Learn Kubernetes Weekly issue 85

Long-live tokens, Impact of GIT branches on Argo, Surviving OOM in Java, Network traffic shaping, Bottlerocket with EKS, 2023 vulnerability roundup

26 Jun 2024

This episode/newsletter is sponsored by StormForge – Double your Kubernetes resource utilization and unburden developers from sizing complexity with the first HPA-compatible vertical pod rightsizing solution. Try it for free.

  1. Understanding the risks of long-lived Kubernetes Service Account tokens

    Thomas Segura

    The article discusses the risks associated with long-lived Kubernetes service account tokens.

    It also explores mitigation strategies and the benefits of using short-lived tokens.

  2. Using the Vertical Pod Autoscaler to automate pod rightsizing

    John Platt

    This article will teach you about the Vertical Pod Autoscaler (VPA) to reduce operational overhead and improve cluster efficiency. You will learn how the VPA works, its architecture, how to install it, and its limitations.

    sponsored

  3. The impact of numerous GIT branches and tags on Argo CD and cloud budgets

    Yahel Agassi

    The article discusses the impact of numerous Git branches and tags on Argo CD.

    It highlights how repository clutter can affect Argo CD's performance and Image Updater efficiency and increase NAT Gateway costs.

  4. Surviving OOM in Kubernetes: Java applications

    Yonah Dissen

    This article covers Java apps' OOM issue in Kubernetes, exploring methods to capture heap dumps pre-pod restart.

    It discusses using Prometheus metrics, heap dump persistence, and JVM parameters.

  5. 2023 Kubernetes vulnerability roundup

    This article covers 2023 Kubernetes vulnerabilities, categorizing them based on CVSS, weakness types, impact types, and other relevant factors.

  6. Network traffic shaping in Kubernetes: topology aware routing

    adil

    One challenge in cloud-distributed systems is keeping network traffic within the same availability zone.

    Kubernetes introduced Topology Aware Routing to address this issue.

    This ensures requests between apps remain in the same zone.

Articles worth checking out:

Double Kubernetes efficiency to optimize cost and performance

StormForge

Automated Kubernetes resource management for platform engineering teams to continuously rightsize workloads with HPA compatibility. Try it for free

Double Kubernetes efficiency to optimize cost and performance
  1. Advanced autoscaling in Kubernetes with KEDA

    John Platt

    KEDA builds on the HPA to provide significantly more flexibility, easy-to-use options for various metrics, and the ability to scale applications to zero.

    Learn the benefits of KEDA architecture and walk through a practical application and integration.

    sponsored

  2. What is Bottlerocket and how to use it in EKS

    Vedant Pareek

    This article introduces Bottlerocket, a purpose-built Linux-based operating system optimized for container hosting.

    The article also discusses using Bottlerocket in EKS, highlighting the Bottlerocket Update Operator to keep nodes up-to-date.

  3. Spring Boot SSL hot reload on Kubernetes

    This tutorial explains how to hot reload SSL certificates for a Spring Boot app on Kubernetes.

    It demonstrates generating SSL certificates with cert-manager, deploying apps on Kubernetes, and handling certificate rotation without restarting pods.

  4. A practical guide to running Nvidia GPUs on Kubernetes

    This guide on integrating NVIDIA GPUs with Kubernetes covers the process of installing NVIDIA GPU drivers and configuring the container runtime.

    The author also explores GPU acceleration in the cloud using GKE A100.

  5. Scaling workloads with the big savings quartet: EKS, Fargate, Karpenter and Keda

    This tutorial demonstrates how to scale workloads using a combination of EKS, Fargate, Karpenter, and Keda.

    The article provides a step-by-step guide on how to set up and configure these tools for optimal performance and cost savings.

    • Software Engineer with Edgemony

    • Salary: €35K to €50K a year

    • Location: remote from Italy

    • Tech stack: Kubernetes, AWS, Azure, GCP, Docker, Python, Mongo, PostgreSQL, MySQL

    • Platform Engineer with Hook Technology

    • Salary: £85K to £105K a year

    • Location: based in the office (and remote from home) in London, GB

    • Tech stack: Kubernetes, AWS, Docker, Terraform

Discover more Kubernetes jobs on Kube Careers →

  1. SlimFaas: Function As A Service

    SlimFaas is a tool for creating functions as a service on Kubernetes.

