This article explores 5 strategies for addressing private IPv4 shortage in Amazon EKS.

Strategies include tweaking VPC CNI settings, using subnet CIDR reservation, custom networking with internal SNAT, private NAT gateways, and transitioning to IPv6.

More:

In this KubeFM episode, Stéphane shares his journey of migrating, optimizing and scaling Jenkins on Kubernetes.

He discusses the technical challenges, solutions, and strategies employed.

You will learn:

- How Jenkins on Kubernetes was scaled to handle 10,000 weekly builds.
- How they started their journey in 2015 and how the cluster has evolved in the past nine years.
- The challenges of managing builds in Jenkins: Docker in Docker, Docker out of Docker and KubeVirt.
- The lessons learned in created ephemeral environments.

Watch (or listen to) it here:

? Many thanks to CloudBees for supporting our work and sponsoring this episode. Make sure to check out their video on how to use pods as Jenkins agents

With "The barbarian" Farrell

This week's 6 best Kubernetes Platform Engineer jobs are:

Platform Engineer with OpenAI
? $245K to $385K a year
???‍♂️? San Francisco, CA, USA
→

Platform Engineer with Zoox
? $203K to $293K a year
???‍♂️? Foster City, CA, USA
→

Platform Engineer with Primer
? $225K to $250K a year
? From the office in San Francisco, CA, USA
→

Platform Engineer with Match Group
? $213K to $255.5K a year
???‍♂️? New York, NY, USA
→

Platform Engineer with Tecton
? $189K to $237K a year
???‍♂️? San Francisco, CA, USA
→

? Browse all 399 Kubernetes jobs on Kube Careers

This article explores Kubernetes requests implementation.

It highlights the significance of system-reserved and kube-reserved flags in CPU and Memory allocation and the role of cgroups in managing resources.

More:

In this article, you will learn about Istio AuthorizationPolicies and how they function, as well as use an alternative approach to declare them using IBAC (Intent-Based Access Control)

More:

This week's 6 Kubernetes junior jobs are:

Software Engineer with Verkada
? $120K to $280K a year
? From the office in San Mateo, CA, USA
→

Machine Learning Engineer with Extropic
? $75K to $150K a year
???‍♂️? San Francisco, CA, USA
→

Software Engineer with Air Space Intelligence
? $49.64K to $106.25K a year
? From the office in Gdańsk, PL
→

Software Engineer with Mercari
? $30.49K to $40.25K a year
?‍? Remote from Japan
→

Software Engineer with Sezzle
? $18K to $36K a year
?‍? Remote from Peru
→

? Browse all 446 Kubernetes jobs on Kube Careers

The article discusses setting up a per-pod PID limit on AWS EKS clusters using the official EKS terraform module.

It explains why limiting PIDs is necessary, explains how to check your current pod PID limit, and provides two implementation options.

More:

This week's 6 Kubernetes junior jobs are:

Software Engineer with Verkada
? $120K to $280K a year
? From the office in San Mateo, CA, USA
→

Machine Learning Engineer with Extropic
? $75K to $150K a year
???‍♂️? San Francisco, CA, USA
→

Software Engineer with Air Space Intelligence
? $49.94K to $106.89K a year
? From the office in Gdańsk, PL
→

Software Engineer with Mercari
? $30.61K to $40.41K a year
?‍? Remote from Japan
→

Software Engineer with Sezzle
? $18K to $36K a year
?‍? Remote from Peru
→

? Browse all 423 Kubernetes jobs on Kube Careers

Edward Vielmetti, Developer Partner Manager at Equinix, shares insights on the importance of hands-on experience with Kubernetes, especially on unusual hardware.

Ed advocates for maintaining a home lab to build, break, and fix systems, as it provides invaluable learning opportunities.

Watch the full interview:

This interview is a reaction to Mathias's episode

Container image hardening involves adhering to best practices, monitoring vulnerabilities, and enhancing container security.

This article provides guidelines to mitigate risks in running Docker containers in production.

More:

This article dives into requests & limits and argues that CPU limits are only for preventing the use of CPU leftovers, not to prevent noisy neighbours or to protect your nodes from overallocation.

More:

This week on the Learn Kubernetes Weekly:

? Moving up the stack
✂️ Cut container startup time
? Abusing Distroless
? Hacking Kubernetes in AWS
? 2vCPU app run faster in a VM than in a container

Read it now:

Pluto is a utility to help users find deprecated Kubernetes API versions in their code repositories and their helm releases.

More:

KBOM (Kubernetes Bill of Materials) is a CLI tool that can generate a software bill of materials for your Kubernetes cluster.

More:

This article explores the performance of running apps in VMs versus containers.

It delves into the impact of CPU limits, thread usage, and CPU distribution, offering insights on how to avoid CPU throttling and improve application performance.

More:

In this KubeFM episode, Alexander Block delves into the intricacies of Kubernetes templating and deployment tools, sharing his journey from frustration with existing solutions to creating his tool, kluctl.

Alex also discusses the challenges and solutions in Kubernetes templating and deployment, emphasizing the need for more adaptable tools in the Kubernetes ecosystem.

You will learn:

- The fundamental flaws of Helm and how they impact Kubernetes deployments and tools packaging.
- How tools such as Kustomize, CUE, jsonnet are only a partial solution to templating.
- Alternatives to Helm and the future of Kubernetes resource templating and distribution.

Watch (or listen to) it here:

This week's 6 best Kubernetes Platform Engineer jobs are:

Platform Engineer with OpenAI
? $300K to $450K a year
? From the office in San Francisco, CA, USA
→

Platform Engineer with Adept
? $175K to $350K a year
???‍♂️? San Francisco, CA, USA
→

Platform Engineer with Garner Health
? $240K to $260K a year
?‍? Remote from the United States
→

Platform Engineer with Zoox
? $203K to $293K a year
???‍♂️? Foster City, CA, USA
→

Platform Engineer with Primer
? $225K to $250K a year
? From the office in San Francisco, CA, USA
→

? Browse all 449 Kubernetes jobs on Kube Careers

democratic-csi implements the CSI spec providing storage for various container orchestration systems such as Kubernetes.

The current focus is providing storage via iscsi/nfs from zfs-based storage systems predominantly FreeNAS/TrueNAS and ZoL on Ubuntu.

More:

This article teaches how to use the Secrets Store CSI driver to mount secrets to Kubernetes pods and covers how to configure and simulate the CSI driver failover feature.

More: