Learn Kubernetes weekly — issue 15

22 Feb 2023

Articles

1. Reserved CPU and memory in Kubernetes nodes

   Daniele Polencic

   In Kubernetes, are there hidden costs to running many cluster nodes?

   Yes, since not all CPU and memory in your Kubernetes nodes can be used to run Pods.

   Learn the details in this article.

2. Extending the Kubernetes API using operators

   Paul Kelly

   The extensible Kubernetes API enables administrators to add new facilities to a cluster, simplifying the deployment and management of complex applications.

   This article will give you a starting point to explore building your own operators.

3. Hygiene of an ArgoCD-built automation at a scale

   Damian Kęska

   In this article, you will find a list of best practices and tips for using ArgoCD automation at scale.

4. Testing production Kubernetes controllers

   James McShane

   In this article, you will learn how to test Kubernetes controllers using a mix of unit tests, local integration tests, and more fully featured runtime integration tests.

5. How to troubleshoot memory leaks within a .NET console application running in a Linux Docker container in Kubernetes

   Nicolas Barlatier

   In this step-by-step guide, you will learn how to troubleshoot a memory leak in a .Net Core application running within a Kubernetes cluster.

6. How does APISIX ingress Support thousands of pod replicas?

   Xin Rong

   In this article, you'll explore the challenges of deploying large numbers of Pods in your Kubernetes cluster.

   You'll also compare Endpoints and EndpointSlice and discuss how to enable EndpointSlice when installing APISIX Ingress.

Articles worth checking out:

• Fixing bad CPU usage distribution in Kubernetes

• Kubernetes snapshots: what are they and how to use them?

• How our own MongoDB operator improved deployments

• Helm inside your code? — Helm SDK

• Scaling Spinnaker to 1000 Kubernetes Clusters

• Recap: kube vs Cloud DNS in GKE

• Linking traces with continuous profiling

• How to use Workload Identity for access provisioning of Kubernetes services on Google Cloud

• Comparing Kubernetes gateway and ingress apis

• Automating blue-green deployments with Argo rollouts

• How to inject secrets in pods to improve security with Hashicorp Vault in 5 minutes

• Top 10 ways to protect EKS workloads from ransomware

• Pritunl: running VPN in Kubernetes

• GitOps with advanced cluster management for Kubernetes

• Replicaset & deployment in Kubernetes

Tutorials

1. Getting started with ACK RDS controller

   Shardul Srivastava

   In this tutorial, you will learn how to use the ACK controller for RDS — a Kubernetes Controller for provisioning RDS instances in a kubernetes native way.

Kubernetes jobs

1. • Product Manager with D2iQ

   • Salary: $180K to $240K a year

   • Location: remote from the United States

   • Tech stack: Kubernetes, D2iQ

2. • Security Architect with 3GC Group

   • Salary: $30K to $50K a year

   • Location: remote from the United States

   • Tech stack: Kubernetes, Docker, C#, Javascript, Typescript, Java, Prometheus

Discover more Kubernetes jobs on Kube Careers →

Code & tools

1. containerssh/containerssh

   ContainerSSH launches a new container for each SSH connection in Kubernetes, Podman or Docker.

   The user is transparently dropped in the container and the container is removed when the user disconnects.

2. omerbsezer/fast-kubernetes

   This repo covers Kubernetes objects' and components' details (Kubectl, Pod, Deployment, Service, ConfigMap, Volume, PV, PVC, etc.) and possible example usage scenarios (i.e. hands-on labs).

3. derailed/popeye

   Popeye is a utility that scans live Kubernetes clusters and reports potential issues with deployed resources and configurations.

   It detects misconfigurations and helps you to ensure that best practices are in place.

4. azure/secrets-store-csi-driver-provider-azure

   Azure Key Vault provider for Secret Store CSI driver allows you to get secret contents stored in Azure Key Vault instance and use the Secret Store CSI driver interface to mount them into Kubernetes pods.

5. kwasm/podman-wasm

   This repository contains a Podman machine image that can run native WebAssembly container images, which only contain wasm files and no runtime.

Other interesting projects:

• reddec/keycloak-ext-operator

• rancherfederal/rke2-aws-tf

Upcoming Kubernetes events

1. Feb

   22

   Observability of Kubernetes goes beyond observing health

   In-person meetup organized by DevOps Institute SKILup Amsterdam.

   • Location: Amsterdam, NL

   • This is a free event.

2. Feb

   22

   Intro to Kubernetes

   Online meetup organized by Free Code Camp Indy.

   • This is a virtual event

   • This is a free event.

3. Feb

   23

   Kubernetes Community Days Amsterdam 2023

   Online & in-person conference organized by KCD Amsterdam.

   • Location: Amsterdam, NL and virtual

   • This event requires an entrance fee

   • • Use KCDA20 to get 20% off

4. Feb

   23

   How to protect Kubernetes in a multi-cloud world

   Online & in-person meetup organized by Cloud Native Computing Switzerland.

   • Location: Opfikon, CH and virtual

   • This is a free event.

5. Feb

   23

   Manage secrets in Kubernetes using GitOps without compromising security

   Online meetup organized by Platform Engineers São Paulo.

   • This is a virtual event

   • This is a free event.

6. Mar

   9

   Advanced Kubernetes course

   Online workshop organized by Learnk8s.

   • This is a virtual event

   • This event requires an entrance fee

Discover more Kubernetes events on Kube Events →

Kubernetes Call for Papers

1. expired

   Devopsdays Birmingham UK

   The Call For Paper was open until 24 February 2023 at UTC. More info →

   • Location: Birmingham, UK

   • In-person conference organized by Devopsdays.

   • The conference starts on the 15 June 2023.

   • Apply here

2. expired

   OW2con'23

   The Call For Paper was open until 26 February 2023 at UTC. More info →

   • Location: Paris, FR

   • In-person conference organized by OW2.

   • The conference starts on the 14 June 2023.

   • Apply here

3. expired

   Devopsdays Tokyo

   The Call For Paper was open until 28 February 2023 at UTC. More info →

   • Location: Tokyo, JP

   • In-person conference organized by Devopsdays.

   • The conference starts on the 17 April 2023.

   • Apply here

4. expired

   Cloud native 2023

   The Call For Paper was open until 28 February 2023 at UTC. More info →

   • This is a virtual event

   • Online conference organized by Conf42.

   • The conference starts on the 30 March 2023.

   • Apply here

5. expired

   Devopsdays Amsterdam

   The Call For Paper was open until 28 February 2023 at UTC. More info →

   • Location: Amsterdam, NL

   • In-person conference organized by Devopsdays.

   • The conference starts on the 20 June 2023.

   • Apply here

6. expired

   Devoxx Poland

   The Call For Paper was open until 28 February 2023 at UTC. More info →

   • Location: Krakow, PL

   • In-person conference organized by DevoxxPL.

   • The conference starts on the 31 May 2023.

   • Apply here

7. expired

   PlatformCon

   The Call For Paper was open until 28 February 2023 at UTC. More info →

   • This is a virtual event

   • Online conference organized by PlatformEngineering.org.

   • The conference starts on the 8 June 2023.

   • Apply here

8. expired

   Kubernetes Community Days Czech & Slovak 2023

   The Call For Paper was open until 1 March 2023 at UTC. More info →

   • Location: Bratislava, SK

   • In-person conference organized by KCD Czech & Slovak 2023.

   • The conference starts on the 19 May 2023.

   • Apply here

Until next time!

— Dan

Subscribe and, every Wednesday, receive the latest Kubernetes news!