Best of KubernetesOctober 2024

  1. 1
    Article
    Avatar of bytebytegoByteByteGo·2y

    EP133: API vs SDK

    Learn the distinctions between APIs and SDKs, their purposes, and when to use each. Discover Kubernetes' popularity, Terraform workflows for turning code into cloud infrastructure, essential HTTP status codes, and common deployment strategies. Additionally, explore tools like QA Wolf for optimizing QA cycles and New Relic for monitoring AI chatbot performance.

  2. 2
    Article
    Avatar of lobstersLobsters·2y

    Talos Linux

    Talos Linux is a minimal, secure, and immutable operating system designed specifically for Kubernetes environments. It supports various platforms including cloud, bare metal, and virtualization. The system is managed entirely via an API, eliminating the need for SSH, shell, or console access. Talos Linux enhances security through mutual TLS authentication, immutable infrastructure, and adherence to best practices set by NIST and CIS. It also ensures predictability and evolvability by providing atomic updates and the latest stable versions of Kubernetes and Linux.

  3. 3
    Article
    Avatar of grafanaGrafana Labs·2y

    Container monitoring with Grafana: Helpful resources to get started

    Containers enable consistent application performance across different environments and are often organized into microservices for better efficiency and scalability. Grafana is a powerful tool for monitoring these containerized environments, offering capabilities to visualize, query, and analyze metrics and logs. Comprehensive documentation is available for deploying Grafana with Docker, Kubernetes, and Helm Charts, covering configuration, customization, and troubleshooting best practices. The community is also invited to contribute feedback and join the Grafana Champions program to support wider documentation efforts.

  4. 4
    Article
    Avatar of itnextITNEXT·2y

    Self-Hosting a Container Registry

    Self-hosting a container registry allows developers to maintain control over their container images, ensuring greater security and compliance with regulations. The guide provides step-by-step instructions to set up a registry server using Docker and Docker Compose, covering the configuration of Docker registry, Nginx for SSL/TLS handling, and domain setup. Alternatives like using Kubernetes or managed services like Harbor are also discussed.

  5. 5
    Article
    Avatar of devtronDevtron·1y

    Best 5 Alternatives to Kubernetes Dashboard

    Managing Kubernetes at scale can be complex, particularly with multiple clusters spread across regions. The default Kubernetes dashboard offers basic functionality but struggles with multi-cluster management, advanced analytics, and fine-grained RBAC. Alternatives like Devtron, OpenLens, Skooner, Headlamp, and Octant provide enhanced features such as comprehensive visibility, advanced troubleshooting, and unified control over multiple clusters. These tools can significantly improve operational efficiency and cluster management for organizations.

  6. 6
    Article
    Avatar of communityCommunity Picks·2y

    Choosing Between Docker Swarm and Kubernetes for Container Management

    Docker Swarm and Kubernetes are essential tools for container orchestration in distributed environments. Docker Swarm is simpler to manage and integrates well with Docker, making it suitable for small-scale operations. Kubernetes, developed by Google, offers advanced features like auto-scaling, self-healing, and extensive tool integrations, making it ideal for complex, large-scale deployments. Understanding their key differences in networking, storage solutions, security, integration, and community support can help you choose the right tool for your needs.

  7. 7
    Article
    Avatar of communityCommunity Picks·2y

    Why Running Databases on Kubernetes is Like Storing Critical Data on a Fragile Flash Drive

    Running databases on Kubernetes can be risky due to the potential for storage issues such as dangling Persistent Volumes (PV) and Persistent Volume Claims (PVC). The concept is likened to using a flash drive for critical data storage, with similar risks of data corruption and resource waste. The reliance on the CSI controller in Kubernetes can lead to data inaccessibility and manual recovery, making it less suitable for highly stateful, storage-intensive applications like databases.

  8. 8
    Article
    Avatar of devtronDevtron·1y

    Understanding Kubernetes Services

    Kubernetes is a distributed system with various components, and managing network communication between pods is essential. Kubernetes services help expose pods over the network, providing a static IP address even when pods are recreated. There are different types of Kubernetes services: ClusterIP (internal pod communication), NodePort (exposes pods to external traffic on specific ports), LoadBalancer (distributes traffic across multiple pods), and ExternalName (routes traffic to an external DNS). Kubernetes Ingress can be used to efficiently manage traffic routing within the cluster by reducing cloud costs associated with multiple LoadBalancers.

