Learn Kubernetes Weekly issue 91

Minimal cost service mesh, Reducing cold-start-latency on GKE, Cluster API with kluctl, Varnish sharding, authz and authn with Istio and OPA

7 Aug 2024

This newsletter is sponsored by StormForge – Double your Kubernetes resource utilization and unburden developers from sizing complexity with the first HPA-compatible vertical pod rightsizing solution. Try it for free.

  1. ServiceRouter: hyperscale and minimal cost service mesh at Meta

    This case study explains how Meta doesn't use regular Service Meshes and instead opted for ServiceRouter: a service mesh-like tool that lives inside the application.

  2. Stop neglecting Kubernetes resource management

    Rafa Brito

    Doing nothing, one-size-fits-all and brute force are three common yet failing strategies for managing Kubernetes resources at scale.

    sponsored

  3. 4 ways to reduce cold-start-latency on GKE

    Mohamed BEN HASSINE

    This article discusses the challenges of cold starts in Kubernetes workloads and provides four techniques to reduce cold start latency on GKE.

  4. Managing Cluster API with kluctl

    Impressum

    In this tutorial, you will learn how to use Kluctl to manage Cluster API-based clusters.

  5. Varnish sharding with Istio in Kubernetes

    Kai Burjack

    This article discusses implementing Varnish sharding with Istio in Kubernetes to achieve consistent Hash-based Load Balancing.

    It addresses challenges such as increasing load, ensuring high availability, and maintaining cache effectiveness.

  6. Authentication and authorization with Istio and OPA on Kubernetes

    Oryan Peer

    This article discusses implementing authentication and authorization using Istio and OPA.

    It also explains how to integrate with Helm so that developers can self-serve.

Articles worth checking out:

Autonomous rightsizing for Kubernetes workloads

StormForge

Double your Kubernetes resource utilization and unburden developers from sizing complexity with the industry's first HPA-compatible vertical pod rightsizing solution.

Try now for free

Autonomous rightsizing for Kubernetes workloads
  1. EKS Karpenter: a deep dive and best practices

    John Platt

    This article provides Kubernetes administrators with a comprehensive overview of Karpenter's architecture and benefits, installation guidance, and best practices for effectively leveraging Karpenter.

    sponsored

  2. Kubernetes security practical training as a CTF game with Simulator

    By Dmitry Silkin, software engineer

    Dealing with security issues in containers and Kubernetes is an essential engineering skill.

    In this article, you will learn how to use a simulator to practice DevSecOps for free and in an engaging manner.

    • Head of Infrastructure with Silver.dev

    • Salary: $60K to $75K a year

    • Location: remote from Argentina

    • Tech stack: Kubernetes, AWS, Azure, GCP, Docker, Python, Javascript, Java, Kotlin, Jenkins

    • DevSecOps Engineer with Grafana Labs

    • Salary: £84.84K to £106.05K a year

    • Location: remote from the United Kingdom

    • Tech stack: Kubernetes, Docker, Go, Shell, Python, Javascript, Terraform, Grafana Mimir, Grafana, Grafana Tempo

    • Software Engineer with The Voleon Group

    • Salary: $160K to $180K a year

    • Location: remote from the United States

    • Tech stack: Kubernetes, Go, Python, SQL, PostgreSQL, Airflow, Jenkins, Grafana, Prometheus

    • DevOps Engineer with Figma

    • Salary: $240K to $350K a year

    • Location: remote from the United States

    • Tech stack: Kubernetes, AWS, GCP

Discover more Kubernetes jobs on Kube Careers →

  1. Kdoctor

    kdoctor-io

    kdoctor is a Kubernetes data plane testing component that conducts functional and performance tests on clusters using proactive pressure injection.

  2. Claudie: managing multi-cloud and hybrid-cloud

    Claudie is a platform for managing multi-cloud Kubernetes clusters with each node pools in a different cloud provider.

  3. Helmfile

    Helmfile is a declarative specification for deploying Helm charts.

    It lets you:

    • Keep a directory of chart value files and maintain changes in version control.
    • Apply CI/CD to configuration changes.
    • Periodically sync to avoid skew in environments.
  4. Kondense: automated resouce sizing

    unagex

    Kondense is an automated resource sizing tool.

