Kubernetes

This is official Amazon Web Services (AWS) documentation for Amazon Elastic Kubernetes Service (Amazon EKS). Amazon EKS is a managed service that makes it easy for you to run Kubernetes on AWS without needing to install and operate your own Kubernetes clusters. Kubernetes is an open-source system for automating the deployment, scaling, and management of containerized applications.

This post is contributed by Chris Foote, Sr. EC2 Spot Specialist Solutions Architect Running your Kubernetes and containerized workloads on Amazon EC2 Spot Instances is a great way to save costs. Kubernetes is a popular open-source container management system that allows you to deploy and manage containerized applications at scale. AWS makes it easy to run […]

This is official Amazon Web Services (AWS) documentation for Amazon Elastic Kubernetes Service (Amazon EKS). Amazon EKS is a managed service that makes it easy for you to run Kubernetes on AWS without needing to install and operate your own Kubernetes clusters. Kubernetes is an open-source system for automating the deployment, scaling, and management of containerized applications.

Many developers use Docker the old-fashioned way -- a docker build and a docker run. Some non-obvious ways to use Docker. As a compiler. I gave a talk at DockerCon back in 2019 about the potential to use Docker as a compiler, and the idea is finally coming to fruition.

Concepts and resources behind networking in Kubernetes.

p We've all been there - it's frustrating seeing deletion of Kubernetes resource getting stuck, hang or take a very long time. You might have i"solved"...

For every deploy, scale down event, or pod termination, users of GitLab's Pages service were experiencing 502 errors. This explains how we found the root cause and rolled out a fix for it.

Configuration affecting network reachability of a sidecar.

Amazon Elastic Kubernetes Service (Amazon EKS) managed service makes it easy to run Kubernetes on AWS without needing to install, operate, and maintain your own Kubernetes control plane. When Amazon EKS was made generally available in 2018, it supported self-managed node groups. With self-managed node groups, customers are responsible for configuring the Amazon Elastic Compute […]

Me writing YAMLModern infrastructure work is, by many measures, better than it has ever been. We live in a time when a lot of the routine daily problems have been automated away by cloud providers, tooling or just improved workflows. However in the place of watching OS upgrades has come

Threat Modeling Process on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software.

Mac Chaffee's tech blog

Configure the Secrets Store CSI driver with HashiCorp Vault to securely inject secrets into Flux or other GitOps tools on Kubernetes.

Overview Karpenter is a high-performance Kubernetes cluster autoscaler that can help you autoscale your groupless nodes by letting you schedule layered constraints using the Provisioner API. Karpenter also makes node upgrades easy through the node expiry TTL value ttlSecondsUntilExpired. This blog post will walk you through all of the steps to make this possible, and […]

DockerSlim (docker-slim): Don't change anything in your Docker container image and minify it by up to 30x (and for compiled languages even more) making it secure too! (free and open source)...

Just-in-time Nodes for Any Kubernetes Cluster

GitHub Gist: instantly share code, notes, and snippets.

You don't need `lifecycle: { preStop: { exec: { command: ["sleep", "30"] } } }` - foriequal0/pod-graceful-drain: You don't need `lifecycle: { pre...

You can now deploy managed ClickHouse on ARM instances with Altinity.Cloud. Why should you care about ARM? What does ARM support mean? What’s the process? Learn here.

Our learnings about Istio’s packet flow and how it manages the immense traffic.

**HELP WANTED**. my free machine will be recycled next Month (April, 2022). could someone continue build this until official support? - querycap/istio: **HELP WANTED**. my free machine will be recy...

An engineer's journal on the experiences with service mesh

Describe the feature request It should be possible to enable gzip compression for the Envoy stats endpoint (http://127.0.0.1:15090/stats/prometheus) to save some bandwidth. Currently it does not se...