Learn Kubernetes weekly — issue 11

25 Jan 2023

Articles

1. How we handled 100k+ CCU on a real-time collective canvas

   Alexandre Moghrabi

   In this case study, you will learn how Alexandre & William designed and scaled a Kubernetes cluster to 250k concurrent users for a charity event.

2. Benchmarking cluster creation time for 8 managed Kubernetes providers

   Stephen Hoogendijk & Buster Styren

   You might find this report interesting if you care about Kubernetes cluster creation time.

   This benchmark compares 8 providers of managed Kubernetes to determine how long they take to initialize.

3. Scaling Kubernetes to multiple clusters and regions

   Daniele Polencic

   In this tutorial, you will learn how to create, connect and operate three Kubernetes clusters in different regions: North America, Europe and South East Asia.

4. Be lean, go far: leveraging Kubernetes for an elastic right-sized platform

   Sebastien Doido

   In this case study, you will learn how the team at BlaBlaCar improved CPU sizing efficiency in their cluster from 25 to 53% and avoided wasting resources by getting a more elastic infrastructure.

5. Understanding Kubernetes evicted pods

   Javier Martínez

   What does it mean that Kubernetes Pods are evicted?

   They are terminated, usually due to a lack of resources.

   But why does this happen?

6. Kubernetes informers: opening the mystery box

   Jason Fehr

   In this article, you will learn how the team at Cloudera found a performance issue with Kubernetes informers and how they managed to rectify the issue.

Articles worth checking out:

• The Application Gateway Ingress Controller is broken

• Apache Druid: overview, running in Kubernetes and monitoring with Prometheus

• Introduction to Kubernetes extensibility

• How does Kubernetes assign QoS class to pods through OOM score?

• Using Helm to include all files from a directory in-line

• Understanding and cost optimizing Amazon EKS control plane logs

• Configuring AKS to read secrets and certificates from Azure KeyVault

• Kubernetes OWASP top 10: centralised policy enforcement

• ArchlinuxARM 64bit and Kubernetes on Raspberry PI

Tutorials

1. Improving security easily with Traefik and Kubernetes

   Vados

   In this tutorial, you will learn how to upgrade and secure Traefik to pass the Mozilla Observatory check.

   In the process, you will learn how to configure cert-manager, test the IngressRoute and add middlewares.

2. Ingresses and load balancers in Kubernetes with MetalLB and NGINX-ingress

   Kellian Cottart

   This tutorial will teach you how to use MetalLB and nginx-ingress to load-balance requests in a bare-metal Kubernetes cluster.

3. Is your Kubernetes API server exposed?

   David Calvert

   In this article, you will learn how to test if your EKS control plane is exposed to the public internet and how to fix it.

4. Creating a mutating webhook for great good!

   Benjamin Tan Wei Hao

   In this tutorial, you will learn how to automatically schedule Kubeflow pipeline Pods from any number of namespaces on dedicated GKE node pools.

Kubernetes jobs

1. • DevOps Engineer with Scandio

   • Salary: €45K to €70K a year

   • Location: based in the office in München, Germany

   • Tech stack: Kubernetes, AWS, Azure, Docker

2. • DevSecOps Engineer with copebit AG

   • Salary: CHF 125K to CHF 145K a year

   • Location: remote from Switzerland

   • Tech stack: Kubernetes, AWS, Docker, Python, Cloudformation, Terraform, Ansible

3. • DevOps Engineer with EventMe

   • Salary: $30K to $50K a year

   • Location: fully remote

   • Tech stack: Kubernetes, GCP, Docker, GraphQL, Typescript, Pulumi

Discover more Kubernetes jobs on Kube Careers →

Code & tools

1. jamestgrant/kubectl-debug

   kubectl-debug is a tool that lets you debug a target container in a Kubernetes cluster by automatically creating a new, non-invasive, 'debug' container in the same PID, network, user, and IPC namespace as the target container without any disruption.

