Published inDev Genius·PinnedMember-onlyThe ABCs of Kubernetes: A Quick-Start Guide to Container OrchestrationKubernetes — A data center within a data center. Before diving into the world of Kubernetes, it’s important to understand the concept of container orchestration. Container Orchestration Container orchestration is the process of managing and coordinating the deployment, scaling, and maintenance of containerized applications. …Kubernetes6 min readKubernetes6 min read
Published inDevOps.dev·Nov 5Member-onlyMonitor K8s and Application metrics using PrometheusTo troubleshoot an issue, you must know what is happening under the hood. Introduction Observability from SRE (Site Reliability Engineering) terms means, gaining in-depth details about the application and the underlying infrastructure to understand how they operate and how can teams use these details to troubleshoot the issues. The details are…Observability6 min readObservability6 min read
Nov 3Member-onlyDifferent ways to create Kubernetes Cluster — minikubeKubernets (K8s) can run on local systems, on the cloud, etc. Let's explore more on this. Create Kubernetes Cluster using minikube ← Current Blog Create Kubernetes Cluster using kind Create Kubernetes Cluster using kubeadm Create Managed Kubernetes Cluster on GCP, AWS, Azure Introduction In this blog, I will go through the steps to create a K8s (Kubernetes) cluster on…Kubernetes3 min readKubernetes3 min read
Sep 29Member-onlyK8s Security Bit by Bit #13: System Hardening — SSH HardeningSSH hardening is crucial to prevent attackers from compromising the servers in the network. Topics discussed in this post Basics of SSH Passwordless SSH Login Hardening SSh Basics of SSH SSH aka Secure Shell is used to access remote Linux machines It creates an encrypted tunnel between the SSH client and the SSH…Kubernetes2 min readKubernetes2 min read
Sep 14Member-onlyK8s Security Bit by Bit #12: System Hardening — Control Access to NodeSecuring the infrastructure on which the K8s run is critical in minimizing the attack surface. Let us discuss some of the approaches in this blog. Topics discussed in this post Some important concepts and commands Some of the approaches to limit access to Nodes that run K8s Some important concepts and commands There are four…Kubernetes2 min readKubernetes2 min read
Sep 12Member-onlyK8s Security Bit by Bit #11: Verifying K8s binaries before deployingWhat if you deploy unsafe binaries of the K8s components while creating the cluster? Topics discussed in this post Binaries — Why, What? Verify the binaries Binaries — Why, What? Compressed (usually tar.gz) files provided by K8s to download and install K8s These binaries are used to build a K8s cluster As these files…Kubernetes2 min readKubernetes2 min read
Sep 9Member-onlyK8s Security Bit by Bit #10: Control traffic to the pods — Network PoliciesThe default network policy for pods is scary from a security point of view. Do you know why? Topics discussed in this post Some important things to know about pod networking Network Policy Some important things to know about pod networking Pod networking is implemented by 3rd party plugins. K8s only defines pod networking principles (for eg: each…Kubernetes3 min readKubernetes3 min read
Sep 8Member-onlyK8s Security Bit by Bit #9: Securing K8s DashboardWhy securing the K8s dashboard is significant to minimize the attack surface? Topics discussed in this post Some facts about the K8s dashboard Authentication and Authorization to K8s dashboard Some facts about the K8s dashboard K8s dashboard not only provides an overview of the cluster but also operations like creating, updating, and deleting the K8s objects…Kubernetes3 min readKubernetes3 min read
Sep 4Member-onlyK8s Security Bit by Bit #8: Kubelet Authentication and AuthorizationThe default security configurations of the kubelet may not meet best-practice standards. Let’s enhance it to bolster the kubelet’s security. Topics discussed in this post Important points about default kubelet configuration Reason to secure kubelet Kubelet Authentication Kubelet Authorization Important points about kubelet and default config of kubelet kubelet is an agent that runs on worker nodes.Kubernetes3 min readKubernetes3 min read
Sep 3Member-onlyK8s Security Bit by Bit #7: Admission ControlNow the user “monkeyDLuffy” is Authenticated (AuthN) to the K8s cluster and Authorized (AuthZ) to create pods. But he ends up with this error 😢 : ‘denied the request: Pod “mypod-name” is configured to run as root (UID: 0)’. Let us see why is monkeyDLuffy facing this error. Topics discussed…Kubernetes3 min readKubernetes3 min read
