 February 2024 at UTC. More info →

   • Location: Toronto, CA

   • In-person conference organized by KubeHuddle.

   • The conference starts on the 8 May 2024.

   • Apply here

7. expired

   Kubernetes Community Days New York 2024

   The Call For Paper was open until 12 February 2024 at UTC. More info →

   • Location: New York, NY, USA

   • In-person conference organized by KCD New York.

   • The conference starts on the 22 May 2024.

   • Apply here

8. expired

   CloudNativeSecurityCon North America

   The Call For Paper was open until 1 April 2024 at UTC. More info →

   • Location: Seattle, WA, USA

   • In-person conference organized by Linux Foundation.

   • The conference starts on the 26 June 2024.

   • Apply here

9. expired

   Kubernetes Community Days Italy 2024

   The Call For Paper was open until 4 April 2024 at UTC. More info →

   • Location: Milan, IT

   • In-person conference organized by KCD Italy.

   • The conference starts on the 20 June 2024.

   • Apply here

Until next time!

— Dan