
Software Bills of Materials are becoming commonplace as a brick in the wall of code security defense. Now, there's one just for Kubernetes.

Welcome to Kubernets community. The CNCF graduated project.
k9s debug-container plugin
Do you know about using Kubernetes Debug containers? They're really useful for troubleshooting well-built, locked-down images that are running in your cluster. I was thinking it would be nice if k9s had this feature, and lo and behold, it has a plugin! I just had to add that snippet to my ${HOME}/.config/k9s/plugins.yaml
, run k9s, find the pod, press enter to get into the pod's containers, select a container, and press Shift-D. The debug-container plugin uses the nicolaka/netshoot image, which has a bunch of useful tools on it. Easy debugging in k9s!
How Kubernetes impacted my professional life
I got a Kubernetes survey from The Linux Foundation today and it had a question that asked how Kubernetes impacted my professional life. Good question. Here's my answer:
Kubernetes renewed my love for infrastructure and DevOps! As cloud platforms grew more popular, my job function changed; instead of managing services, I was managing "managed" services. I was losing the ability to actually build infrastructure with free, open source software (FOSS), and I was forced to become an expert in proprietary solutions. I switched to FOSS years ago because the idea of writing software for anyone in the world to use and modify - for free - was really inspiring! When I discovered Kubernetes, I was able to work with FOSS infrastructure again! Once I have compute, storage, and networking from the cloud platform, I can install Kubernetes, and actually manage my own services again!
Helm feels utterly broken, am I the only one?
I've been working with Kubernetes since 2015 and I've mangled with handcrafted manifests including almost duplicate manifests for staging/production environments, played around with stuff like Cue, built lots glue (mostly shell script) to automate manifest-handling and -generation and I also enjoy parts of Kustomize. When Helm started to appear it seemed like a terrible hack, especially since it came with the Tiller-dependency to handle Helm-managed state-changes inside of the clusters. And while they dropped Tiller (thankfully), I still haven't made my peace with Helm.
Go-templating it awful to read, a lot of Helm charts don't really work out of the box, charts can be fed values that aren't shown via helm show values ./chart
, debugging HelmChart $namespace/$release-$chartname is not ready
involves going over multiple logs spread over different parts of the cluster and I could go on and on. And yet, almost every project that goes beyond offering `Dockerfile
Software Bills of Materials are becoming commonplace as a brick in the wall of code security defense. Now, there's one just for Kubernetes.
The KBOM project provides an initial specification in JSON and has been constructed for extensibilty across various cloud service providers (CSPs) as well as DIY Kubernetes.
Asking for advice: Releasing a custom rolling immutable simple distro for Kubernetes
Hello world!
I want to release to internet my custom immutable rolling-release extreme-simple Linux distribution for Kubernetes deployments.
I was using this distribution for about the last 6 years on production environments (currently used by a few startups and two country's public services). I really think that it could be stable enough to be public published to internet before 2024.
I'm asking for advice before the public release, as licensing, community building, etc.
What's the best way for an experienced engineer to learn Kubernetes at depth?
Looking for the best way to learn kubernetes, given that I have plenty of years of engineering (Java, python) and a solid experience with AWS.
any format works - paid/free courses, working through articles, getting started guides, etc..
Understanding Kubernetes Pods
In this beginner-friendly guide, we will explore the concept of static pods, their significance compared to regular pods, how they work.
For benefit of anyone who needs to go back to the basics. Certainly a need I sense in the Kubernetes community around me.
Longhorn: Cloud native distributed block storage for Kubernetes
Tried it out in the past couple of days to manage k8s volumes and backups on s3 and it works surprisingly well out of the box. Context: k3s running on multiple raspberry pi
KubeCon + CloudNative North America 2022
CNCF has posted their playlist from all the talks at the 2022 conference in Detroit
Security company Qualys is partnering with Red Hat to bring built-in Cloud Agent security to Red Hat Enterprise Linux CoreOS and Red Hat OpenShift.
Kubernetes Ingress Controllers Compared
Kubernetes Ingress Controllers Compared. warning takes you to Google docs