KubeFM

In this KubeFM episode, Faris shares his experience managing CoreDNS and scaling Kubernetes clusters with 900 nodes and 15k pods. He shares the challenges and solutions encountered during an incident, providing valuable insights into maintaining a robust Kubernetes environment. You will learn: The importance of scaling the Kubernetes control plane for large clusters. Strategies for optimizing Core...

In this KubeFM episode, Mircea shares his journey of migrating a home lab to Kubernetes , specifically choosing Talos over other operating systems like Ubuntu, Flatcar, or Bottlerocket. Mircea also discusses his decision-making process and experiences in setting up and optimizing his Kubernetes home lab. You will learn: What is Talos Linux and how it compares to other operating systems. The challe...

With a passion for security and a knack for troubleshooting, Jen discusses the critical role of network policies in Kubernetes security, the complexities involved in their implementation, and the balance between security and manageability. She also covers the importance of Custom Resource Definitions and shares her perspective on emerging Kubernetes tools. In this KubeFM episode, you will learn: T...

In this KubeFM episode, Alexander Block delves into the intricacies of Kubernetes templating and deployment tools, sharing his journey from frustration with existing solutions to creating his tool, kluctl. Alex also discusses the challenges and solutions in Kubernetes templating and deployment, emphasizing the need for more adaptable tools in the Kubernetes ecosystem. You will learn: The fundament...

With the rapid pace of the cloud-native ecosystem, staying current with Kubernetes updates and managing upgrades becomes a daunting task for many organizations. In this KubeFM episode, Mat discusses the necessity of long-term support for Kubernetes and explores the intricacies of managing Kubernetes upgrades in a fast-evolving landscape. You will learn: The importance of long-term support (LTS) fo...

Ensuring the repeatability of your infrastructure is a crucial aspect of managing Kubernetes clusters. This allows you to swiftly tear down and set up a new one, a practice that is quite handy. However, there are exceptional circumstances when your cluster becomes more than a disposable tool. Dan shared, "A Kubernetes cluster will be treated as disposable until you deploy ingress, and then it...

Service meshes and the community's opinion of them have changed drastically over the years. From being perceived as unnecessary, complicated and bloated, they matured into security and observability powerhouses (while still retaining much of their complexity). In this KubeFM episode, William deep dives into the world of service meshes and explains a few of the technical choices and trade-offs of s...

Can you run databases on Kubernetes and survive to tell the story? Or should you refrain from running stateful workloads as much as possible? In this KubeFM episode, Steven argues that you should run databases on Kubernetes. He also goes further and demonstrates how to build your custom operator to manage your database. Listen to the episode and learn how: You can use Kubebuilder and the Operator...

Structured Authentication Config is the most significant Kubernetes authentication system update in the last six years. In this KubeFM episode, Maksim explains how this is going to affect you: You can use multiple authentication providers simultaneously (e.g., Okta, Keycloak, GitLab) — no need for Dex. You can change the configuration dynamically without restarting the API server. You can use any...

Is sharing a cluster with multiple tenants worth it? Should you share or have a single dedicated cluster per team? In this KubeFM episode, Artem revisits his journey into Kubernetes multi-tenancy and discusses how the landscapes (and opinions) on multi-tenancy have changed over the years. Here's what you will learn: The trade-offs of multi-tenancy and the tooling necessary to make it happen (e.g....

How hard could it be to debug a network issue where pod connections time out? It could take weeks if you are (un)fortunate like Alex. But Alex and his team didn't despair and found strength in adversity while learning several Kubernetes networking and kubespray lessons. In this KubeFM episode, you'll follow their journey and learn: How a simple connection refused led to debugging the kernel syscal...

Pod Topology Spread Constraints is a convenient feature to control how pods are spread across your cluster among failure domains such as regions, zones, nodes, etc. You can also choose the pod distribution (skew), what happens when the constraint is unfulfillable (schedule anyway vs don't) and the interaction with pod affinity and taints. It's a great and straightforward feature, so what could pos...

On average, Kubernetes nodes running on ARM instances are 20% cheaper than their AMD counterpart. Optimising your cloud bill is tempting, but how do you seamlessly migrate existing workloads to a different architecture? And how do you do it at scale, with more than 4000 engineers and 30 clusters in 4 regions? In this episode of KubeFM, Thibault and Miguel explain how Adevinta built an internal pla...

