Learn Kubernetes weekly — issue 22

12 Apr 2023

KubeCon EU is one week away!

Can you feel the excitement in the air?

Even if you are not attending, there's still a reason to cheer: most companies are waiting for next week to announce products and new features (it does feel like a grown-up's Xmas).

Also, Learnk8s is running the iconic Advanced Kubernetes workshop in 2 weeks.

If you fancy levelling up your Kubernetes expertise, join us for four days packed with labs!

(we also offer corporate training, if that's your thing)

Without further ado, here are the articles from this week:

  1. Kubernetes end-to-end chain exploit

    Raad Haddad

    This article details the security flaws discovered in Kubernetes and GitOps tools due to improper configurations.

    It also demonstrates how an attacker could perform post-exploitation attacks, increasing their privileges and the attack surface.

  2. Setting up your first EKS cluster on AWS: some practical tips

    Benjamin Christmann

    You may find tons of information online on how to work with EKS, but it's easy to get lost in the details and lose the big picture.

    This article collects a few practical tips and notes on how to set up a production EKS cluster.

  3. A detailed talk about Kubernetes cluster security from the perspective of attackers

    Varma Kollu

    This 2-part series summarizes the methods and experience of attacking Kubernetes components, external services of nodes, business pods, and container escaping, including lateral attacks, as well as attacks on the Kubernetes management platform.

  4. Running production workloads in EKS using spot instances

    Matías Costa

    In this article, you will learn how giffgaff run all of their applications in an EKS cluster using 100% spot instances and what additional safeguards they put in place to improve reliability.

  5. How to use server-side apply in Kubernetes operators

    Stefanie Lai

    Server-side apply (SSA) is an excellent mechanism to improve Kubernetes operators' performance and is becoming the default way to apply resources in a cluster.

    Let how it works in this article.

  6. A guide to Kubernetes application resource tuning

    Vincent Sevel

    This 3-part series aims at providing a good understanding of container resource sizing in Kubernetes.

    It also includes a case study with 50m VMs and guides you through the thought process of selecting the right requests and limits for memory and CPU.

Articles worth checking out:

  1. Highly available Kubernetes cluster

    Hafiz Shafruddin

    In this article, you will learn how to create a highly available kubernetes cluster using vagrant, libvirt, containerd, calico and ansible.

    • DevOps Engineer with Myn

    • Salary: £65K to £80K a year

    • Location: remote from the United Kingdom

    • Tech stack: Kubernetes, AWS, Helm, Docker, Python, Shell, Pulumi, Terraform, Jenkins, Datadog

    • Platform Engineer with Duro

    • Salary: $135K to $165K a year

    • Location: based in the office (and remote from home) in Remote-Hybrid (Los Angeles)

    • Tech stack: Kubernetes, Terraform

    • DevOps Engineer with PayDock

    • Salary: £72.47K to £108.7K a year

    • Location: remote from the United Kingdom

    • Tech stack: Kubernetes, AWS, Docker, Shell, Python, Groovy

Discover more Kubernetes jobs on Kube Careers →

  1. nubenetes/awesome-kubernetes

    awesome-kubernetes is a curated list of awesome Kubernetes references collected since 2018.

  2. marvasgit/kubernetes-multicooker

    Kubernetes Multi Cooker automatically taints and evicts nodes with high CPU overload based on chosen Metric PSI or Average Load.

  3. otterize/intents-operator

    The Otterize intents operator is a tool used to easily automate the creation of network policies and Kafka ACLs in a Kubernetes cluster using a human-readable format, via a custom resource.

  4. onzack/grafana-dashboards

    In this repository you will find Grafana Dashboards for Kubernetes, OpenShift and other systems.

  5. ajayk/drifter

    Drifter scans your cluster to find configuration drifts on Kubernetes resources or Helm charts.

Other interesting projects:

Upcoming Kubernetes events

  1. Apr

    15

    Kubernetes Community Days 大连

    In-person conference organized by KCD Dalian.

    • Location: Dalian, CN

    • This is a free event.

  2. Apr

    16

    Cloud-Native Rejekts

    In-person conference organized by Cloud Native Rejekts.

    • Location: Amsterdam, NL

    • This event requires an entrance fee

      • Use 30Rejekts_DiscountSponsEU23 to get 30% off

  3. Apr

    17

    KubeCon EU 2023

    Online & in-person conference organized by Linux Foundation.

    • Location: Amsterdam, Netherlands and virtual

    • This event requires an entrance fee

      • Use KCEU23LK810 to get 10% off

  4. Apr

    18

    ArgoCon

    In-person conference organized by CNCF.

    • Location: Amsterdam, NL

    • This event requires an entrance fee

  5. Apr

    18

    Cloud Native Telco Day

    In-person conference organized by CNCF.

    • Location: Amsterdam, NL

    • This event requires an entrance fee

  6. Apr

    18

    Istio Day

    In-person conference organized by CNCF.

    • Location: Amsterdam, NL

    • This event requires an entrance fee

  7. Apr

    24

    Advanced Kubernetes course

    Online workshop organized by Learnk8s.

    • This is a virtual event

    • This event requires an entrance fee

  8. Apr

    26

    Developerweek Europe 2023

    Online conference organized by DevNetwork.

    • This is a virtual event

    • This event requires an entrance fee

      • Use MP474 to get €100.00 off

Discover more Kubernetes events on Kube Events →

Kubernetes Call for Papers

  1. expired

    Devopsdays Phoenix

    The Call For Paper was open until 14 April 2023 at UTC. More info →
    • Location: Phoenix, AZ, USA

    • In-person conference organized by Devopsdays.

    • The conference starts on the 25 May 2023.

    • Apply here
  2. expired

    Beer City Code

    The Call For Paper was open until 16 April 2023 at UTC. More info →
    • Location: Grand Rapids, MI, USA

    • In-person conference organized by West Michigan .NET Users Group.

    • The conference starts on the 4 August 2023.

    • Apply here
  3. expired

    Kubernetes Community Days Mumbai

    The Call For Paper was open until 16 April 2023 at UTC. More info →
    • Location: Mumbai, IN and virtual

    • Online & in-person conference organized by KCD Mumbai.

    • The conference starts on the 17 June 2023.

    • Apply here

Until next time!

— Dan

Subscribe and, every Wednesday, receive the latest Kubernetes news!

Or follow us on: