Learn Kubernetes Weekly issue 44

Sticky sessions and canary releases, ALB ingress in Kubernetes, 1.27 goes galactic with OpenAPI3, Five Helm tools, guide to Kubernetes gateways

13 Sept 2023

What if you could choose the best node for your Kubernetes cluster before writing any code?

Join me tomorrow for the first episode of the 3-part educational series on Cost optimization and efficiency in Kubernetes.

You can register here!

Articles

1. Sticky sessions and canary releases in Kubernetes

   Daniele Polencic

   Sticky sessions or session affinity is a convenient strategy to keep subsequent requests always reaching the same pod.

   In this article, you will explore how to implement them in Kubernetes using ingress-nginx.

2. An essential guide to achieving compliance with Kubernetes

   ARMO

   Learn about Kubernetes compliance challenges and consequences of non-compliance, and get guidance on maintaining a secure and compliant cloud environment in a dynamic Kubernetes setup.

   sponsored

3. Mastering the challenges of using ALB ingress in Kubernetes

   Team

   In this article, you'll learn the reasons behind migrating from Istio to the Application Load Balancer (ALB) as the ingress controller in Kubernetes.

   1. Limited communication between ALB and Kubernetes.
   2. Insufficient knowledge of pods and latency.

4. Five Helm tools for improving Kubernetes quality of life

   Audrey Turco

   In this article, you will find five tools that work well with Helm:

   1. Helmfile.
   2. ChartMuseum.
   3. Helm Diff.
   4. Helm Test/Unittest.
   5. Helm Secrets

5. Kubernetes 1.27 goes galactic with OpenAPI3

   DeveloperSteve Coochin

   In this article, you will explore the power of Kubernetes 1.27 API with OpenAPI v3 validation.

   You will learn usage examples and embrace flexible, reliable custom resources.

6. A comprehensive guide to API gateways, Kubernetes gateways, and service meshes

   Navendu Pottekkat

   In this article, you'll learn how API gateways, Kubernetes gateways, and service meshes are fundamentally different and cater to different use cases.

   You will also learn which one you should use in your cluster.

Articles worth checking out:

• Kubernetes RBAC permissions model and how to add users to AWS EKS

• Setting up SSL/TLS for Kubernetes ingress

• Exploring the new ValidatingAdmissionPolicy feature with CEL

• Kubernetes services: clusterip | nodeport | load balancer | multi-port | headless

• Kubernetes and resilience (pod topology spread constraints)

• Understanding gRPC load balancing in Kubernetes with Istio

• Exploring etcd's efficiency: a performance evaluation in ppc64le versus amd64 environments

• Efficient strategies and best practices to minimize resource consumption of containers in host systems

• Understanding Helm templates and using yq to parse YAML

• Kubernetes: crafting custom Kubectl shortcuts

• Ship smaller Docker images: best practices

Kubernetes first steps book (& videos!)

Learnk8s

TL;DR: In this course, you will learn how to package and deploy applications as Docker containers in a Kubernetes cluster.

You will also learn how to architect apps that are designed to be horizontally scalable.

Tutorials

1. Limiting access to Kubernetes resources with RBAC

   Arthur Chiao

   Learn how to recreate the Kubernetes RBAC authorization model from scratch and practice the relationships between Roles, ServiceAccounts, RoleBindings, etc.

2. HA monitoring setup in Kubernetes via VictoriaMetrics Cluster

   VictoriaMetrics

   The guide covers how to store, scrape and discover metrics in a Kubernetes cluster using VictoriaMetrics.

   sponsored

3. Trying coroot, an eBPF-based observability tool for Kubernetes and more

   Anton Peretrukhin

   Coroot collects and analyzes telemetry data to help you identify, troubleshoot and fix your application issues.

   In this tutorial, you will learn how to install it in Kubernetes, explore its features, and evaluate its pros & cons.

4. Using Terraform with Kubernetes: a comprehensive guide

   Vinoth Subbiah

   This guide explores the fundamentals of using Terraform with Kubernetes.

   1. Setting Up a Kubernetes Cluster with Terraform
   2. Deploying Kubernetes Resources with Terraform
   3. Managing Kubernetes Configurations
   4. Terraform providers
   5. Best Practices

5. Testing GitOps on Virtual Kubernetes Clusters with ArgoCD

   Piotr Minkowski

   In this article, you will learn how to test and verify the GitOps configuration managed by ArgoCD on virtual Kubernetes clusters.

More tutorials:

• Setting up multi-cloud between AWS & Google Cloud

• 3-node k3s cluster with etcd and MetalLB on bare-metal systems

Kubernetes jobs

1. • Solution Architect with Palo Alto Networks

   • Salary: $187.5K to $257.85K a year

   • Location: remote from the United States

   • Tech stack: Kubernetes, AWS, Azure, GCP, OpenShift, Docker, Terraform, Cloudformation, Jenkins, CircleCI

2. • Software Engineer with Press Ganey

   • Salary: $140K to $160K a year

   • Location: remote from the United States

   • Tech stack: Kubernetes, AWS, Azure, GCP, Docker, Go, Python, Javascript, Java, C

3. • DevOps Engineer with Zscaler

   • Salary: $170K to $200K a year

   • Location: remote from the United States

   • Tech stack: Kubernetes, AWS, SQL, Terraform, Ansible

Discover more Kubernetes jobs on Kube Careers →

Code & tools

1. Talos: Linux distro for Kubernetes

   Talos is a modern Linux distribution for running Kubernetes: secure, immutable, and minimal.

