Tag : Kubernetes

List all Tags

Native IPv6 Kubernetes for true edge routing

An opinionated look at running Kubernetes on IPv6, from basic cluster setups to fully routed edge architectures. It will make your networking easier and cheaper in the long run.

Gateway API doesn't solve real problems - yet

Yet another post about the deprecation of the `ingress-nginx` controller. Instead of whining, let's just be grateful for that amazing piece of software, and let's look ahead to the Kubernetes steering committee's next step. The Gateway-API

AWS Web-Identity-Token - The free IDP for all your OnPrem solutions

AWS created a new service which can be used to validate requests form aws in none AWS hosted infrastructure at no additional cost. It creates a managed OIDC-Issuer which can be used by anything that supports OIDC

The Grafana trust problem

The Grafana Stack can be an incredible powerful monitoring solution, but through my experience I found out how maintenance intensive it is and how uncertain the future for some parts of it are. The priority is always the application - not the monitoring. That should be stable and boring!

Follow Up: Let's talk about anonymous access to Kubernetes

Rory McCune posted a great article about Kubernetes default enabled anonymous-auth setting. But it can't always be disabled, nevertheless k8s evolves fast and now offers more granular control.

What is new in containerd 2.0

Learn what is new in containerd 2.0 and how you can benefit from better performance and increased security. Highlights are user-namespaces and faster image decompression.

Making OnPrem Kubernetes feel like AKS/EKS/GKE

Managed Kubernetes is awesome. No worries about the controlplane, etcd and node provisioning. But sometimes managed k8s is not an option. To get a little closer to the managed experience you could use the credential-provider-api and make all devs love you!

Benchmarking what actually drive our containers

Kubernetes success and versatility often overshadows the lower-level details of what actually drives our containers. I took a deeper took on how the default container engine performs compared to some alternatives.

Using GitLab to manage Kubernetes access

You have private Kubernetes cluster or a restricted network. There are modern solution to easily share and manage access with modern secure authentication. Let's dig some tunnels!

The recurring problem of the Kubernetes metrics server and insecure Kubelet certificate

The Metrics Server frequently encounters verification issues with Kubelet's self-signed certificates. I wrote a small summary and make a proposal for fixing it.