2. helm/helm-mapkubeapis

   mapkubeapis is a Helm v3 plugin which updates in-place Helm release metadata that contains deprecated or removed Kubernetes APIs to a new instance with supported Kubernetes APIs.

3. kubefirst/kubefirst

   The Kubefirst CLI is a cloud provisioning tool that creates a kubernetes cluster with automated Infrastructure as Code, GitOps asset management and application delivery, secrets management, and more.

4. shopify/kubeaudit

   kubeaudit is a command line tool and a Go package to audit Kubernetes clusters for various different security concerns, such as:

   • Run as non-root.
   • Use a read-only root filesystem.
   • Drop scary capabilities, don't add new ones.
   • Don't run privileged.

5. replicatedhq/troubleshoot

   Troubleshoot is a framework for collecting and analyzing diagnostic information about a Kubernetes cluster.

   The framework is customizable and allows third-party application developers to create troubleshoot specs that can be run by cluster operators.

Other interesting projects:

• netcracker/kubemarine

• berops/claudie

• mendrugory/salmorejo

• gilesknap/k3s-minecraft

• wunderio/csi-rclone

Upcoming Kubernetes events

1. Jan

   25

   Understanding container internals

   Online meetup organized by Software Security Bangalore.

   • This is a virtual event

   • This is a free event.

2. Jan

   26

   DevOps 2023

   Online conference organized by Conf42.

   • This is a virtual event

   • This is a free event.

3. Jan

   26

   Kubernetes on your own hardware

   Online meetup organized by We R Tech.

   • This is a virtual event

   • This is a free event.

4. Jan

   26

   Advanced Kubernetes course

   Online workshop organized by Learnk8s.

   • This is a virtual event

   • This event requires an entrance fee

Discover more Kubernetes events on Kube Events →

Kubernetes Call for Papers

1. expired

   Devopsdays Zurich

   The Call For Paper was open until 31 January 2023 at UTC. More info →

   • Location: Zurich, CH

   • In-person conference organized by Devopsdays.

   • The conference starts on the 2 May 2023.

   • Apply here

2. expired

   Kubernetes Community Days Ukraine

   The Call For Paper was open until 31 January 2023 at UTC. More info →

   • This is a virtual event

   • Online conference organized by KCD Ukraine Fundraiser 2023.

   • The conference starts on the 16 March 2023.

   • Apply here

3. expired

   Kubernetes Community Days Turkey 2023

   The Call For Paper was open until 31 January 2023 at UTC. More info →

   • Location: Istanbul, TR and virtual

   • Online & in-person conference organized by KCD Turkey 2023.

   • The conference starts on the 11 March 2023.

   • Apply here

4. expired

   Sloconf 2023

   The Call For Paper was open until 31 January 2023 at UTC. More info →

   • This is a virtual event

   • Online conference organized by SLOconf.

   • The conference starts on the 15 May 2023.

   • Apply here

5. expired

   CloudLand 2023

   The Call For Paper was open until 31 January 2023 at UTC. More info →

   • Location: Cologne, DE

   • In-person conference organized by Cloudland.

   • The conference starts on the 20 June 2023.

   • Apply here

6. expired

   JCON Europe

   The Call For Paper was open until 31 January 2023 at UTC. More info →

   • Location: Cologne, DE

   • In-person conference organized by JavaPro.

   • The conference starts on the 20 June 2023.

   • Apply here

7. expired

   Devoxx Greece

   The Call For Paper was open until 31 January 2023 at UTC. More info →

   • Location: Athens, GR

   • In-person conference organized by Softconf.

   • The conference starts on the 4 May 2023.

   • Apply here

8. expired

   JNation

   The Call For Paper was open until 31 January 2023 at UTC. More info →

   • Location: Coimbra, PT

   • In-person conference organized by CoimbraJUG.

   • The conference starts on the 6 June 2023.

   • Apply here

Until next time!

— Dan

Subscribe and, every Wednesday, receive the latest Kubernetes news!