   Talos is fully open-source & production-ready.

   All system management is done via an API - no shell or interactive console exists.

2. kubearmor/kubearmor

   KubeArmor is a cloud-native runtime security enforcement system that restricts the behaviour (such as process execution, file access, and networking operations) of pods, containers, and nodes (VMs) at the system level.

3. kr8s: extensible Python client library

   kr8s is a simple, extensible Python client library with an API inspired by kubectl to reduce the developer learning curve.

4. Kubernetes Architecture Scheduler Plugin

   kube-arch-scheduler is a Kubernetes scheduler filter plugin that will filter nodes by the compatibility of the container image architectures present in a Pod.

   It also assigns weight to each architecture so that pods can prefer sitting on a specific one.

5. Multus-CNI

   Multus CNI is a CNI plugin enables attaching multiple network interfaces to pods.

   Typically, in Kubernetes, each pod only has one network interface (apart from a loopback).

   With Multus, you can create a multi-homed pod with multiple interfaces.

Other interesting projects:

• empath-nirvana/magic-happens

• Managing ArgoCD resources programmatically with Golang

• k8tz/k8tz

Upcoming Kubernetes events

1. Sept

   14

   SREday 2023

   Online conference organized by Conf42.

   • This is a virtual event

   • This is a free event.

2. Sept

   14

   How to (right) size your Kubernetes cluster for efficiency

   Online webinar organized by Learnk8s.

   • This is a virtual event

   • This is a free event.

3. Sept

   16

   Kubernetes Community Days Lahore

   Online & in-person conference organized by KCD Lahore.

   • Location: Lahore, PK and virtual

   • This is a free event.

4. Sept

   20

   Edgecase 2023: Kubernetes at the edge

   In-person meetup organized by Fullstaq.

   • Location: Utrecht, NL

   • This is a free event.

5. Sept

   25

   Advanced Kubernetes course (London)

   In-person workshop organized by Learnk8s.

   • Location: London, UK

   • This event requires an entrance fee

Discover more Kubernetes events on Kube Events →

Kubernetes Call for Papers

1. expired

   Kubernetes Community Days Denmark

   The Call For Paper was open until 14 September 2023 at UTC. More info →

   • Location: Brabrand, DK

   • In-person conference organized by KCD Denmark.

   • The conference starts on the 14 November 2023.

   • Apply here

2. expired

   KubeDay Singapore

   The Call For Paper was open until 17 September 2023 at UTC. More info →

   • Location: Singapore, SG

   • In-person conference organized by Linux Foundation.

   • The conference starts on the 12 December 2023.

   • Apply here

3. expired

   Kubeday India

   The Call For Paper was open until 17 September 2023 at UTC. More info →

   • Location: Bengaluru, IN

   • In-person conference organized by Linux Foundation.

   • The conference starts on the 8 December 2023.

   • Apply here

4. expired

   GitOpsCon Europe

   The Call For Paper was open until 4 October 2023 at UTC. More info →

   • This is a virtual event

   • Online conference organized by Linux Foundation.

   • The conference starts on the 5 December 2023.

   • Apply here

5. expired

   Kubernetes Community Days Oslo 2024

   The Call For Paper was open until 13 November 2023 at UTC. More info →

   • Location: Olso, NO

   • In-person conference organized by KCD Norway.

   • The conference starts on the 24 January 2024.

   • Apply here

6. expired

   KCD Austria Rejekts 2023

   The Call For Paper was open until 1 October 2023 at UTC. More info →

   • Location: Vienna, AT

   • In-person meetup organized by Cloud Native Austria.

   • The meetup starts on the 19 October 2023.

   • Apply here

7. expired

   DevOps Savannah

   The Call For Paper was open until 25 September 2023 at UTC. More info →

   • This is a virtual event

   • Online conference organized by Cloud Native Nairobi.

   • The conference starts on the 18 October 2023.

   • Apply here

8. expired

   DevOps Day

   The Call For Paper was open until 27 September 2023 at UTC. More info →

   • This is a virtual event

   • Online conference organized by WeAreDevelopers.

   • The conference starts on the 4 October 2023.

   • Apply here

9. expired

   DevSecOps 2023

   The Call For Paper was open until 30 October 2023 at UTC. More info →

   • This is a virtual event

   • Online conference organized by Conf42.

   • The conference starts on the 30 November 2023.

   • Apply here

Until next time!

— Dan

Subscribe and, every Wednesday, receive the latest Kubernetes news!