    It allows you to scale to zero, supports asynchronous and synchronous calls, the retry pattern, and more.

  2. Kernel Module Management

    Kernel Module Management (KMM) is an operator that manages, builds, signs and deploys out-of-tree kernel modules and device plugins.

    KMM adds a CRD which describes the desired state of an out-of-tree kernel module and its associated device plugin.

  3. Deprecations AKA KubePug

    KubePug is kubectl plugin which:

    • Downloads a swagger.json from a specific Kubernetes version.
    • Finds deprecation notices.
    • Checks if the cluster has deprecated API versions.

    Useful if you're upgrading to Kubernetes minor versions.

  4. scaf: streamlined development

    scaf generates a new project structure with Kubernetes manifests in three Kustomize layers for dev, sandbox, and production.

    It provides a blueprint for a new project and streamlines the development experience with Tilt.

  5. KFtray: port-forward management

    KFtray is a cross-platform system tray app for Kubernetes port-forward management.

Other interesting projects:

Upcoming Kubernetes events

  1. Jul

    2

    Kubernetes Community Days Munich 2024

    In-person conference organized by KCD Munich.

    • Location: Munich, DE

    • This event requires an entrance fee

  2. Jun

    26

    CloudNativeSecurityCon North America

    In-person conference organized by Linux Foundation.

    • Location: Seattle, WA, USA

    • This event requires an entrance fee

  3. Jun

    27

    The state of Kubernetes 2024

    Online webinar organized by Octopus Deploy.

    • This is a virtual event

    • This is a free event.

  4. Jun

    27

    Kansas City Developer Conference 2024

    In-person conference organized by KCDC.

    • Location: Kansas City, MO, USA

    • This event requires an entrance fee

  5. Jun

    27

    Kubernetes monitoring using managed open source technologies

    In-person meetup organized by Kubernetes Austin.

    • Location: Austin, TX, USA

    • This is a free event.

Discover more Kubernetes events on Kube Events →

Kubernetes Call for Papers

  1. expired

    Kubeday Colombia

    The Call For Paper was open until 29 June 2024 at UTC. More info →
    • Location: Medellín, CO

    • In-person conference organized by Linux Foundation.

    • The conference starts on the 9 October 2024.

    • Apply here
  2. expired

    Kubernetes Community Days Porto 2024

    The Call For Paper was open until 15 July 2024 at UTC. More info →
    • Location: Porto, PT

    • In-person conference organized by KCD Porto.

    • The conference starts on the 27 September 2024.

    • Apply here
  3. expired

    Kube Native 2024

    The Call For Paper was open until 26 August 2024 at UTC. More info →
    • This is a virtual event

    • Online conference organized by Conf42.

    • The conference starts on the 26 September 2024.

    • Apply here
  4. expired

    Platform Engineering 2024

    The Call For Paper was open until 5 August 2024 at UTC. More info →
    • This is a virtual event

    • Online conference organized by Conf42.

    • The conference starts on the 5 September 2024.

    • Apply here
  5. expired

    QCon San Francisco

    The Call For Paper was open until 18 September 2024 at UTC. More info →
    • Location: San Francisco, CA, USA

    • In-person conference organized by InfoQ.

    • The conference starts on the 18 November 2024.

    • Apply here
  6. expired

    Open Source Monitoring Conference

    The Call For Paper was open until 15 August 2024 at UTC. More info →
    • Location: Nuremberg, DE

    • In-person conference organized by NETWAYS.

    • The conference starts on the 21 November 2024.

    • Apply here
  7. expired

    Devopsdays Dallas

    The Call For Paper was open until 1 July 2024 at UTC. More info →
    • Location: Dallas, TX, USA

    • In-person conference organized by Devopsdays.

    • The conference starts on the 9 October 2024.

    • Apply here
  8. expired

    Devopsdays Cáceres

    The Call For Paper was open until 30 June 2024 at UTC. More info →
    • Location: Cáceres, ES

    • In-person conference organized by Devopsdays.

    • The conference starts on the 3 October 2024.

    • Apply here
  9. expired

    Devopsdays Recife

    The Call For Paper was open until 1 July 2024 at UTC. More info →
    • Location: Recife, BR

    • In-person conference organized by Devopsdays.

    • The conference starts on the 14 December 2024.

    • Apply here

Until next time!

— Dan

Subscribe and, every Wednesday, receive the latest Kubernetes news!

Or follow us on: