Learn Kubernetes weekly — issue 18

15 Mar 2023

Articles

1. Kcp: Kubernetes-like control plane

   Erkan Erol

   kcp is a control plane for workloads on many clusters.

   In this article, you will explore how to use it to manage multiple tenants:

   1. In a single cluster with workspaces (isolated namespaces).
   2. In multiple clusters with SyncTarget and Placements.

2. Backup and restore containers with Kubernetes checkpointing API

   Martin Heinz

   Kubernetes v1.25 has introduced Container Checkpointing API.

   This article will teach you how to use it for container backup and restore or forensic analysis.

3. Benchmarking Kubernetes node initialization

   Buster Styren, Stephen Hoogendijk

   In this benchmark, you will compare cluster initialization time across 8 managed Kubernetes providers.

4. Tuning JVM containers for better CPU and memory utilisation in Kubernetes

   Anurag Prakash

   In this article, you'll discuss JVM warmup issues, high heap memory utilisation and how those affect Java apps deployed in Kubernetes.

   You'll then learn how to work around them.

5. Kubernetes mutating webhook with Python and Fastapi

   Kristijan Mitevski

   In this article, you will learn how to easily create a mutating webhook to intercept Kubernetes objects and modify them on the fly.

6. Abusing pod priority

   Nuno Adrego

   Pod Priority can be useful for some use cases, such as prioritizing critical applications, but definitely can catch you off guard if you don't have the right guardrails in place.

   This post illustrates the potential consequences of not having them.

Articles worth checking out:

• Buildkit & Docker buildx

• Tricky Kubernetes memory management for Java applications

• Modernizing the architecture of quick serve restaurant (QSR) infrastructure

• Kubernetes cluster security from the perspective of attackers

• Configuring routing for MetalLB in L2 mode

• Journey of a microservice application in the Kubernetes world

• Building an RPi Kubernetes cluster

• How to delete pods from a Kubernetes node and avoid downtime

• Disaster recovery solution for AKS persistent volume storage

• Monitoring Kubernetes services/endpoints with Prometheus blackbox exporter

• An overview of Kubernetes services

• Quicknotes: handling ingress in GKE

Tutorials

1. Write your Kubernetes infrastructure as go code — manage AWS services

   Abhishek Gupta

   AWS ACK helps bridge the gap between traditional Kubernetes resources and AWS services by allowing you to manage both from a single control plane.

   In this tutorial, you learn how to use it to provision DynamoDB and an app deployed on Kubernetes.

2. Hashicorp Vault cluster on the AWS Elastic Kubernetes Service

   Prithu Adhikary

   In this tutorial, you will learn how to deploy a Vault cluster on EKS with a Helm chart and consume the secrets from a Spring Boot app.

Kubernetes jobs

1. • Software Engineer with Cast AI

   • Salary: €72K to €96K a year

   • Location: remote from Europe

   • Tech stack: Kubernetes, AWS, GCP, Azure, ArgoCD, Go, Python, Gitlab, Prometheus

2. • DevOps Engineer with Nordcloud

   • Salary: CHF 100K to CHF 130K a year

   • Location: remote from Switzerland

   • Tech stack: Kubernetes, Azure, AWS, OpenShift, Helm, Docker, Python, Javascript, SQL, Terraform

Discover more Kubernetes jobs on Kube Careers →

Code & tools

1. grafana/tanka

   Tanka is the clean, concise and flexible alternative to YAML for your Kubernetes cluster.

2. box/kube-iptables-tailer

   kube-iptables-tailer is a service that gives you better visibility on networking issues in your Kubernetes cluster by detecting the traffic denied by iptables and surfacing corresponding information to the affected Pods via Kubernetes events.

3. we-dcode/kubetunnel

   KubeTunnel lets you develop locally while being connected to Kubernetes.

4. wagoodman/dive

   dive is a tool for exploring a docker image, layer contents, and discovering ways to shrink the size of your Docker/OCI image.

5. jodevsa/wireguard-operator

   wireguard-operator is a WireGuard operator created to easily provision a VPN in a Kubernetes cluster.

Other interesting projects:

• kubernetes-sigs/ingress2gateway

• projectsveltos/sveltosctl

• exdx/dcp

• gardener/etcd-backup-restore

Upcoming Kubernetes events

1. Mar

   16

   Why you need performance tests for proper Kubernetes scaling

   Online meetup organized by The San Francisco Java User Group.

   • This is a virtual event

   • This is a free event.

2. Mar

   16

   Kubernetes Community Days Ukraine

   Online conference organized by KCD Ukraine Fundraiser 2023.

   • This is a virtual event

   • This event requires an entrance fee

3. Mar

   20

   Gaining insight into GitOps

   Online webinar organized by Day-To-Day DevOps.

   • This is a virtual event

   • This is a free event.

4. Mar

   22

   The DEVOPS Conference

   Online conference organized by Eficode.

   • This is a virtual event

   • This is a free event.

5. Mar

   23

   Kubernetes Community Days Israel

   In-person conference organized by KCD Israel 2023.

   • Location: Tel-Aviv, IL

   • This event requires an entrance fee

Discover more Kubernetes events on Kube Events →

Kubernetes Call for Papers

1. expired

   Devopsdays Seattle

   The Call For Paper was open until 20 March 2023 at UTC. More info →

   • Location: Seattle, US

   • In-person conference organized by Devopsdays.

   • The conference starts on the 1 August 2023.

   • Apply here

Until next time!

— Dan

Subscribe and, every Wednesday, receive the latest Kubernetes news!