  9. 9
    Article
    Avatar of dockerDocker·2y

    How to Improve Your DevOps Automation

    DevOps merges development and operations teams to enhance software creation through principles that promote communication, collaboration, and agility across the lifecycle. Automation in DevOps saves time by minimizing manual tasks, enhancing efficiency, and improving code quality. Docker’s built-in automation features, including image access management, automated testing, and security measures, greatly enhance the DevOps process. Integration with Kubernetes further simplifies scaling and orchestration. Future trends point to increased integration with AI and machine learning, driving further process improvements in the DevOps landscape.

  10. 10
    Article
    Avatar of metalbearMetalBear·1y

    There and Back Again: Port Forwarding with mirrord

    Port forwarding via SSH or Kubernetes commands like 'kubectl port-forward' allows secure communication over insecure connections. The new mirrord port-forward command offers more robust and flexible options by leveraging pod permissions, enabling both forward and reverse port forwarding. mirrord improves upon kubectl’s limitations by allowing multiple ports to be forwarded simultaneously and inheriting pod permissions. Detailed steps are provided for setting up port forwarding using mirrord in a Kubernetes environment.

  11. 11
    Article
    Avatar of fermyonFermyon·1y

    Lightweight Kubernetes and Wasm is a Perfect Combo

    Recent advancements have introduced lightweight Kubernetes distributions like Rancher Labs k3s and Canonical's Microk8s. Combining these with WebAssembly-based SpinKube offers high efficiency, especially for lower-powered hardware or virtual machines. SpinKube's serverless design allows apps to start in half a millisecond, making it suitable for high-density deployments, cost-saving on infrequent services, and efficient edge computing.

  12. 12
    Article
    Avatar of communityCommunity Picks·1y

    Simplifying the Transition from Docker Compose to Kubernetes with Compose Bridge

    Transitioning from Docker Compose to Kubernetes can be challenging due to the complexity of restructuring configuration files and managing resources. Compose Bridge simplifies this process by converting Docker Compose configurations into Kubernetes manifests. With Compose Bridge, developers can leverage Kubernetes' orchestration capabilities while maintaining the simplicity of Docker Compose. It offers both GUI integration via Docker Desktop and command-line tools for efficient conversion and deployment. Additionally, it allows extensive customization of the generated manifests to fit specific project needs.

  13. 13
    Article
    Avatar of medium_jsMedium·2y

    Optimizing AWS EKS: How to Use One Load Balancer for Multiple Subdomains

    Using a single AWS Application Load Balancer (ALB) for multiple subdomains in an EKS cluster can significantly reduce costs and simplify management. This method involves configuring Ingress resources to route traffic for different subdomains through one ALB. Key steps include installing the AWS Load Balancer Controller, creating a security group for controlled access, defining Ingress and service configurations, and applying these configurations using `kubectl`. This setup enhances resource efficiency and security, especially when managing internal tools or services within an EKS cluster.

  14. 14
    Article
    Avatar of itnextITNEXT·2y

    How the CKA Certification Has Changed from 2021 to 2024

    The CKA certification has undergone some changes from 2021 to 2024. The cost increased from $299 to $399, and the certification validity period was shortened from three years to two. The exam environment also shifted from running in a standard browser to using the Pearson VUE Secure Browser with a Linux VM. Despite these changes, the content of the exam tasks seems largely unchanged, which disappointed some test-takers. This post shares personal recertification experience, insights, task examples, and practical tips for those preparing for the CKA exam.

  15. 15
    Article
    Avatar of itnextITNEXT·1y

    Advantages of storing configuration in container registries rather than git

    Storing configuration files in container registries offers several advantages over using git, such as better scalability, performance, and security. Container registries support rich metadata, signatures, policy enforcement, and standard APIs, making them highly suitable for managing deployable assets. This approach aligns with current trends towards using universal artifact storage and simplifies the configuration management toolchain.

  16. 16
    Article
    Avatar of grafanaGrafana Labs·2y

    Monitoring Kubernetes: Why traditional techniques aren't enough

    Kubernetes offers significant advantages for large-scale deployment and management of applications, but traditional monitoring techniques fall short. Observability now leverages out-of-the-box solutions like Prometheus, Grafana, and OpenCost to facilitate proactive monitoring, cost management, and better resource allocation. The Kubernetes ecosystem makes it easier for teams to support application performance, though engineers must still be vigilant about costs and reliability.

  17. 17
    Article
    Avatar of justjavaJust Java·2y

    Quarkus: The Supersonic Subatomic Java Framework

    Quarkus is a Kubernetes-native Java framework designed for cloud-native and serverless applications, known for fast startup times and low memory usage. It supports both reactive and imperative programming and has an extensive extension ecosystem. Compared to Spring, Quarkus offers advantages in startup time, memory footprint, and cloud-native design, albeit with a steeper learning curve for Spring developers. The author's experience highlights its suitability for modern, containerized applications, particularly in environments like AWS and Kubernetes.

