Canary-релизы в Kubernetes на базе Ingress-NGINX Controller

Canary-релизы достаточно просто реализуются на уровне Ingress-контроллеров. В статье рассмотрен практический пример настройки таких релизов в Kubernetes на базе Ingress NGINX Controller.

👉 https://habr.com/ru/company/flant/blog/697030/

Про другие стратегии деплоя можете прочитать в этой статье

#kubernetes #flant

Продолжаем разбирать стратегии деплоя и дегустируем Argo Rollouts

🔹 Часть 1
🔹 Часть 2

#kubernetes #argo

How to use Git rebase in real life

👉 https://about.gitlab.com/blog/2022/11/08/rebase-in-real-life/

Take advantage of Git rebase

👉 https://about.gitlab.com/blog/2022/10/06/take-advantage-of-git-rebase/

#git

Онлайн-митап "Российский Kubernetes, какой он? Знакомьтесь, платформа Deckhouse"

👉 https://www.youtube.com/watch?v=4-gwvqXZC8Q&ab_channel=Crocincor

#наширебята

Choosing an Optimal Kubernetes Worker Node Size

👉 https://www.argonaut.dev/blog/optimal-k8s-worker-node-size

#kubernetes

Kubernetes Security Profiles Operator

The Security Profiles Operator (SPO) is an out-of-tree Kubernetes enhancement which aims to make it easier for users to use SELinux, seccomp and AppArmor in Kubernetes clusters

👉 https://github.com/kubernetes-sigs/security-profiles-operator

#kubernetes #security

kubectl-ice is a kubectl plugin that allows you to easily view advanced configuration of all containers that are running inside pods to assist in troubleshooting and information gathering

👉 https://github.com/NimbleArchitect/kubectl-ice

#kubernetes #kubectl

Enforce Audit Policy in Kubernetes (k8s)

Do you want to keep a check on your Kubernetes production-grade environment for the following activities:
🔹 Who logged in to your Kubernetes Cluster?
🔹 Which service account or user accessed what resource(s) in the cluster?
🔹 Who created the secrets or config maps?
🔹 Who read the secrets from ETCD, and many more?

Then enforcing audit policy in Kubernetes is the right choice for you.

👉 https://levelup.gitconnected.com/enforce-audit-policy-in-kubernetes-k8s-34e504733300

#kubernetes #security

Awesome Kubernetes (K8s) Security
A curated list for Awesome Kubernetes Security resources

👉 https://github.com/magnologan/awesome-k8s-security

#kubernetes #security

Новый экзамен Kyverno Fundamentals Certification

Сейчас наверно только ленивый не придумывает новые сертификации. С другой стороны если она бесплатная, то почему бы не получить бейдж 🙂

👉 https://learn.nirmata.com/courses/kyverno-fundamentals-certification

Тем более, что есть бесплатные курсы для подготовки
🔹 Introduction to Kyverno
🔹 Kyverno In Production

#kubernetes #kyverno #exam

Решил продолжить пополнять список бесплатных сертификаций. На этот раз халява от New Relic:

🔹 Full Stack Observability Exam
🔹 Programmability Certification

Братцы, делитесь в комментариях бесплатными курсами. Стоят они потраченного времени или нет?

#monitoring #newrelic #exam

Kustomize Best Practices

Part 1

🔹 If something is the same between multiple overlays, consider putting it in your base
🔹 Use multiple bases to compose different application components
🔹 Use remote bases

Part 2

🔹 Overlays can be a base for other overlays
🔹 Consider disabling name suffix hashing for secrets and configMaps
🔹 Test before patching list items with JSON6902 to make sure that item position within the list hasn’t changed

#kustomize

Братцы, мемасик вам в коллекцию

How Consul and Kubernetes Work Together
Webinar + Transcript

🔹 Discovering Services Across Multiple Kubernetes Clusters and Services Running Outside Kubernetes  
🔹 Consul as a Universal Service Discovery Layer
🔹 Consul and Service Mesh
🔹 Layer 7 Traffic Management
🔹 Enabling More Observability
🔹 Integrating Consul and Terraform

👉 https://www.hashicorp.com/resources/whiteboard-how-consul-and-kubernetes-work-together

#consul #kubernetes

Load balancing and scaling long-lived connections in Kubernetes

Kubernetes doesn't load balance long-lived connections, and some Pods might receive more requests than others. If you're using HTTP/2, gRPC, RSockets, AMQP or any other long-lived connection such as a database connection, you might want to consider client-side load balancing.

👉 https://learnk8s.io/kubernetes-long-lived-connections

#kubernetes

Policy As Code on Kubernetes With Kyverno
Enforce Kubernetes best practices for your organisation with CRD

👉 https://betterprogramming.pub/policy-as-code-on-kubernetes-with-kyverno-b144749f144

#kyverno #kubernetes

KubeDay Japan 2022

Наиболее интересные выступления на наш взгляд? А что, братцы, заинтересовало вас?

🔹 Hello eBPF! Goodbye Sidecars?
🔹 Autoscale Your on-Premises Bare Metal Kubernetes Clusters
🔹 A New Way to Deploy Pod Security Policies Using Kyverno
🔹 Generalizing Policy-as-Code for Compliance Posture Management on Multi-Cloud Infrastructure
🔹 Distributed Tracing Integration with OpenTelemetry and Knative

Записи остальных выступлений в плейлисте

👉 https://www.youtube.com/playlist?list=PLj6h78yzYM2Paf46ZWrXTqK9NHWjtMxhc

#kubernetes #kubeday

Jaeger для трассировки в микросервисной архитектуре
Воркшоп от Яндекс Практикум

👉 https://youtu.be/49fA7gQsDwA