The best way to learn something is to break it or to build it yourself. And that's precisely what Luca did to understand how Linux containers (and Docker) work: he built his own, Barco. In this episode of KubeFM, you will learn: Why Linux containers "don't exist" but are the product of several Linux features you can put together and configure properly to get what we know as containers. H...

What if Kubernetes was so easy to install and manage to be foolproof? In this KubeFM, Mat argues that GKE is the only Kubernetes managed service that offers a beginner-friendly and thought-through experience in running a Kubernetes cluster. Follow Mat's journey to AKS, GKE and EKS and learn: How GKE autopilot can help you optimize costs and reduce underutilized node resources. How the GKE containe...

Network Policy usage is inverted. It's easier to list the services that you want to connect to, but Network Policy forces you to list all clients that can connect to your pod. How would you even know that another team plans to connect your apps? But if Network Policy is not the right tool, then what should you use? In this KubeFM podcast, you will explore: How Network Policies are not as bad as yo...

Helm is a popular tool for templating and packaging Kubernetes resources, but does it mean it's the best? In this episode of KubeFM, Jacco draws a parallel between Helm and PHP and the similarity in which both tools became a success despite their focus on templating strings. You will also learn: Helm's flaws and how you can avoid them. Alternative tools that can (partially) replace Helm. How to ma...

By default, Kubernetes Secrets are not encrypted; values are merely base64 encoded. And this is fine — at least, this is what Mac argues in this episode of KubeFM. Mac says it all comes down to thinking strategically about security and where the Secrets could be leaked. In this episode, you will learn: How to define a threat model to inform your security posture and mitigations. How Kubernetes Sec...

What does it take to build a Kubernetes cluster on bare metal? In this episode of KubeFM, you will learn how to plan and execute a successful setup for a bare-metal Kubernetes cluster. You will follow Mathias' journey as he rebuilt his cluster several times and learn how to: Identify dependencies and priorities between components to avoid incidents in the future. Leverage FluxCD to have a predicta...

Should every project start with Kubernetes? And if not, when is the right time to switch without incurring (unbearable) technical debt? In this episode of KubeFM, you will learn how the team at Loovatech designed an app from scratch and decided to use Docker Compose to host their infrastructure cheaply and effectively in a single virtual machine. As the project grew, the team had to make the diffi...

How do you upgrade a Kubernetes cluster to the latest release without breaking anything? And what if you had to upgrade hundreds of clusters simultaneously? In this episode, Pierre explains the process, tooling and testing strategy in upgrading clusters at scale. You will learn: How the team at Qovery keeps updated with the latest (vanilla) Kubernetes changes and managed services changelogs. How t...

Are logs enough to troubleshoot your deployment and infrastructure? Perhaps, but there's a better way to observe, monitor and debug your stack: embracing observability. In this episode, Adriana explains how she learned to love Open Telemetry and: How you can combine Traces, Metrics and logs to really understand the root cause of your production issues. What the Open Telemetry Collector is, and how...

Follow Gazal's journey as he shares the lessons learned in adopting, rolling out and scaling EKS clusters at Target Australia over seven years. You will learn: What is Bottlerocket OS. How Bottlerocket helps with securing your workloads. Karpenter as an alternative to the Cluster Autoscaler. How Karpenter can efficiently schedule and de-provision workloads. Gazal hinted at a 40% reduction in compu...

How do you scale your pods on queue length? In this episode, you will learn: How KEDA simplifies autoscaling in Kubernetes thanks to its vast collection of metrics collectors (i.e. scalers). Jorge's journey in tech: how he levelled up from passing wires as an electrician to learning Go and becoming a KEDA maintainer. Two must-try KEDA scalers: the HTTP add-on to scale to zero and the Carbon-aware...

TL;DR: Learn the most exciting changes that made it to Kubernetes 1.28 from Grace — the Kubernetes release lead. Kubernetes 1.28 brought us a few notable changes: Sidecar containers are officially recognised as a container (not just a container pattern). Pods from StatefulSet no longer get stuck into Terminating if a node is lost unexpectedly. Validating Admission Policy graduates to Beta. This po...