  18. 18
    Article
    Avatar of devtronDevtron·1y

    What is K3s? A Quick Installation Guide for K3s

    K3s is a lightweight Kubernetes distribution introduced by Rancher. It reduces the complexity and resource usage associated with the traditional Kubernetes (K8s), making it ideal for edge devices and IoT. K3s comes in a single 100MB binary and can quickly establish a production-grade cluster with minimal hardware requirements. It simplifies cluster management with features like automated upgrades and built-in integrations. The post also details the architecture of K3s, comparisons with K8s, and a step-by-step guide for installing K3s on Ubuntu. Additionally, it highlights the use of Devtron's Kubernetes dashboard for better visibility and management of K3s clusters.

  19. 19
    Article
    Avatar of communityCommunity Picks·1y

    We got DDoSed

    The post details a real-world incident where a company faced DDoS attacks and the steps they took to mitigate them. Initially, rate limiting with ingress-nginx failed due to overwhelming traffic. Shifting to Cloudflare, they enabled various rules including Custom, Managed, and Rate Limiting rules to better handle the attacks. They also faced issues like blocking their own IPs and had to optimize settings repeatedly to effectively defend against these attacks. Key insights include the necessity of logging and regularly reviewing requests to avoid false positives.

  20. 20
    Article
    Avatar of faunFaun·1y

    Kubernetes Go-live checklist for your Microservices

    Successfully taking Kubernetes microservices from development to production requires careful planning and configuration. Key steps include calculating per-pod capacity, setting resource requests and limits, configuring autoscaling, ensuring high availability, implementing probes for health checks, and setting up comprehensive monitoring and alerting systems. By following this checklist, you can enhance the stability, scalability, and performance of your applications.

  21. 21
    Article
    Avatar of infoqInfoQ·2y

    Podman Desktop 1.13 Launches with Hyper-V Support and Additional Enhancements

    Podman Desktop 1.13 offers significant enhancements, including support for managing Podman machines with Hyper-V on Windows, a new integrated image search feature, and redesigned empty state pages for containers, images, pods, and Kubernetes. The release also includes a reorganized Kubernetes navigation and an Image Layer Explorer extension. Notably, some users are experiencing issues updating on Windows, requiring manual downloads.

  22. 22
    Article
    Avatar of faunFaun·2y

    Kargo — Next-Gen Continuous Delivery for Kubernetes

    Kargo is a next-generation continuous delivery platform designed for Kubernetes. It builds on GitOps principles to automate and orchestrate application life cycles from development to production. Key features include seamless integration with GitOps, progressive rollouts, and deep integration with Argo CD, ensuring smooth, stage-by-stage deployments and simplified application lifecycle management.

  23. 23
    Article
    Avatar of nordicapisNordic APIs·1y

    5 Tips for Choosing an API Management Tool

    API management tools are crucial for the effective management and security of APIs. Key considerations when choosing an API management tool include freedom of choice for protocols and deployment environments, a security-first mindset, integration with DevOps practices, being Kubernetes-native, and ensuring quick time to value. These tools should support modular architectures and open standards to remain flexible and efficient. A strategic approach to API management can significantly benefit organizations by enhancing API governance, security, and observability.

  24. 24
    Article
    Avatar of faunFaun·1y

    Leveraging ArgoCD ApplicationSet with Plugin Generator to Streamline Multi-Tenant Deployments

    Learn to leverage ArgoCD ApplicationSet with custom generators to streamline multi-tenant deployments. The guide covers setting up a custom generator plugin in Python, configuring an ApplicationSet with selective deployments and Go templating, and managing deprovisioning and selective deployments based on tenant status. Additionally, it offers solutions for passing input parameters to plugins and includes a test plugin response using curl.

  25. 25
    Article
    Avatar of devtronDevtron·2y

    The Complete Guide to CircleCI Pipelines for Kubernetes

    Manually repeating build and test tasks can be time-consuming for developers. CircleCI automates these tasks with its robust CI pipelines, integrating seamlessly with your Git repository. It supports various environments like Linux, MacOS, Windows, and Kubernetes. This guide details how to create CI pipelines in CircleCI to build, test, and deploy applications to Kubernetes, utilizing features like orbs, workflows, and custom scripts. The post also covers the complexities of deploying with CircleCI and suggests considering alternative tools for deployment and management tasks.