    It runs as a sidecar in kubernetes pods and uses memory pressure to apply just the right amount of memory on a container to page out the unused memory while not getting out-of-memory killed.

  5. Unxsist/jet-pilot

    unxsist

    JET Pilot is an open-source Kubernetes IDE.

    Features:

    • Real-time Logs.
    • Kubernetes Object Management.
    • Container Shell.
    • Command Palette.

Other interesting projects:

Upcoming Kubernetes events

  1. Aug

    7

    Advanced Kubernetes: from GitOps to resource optimization and quantum computing

    Online & in-person meetup organized by Cloud Native Helsinki.

    • Location: Helsinki, FI and virtual

    • This is a free event.

  2. Aug

    9

    fintech_devcon

    In-person conference organized by Moov Financial.

    • Location: Austin, TX, USA

    • This event requires an entrance fee

  3. Aug

    13

    Platform engineering from scratch to clusterception

    In-person meetup organized by Cloud Native NoVA.

    • Location: Washington, DC, USA

    • This is a free event.

  4. Aug

    14

    DevConf.US 2024

    In-person conference organized by Red Hat.

    • Location: Boston, MA, USA

    • This is a free event.

  5. Aug

    14

    Balancing cost and reliability on Amazon EKS with Karpenter

    Online webinar organized by StormForge.

    • This is a virtual event

    • This is a free event.

  6. Aug

    14

    Master Prometheus on Kubernetes: spotting every issue without alert fatigue

    Online meetup organized by Platform Engineers Copenhagen.

    • This is a virtual event

    • This is a free event.

Discover more Kubernetes events on Kube Events →

Kubernetes Call for Papers

  1. expired

    Kubernetes Community Days Denmark 2024

    The Call For Paper was open until 16 September 2024 at UTC. More info →
    • Location: Copenhagen, DK

    • In-person conference organized by KCD Denmark.

    • The conference starts on the 20 November 2024.

    • Apply here
  2. expired

    KubeCon India

    The Call For Paper was open until 25 August 2024 at UTC. More info →
    • Location: Delhi, IN

    • In-person conference organized by Linux Foundation.

    • The conference starts on the 11 December 2024.

    • Apply here
  3. expired

    Kunbernetes Community Days Ghana

    The Call For Paper was open until 31 August 2024 at UTC. More info →
    • This is a virtual event

    • Online conference organized by KCD Ghana.

    • The conference starts on the 26 November 2024.

    • Apply here
  4. expired

    Kube Native 2024

    The Call For Paper was open until 26 August 2024 at UTC. More info →
    • This is a virtual event

    • Online conference organized by Conf42.

    • The conference starts on the 26 September 2024.

    • Apply here
  5. expired

    DevSecOps 2024

    The Call For Paper was open until 4 November 2024 at UTC. More info →
    • This is a virtual event

    • Online conference organized by Conf42.

    • The conference starts on the 5 December 2024.

    • Apply here
  6. expired

    QCon San Francisco

    The Call For Paper was open until 18 September 2024 at UTC. More info →
    • Location: San Francisco, CA, USA

    • In-person conference organized by InfoQ.

    • The conference starts on the 18 November 2024.

    • Apply here
  7. expired

    Open Source Monitoring Conference

    The Call For Paper was open until 15 August 2024 at UTC. More info →
    • Location: Nuremberg, DE

    • In-person conference organized by NETWAYS.

    • The conference starts on the 21 November 2024.

    • Apply here
  8. expired

    Devopsdays Bogotá

    The Call For Paper was open until 2 September 2024 at UTC. More info →
    • Location: Bogotá, CO

    • In-person conference organized by Devopsdays.

    • The conference starts on the 29 October 2024.

    • Apply here
  9. expired

    Devopsdays Warsaw

    The Call For Paper was open until 15 August 2024 at UTC. More info →
    • Location: Warsaw, PL

    • In-person conference organized by Devopsdays.

    • The conference starts on the 5 November 2024.

    • Apply here

Until next time!

— Dan

Subscribe and, every Wednesday, receive the latest Kubernetes news!

Or follow us on: