Configure the Secrets Store CSI driver with HashiCorp Vault to securely inject secrets into Flux or other GitOps tools on Kubernetes.

Overview Karpenter is a high-performance Kubernetes cluster autoscaler that can help you autoscale your groupless nodes by letting you schedule layered constraints using the Provisioner API. Karpenter also makes node upgrades easy through the node expiry TTL value ttlSecondsUntilExpired. This blog post will walk you through all of the steps to make this possible, and […]

DockerSlim (docker-slim): Don't change anything in your Docker container image and minify it by up to 30x (and for compiled languages even more) making it secure too! (free and open source)...

Just-in-time Nodes for Any Kubernetes Cluster

GitHub Gist: instantly share code, notes, and snippets.

You don't need `lifecycle: { preStop: { exec: { command: ["sleep", "30"] } } }` - foriequal0/pod-graceful-drain: You don't need `lifecycle: { pre...

You can now deploy managed ClickHouse on ARM instances with Altinity.Cloud. Why should you care about ARM? What does ARM support mean? What’s the process? Learn here.

Our learnings about Istio’s packet flow and how it manages the immense traffic.

**HELP WANTED**. my free machine will be recycled next Month (April, 2022). could someone continue build this until official support? - querycap/istio: **HELP WANTED**. my free machine will be recy...

An engineer's journal on the experiences with service mesh

FEATURE STATE: Kubernetes v1.21 [deprecated] Note: This feature, specifically the alpha topologyKeys API, is deprecated since Kubernetes v1.21. Topology Aware Hints, introduced in Kubernetes v1.21, provide similar functionality. Service Topology enables a service to route traffic based upon the Node topology of the cluster. For example, a service can specify that traffic be preferentially routed to endpoints that are on the same Node as the client, or in the same availability zone.

FEATURE STATE: Kubernetes v1.23 [beta] Topology Aware Hints enable topology aware routing by including suggestions for how clients should consume endpoints. This approach adds metadata to enable consumers of EndpointSlice and / or Endpoints objects, so that traffic to those network endpoints can be routed closer to where it originated. For example, you can route traffic within a locality to reduce costs, or to improve network performance. Motivation Kubernetes clusters are increasingly deployed in multi-zone environments.

Easily check your clusters for use of deprecated APIs - doitintl/kube-no-trouble: Easily check your clusters for use of deprecated APIs

As everyone knows istio is a great service mesh. The power that it adds to kubernetes make it where I would never even consider running k8…

Overview Karpenter is a dynamic, high performance cluster auto scaling solution for the Kubernetes platform introduced at re:Invent 2021. Customers choose an auto scaling solution for a number of reasons, including improving the high availability and reliability of their workloads at the same reduced costs. With the introduction of Amazon EC2 Spot Instances, customers can […]

The official Kubernetes Documentary Part 1. Inspired by the open source success of Docker in 2013 and seeing the need for innovation in the area of large-s...

Networking plugin repository for pod networking in Kubernetes using Elastic Network Interfaces on AWS - amazon-vpc-cni-k8s/eni-and-ip-target.md at master · aws/amazon-vpc-cni-k8s

*cache* enables a frontend cache.

Kubernetes creates DNS records for services and pods. You can contact services with consistent DNS names instead of IP addresses. Introduction Kubernetes DNS schedules a DNS Pod and Service on the cluster, and configures the kubelets to tell individual containers to use the DNS Service's IP to resolve DNS names. Every Service defined in the cluster (including the DNS server itself) is assigned a DNS name. By default, a client Pod's DNS search list includes the Pod's own namespace and the cluster's default domain.

FEATURE STATE: Kubernetes v1.18 [stable] This page provides an overview of NodeLocal DNSCache feature in Kubernetes. Before you begin You need to have a Kubernetes cluster, and the kubectl command-line tool must be configured to communicate with your cluster. It is recommended to run this tutorial on a cluster with at least two nodes that are not acting as control plane hosts. If you do not already have a cluster, you can create one by using minikube or you can use one of these Kubernetes playgrounds:

Networking plugin repository for pod networking in Kubernetes using Elastic Network Interfaces on AWS - amazon-vpc-cni-k8s/troubleshooting.md at master · aws/amazon-vpc-cni-k8s

generator object sync_do_slice at 0x7f9414464190...

When building Docker containers, you should be aware of the PID 1 zombie reaping problem. That problem can cause unexpected and obscure-looking issues when you least expect it. This article explains the PID 1 problem, explains how you can solve it, and presents a pre-built solution that you can use:

What is a container runtime shim? Why the shim is needed? How to use OCI container runtime (runc) in command line and from code.

This post explains the function that runtimes have in the process of designing, deploying, and maintaining a secure containerized environment.