Kubernetes Office Hours for Feb 2020 (New US West session too!)

[castrojo]

Hear ye, hear ye! This upcoming Wednesday is time for the Kubernetes Office hours. This is our monthly livestream where we have a panel of Kubernetes folks try to answer as many user questions as possible. It’s always on the third Wednesday of the month.

Thanks to a whole bunch of new volunteers we are now able to hold TWO sessions, one for the EU timezone and one for the West Coast US. Those of us in the middle can just go to both.

As always feel free to post questions in this thread, and I’ll also be publishing the list of links/notes from each episode in this thread, so even if you don’t listen in you can check out our notes. Feel free to hang out in our slack channel before, during, and after the stream!

Here are the livestreams:

EU:

URLs from the EU session

Panelists: Vamshi Samuldrala, Jeffrey Sica, Marky Jackson, Tunder Olu-Isa, Pierre Humberdroz, Povilas Versockas, Chris Carty, and Jorge Castro

• Kubespray

  • https://github.com/kubernetes-sigs/kubespray
  • https://cluster-api.sigs.k8s.io/user/quick-start.html
  • https://twitter.com/JimmAngel/status/1220049182045736960

• https://github.com/ahmetb/kubectx

  • Jeef pro tip “Aliasing kubectx and kubens to kctx and kns is so nice.”
  • Configure Access to Multiple Clusters - Kubernetes
  • Bob protip: Check out krew config_cleanup

• Single node storage

  • https://gist.github.com/smola/020b4bde91195b9c530a1540ffdf852e
  • https://netapp-trident.readthedocs.io/en/stable-v20.01/
  • https://github.com/longhorn/longhorn
    • https://www.cncf.io/webinars/kubernetes-storage-in-action/

• K8s dashboards

  • https://github.com/hjacobs/kube-ops-view
  • https://octant.dev/
  • https://rancher.com/
  • https://github.com/weaveworks/scope

• Calico Networking

  • https://docs.projectcalico.org/v3.6/networking/changing-ip-pools
  • https://github.com/intel/multus-cni
  • https://docs.projectcalico.org/v3.9/reference/architecture/data-path

• Figuring out how to pack more stuff on nodes/rebalance

  • https://github.com/ybhatnagar/kube-tetris
  • https://github.com/kubernetes-sigs/descheduler
  • Advanced Scheduling in Kubernetes - Kubernetes

• Multi team cluster usage

  • https://github.com/fluxcd/multi-tenancy
  • https://github.com/open-policy-agent/gatekeeper
  • https://www.tigera.io/blog/enforcing-network-security-policies-with-gitops-part-1/
  • https://www.tigera.io/blog/decentralized-calico-network-security-policy-deployment-for-gitops-part2/
  • https://github.com/instrumenta/conftest
  • https://kubeval.instrumenta.dev/

Jeremy has some interesting links he wanted to share with the group:
Live debugging in k8s, https://www.telepresence.io/
Security best practices, https://kubesec.io/
Right sizing your pods, https://github.com/FairwindsOps/goldilocks

West Coast US:

Notes from the West Coast Edition

Panelists: Vamshi Samuldrala, Dave Strebel, Pierre Humberdroz, Marky Jackson, Monica Rodriguez, Jeremy Rickard, and Jorge Castro

• https://old.reddit.com/r/kubernetes/comments/f604kd/unexpected_rebalancing_with_websocket_connections/

  • https://kubernetes.github.io/ingress-nginx/how-it-works/#when-a-reload-is-required
  • https://github.com/kubernetes/ingress-nginx/blob/master/Changelog.md#0240
  • John has confirmed that upgrading nginx fixed this issue. Shoutout to Manuel Alejandro de Brito Fontes for this one!

• Dave Strebel wrote a book: https://www.amazon.com/Kubernetes-Best-Practices-Blueprints-Applications/dp/1492056472

• https://github.com/timescale/timescaledb-kubernetes/blob/master/charts/timescaledb-single/templates/svc-timescaledb.yaml

• https://docs.min.io/docs/deploy-minio-on-kubernetes.html

• Pod Priority and Preemption - Kubernetes

• Testing archives: https://kubedex.com/collection/testing/

• Tools for local dev/deployment

  • https://codefresh.io/kubernetes-tutorial/local-kubernetes-linux-minikube-vs-microk8s/
  • https://github.com/kubernetes-sigs/kind
  • https://github.com/rancher/rke

• Tools for secrets

  • https://www.vaultproject.io/
  • https://github.com/bitnami-labs/sealed-secrets
  • https://www.hashicorp.com/blog/injecting-vault-secrets-into-kubernetes-pods-via-a-sidecar/
  • https://github.com/godaddy/kubernetes-external-secrets
  • https://github.com/deislabs/secrets-store-csi-driver

• Certs:

  • https://jvns.ca/blog/2017/08/05/how-kubernetes-certificates-work/
  • https://github.com/cert-manager/website/blob/477e48c89e512baeddcf936fc8ce86531d999a16/content/en/docs/release-notes/release-notes-0.7.md#new-cainjector-controller
  • https://cert-manager.io/docs/concepts/ca-injector/

• Debugging Java apps

  • https://danlebrero.com/2018/11/20/how-to-do-java-jvm-heapdump-in-kubernetes/
  • Container Lifecycle Hooks - Kubernetes

More info here:

• https://github.com/kubernetes/community/blob/master/events/office-hours.md

[castrojo]

Alright everyone, today is the day! We’ll be going live in about an hour from this post. We have two sessions today, as always feel free to drop by the slack channel!