#kubernetes (2020-01)
Archive: https://archive.sweetops.com/kubernetes/
2020-01-02
Heyo, does anyone have experience with fluentd-kubernetes-daemonset / restricting the namespaces it has access to? I’m running into large logging costs for namespaces that are not mission-critical. Thanks!
it might be easier to instead filter on the fluentd side, rather than attempt to restrict it
Sounds good - wasn’t familiar with fluentd filtering but the builtin grep filter looks like it will do the trick. Thanks!
2020-01-03
Did someone use VPA with kops ?
I would like to know if everything is working as aspected (I do not know why it should not)..
2020-01-07
2020-01-10
Interesting choice on using jsonnet again…
The Prometheus ecosystem is pretty deep in jsonnet already. Need some big wins to warrant redoing in something else like Cue.
Pinterest doing CRD for everything (effectively server side templating controlled by sre/platform team) is an interesting alternative approach.
I suggest Cue because it has similar feel (from outside looking at it) but big gain is schema validation (eg from k8s API).
Early efforts with ksonnet were focused around creating patterns to help organize configurations across many applications for large deployments of Kubernetes. Feedback from the community was that the purpose of ksonnet was meaningful, but the language and concepts could be intimidating for new and casual users. We worked to streamline the user experience through a Visual Studio Code extension and a new command line tool, ks, but despite our efforts, ksonnet has not yet resonated with its intended audience.
Prior to the acquisition, Heptio had been shifting focus and resources away from ksonnet; with the acquisition, we felt it was the right time to rethink our investment in ksonnet. As a result, work on ksonnet will end and the GitHub repositories will be archived.
K9s has a Slack workspace now https://join.slack.com/t/k9sers/shared_invite/enQtOTAzNTczMDYwNjc5LWJlZjRkNzE2MzgzYWM0MzRiYjZhYTE3NDc1YjNhYmM2NTk2MjUxMWNkZGMzNjJiYzEyZmJiODBmZDYzOGQ5NWM
Hi @roth.andy This link didn’t work for me, do you know if there is a new one? thanks!
sent you an invite
Got it, Thank you!!
2020-01-11
2020-01-12
damn it
lens quickly became an everyday tool for me
Latest update…
Still hope for it!
here’s hoping!
I could see it becomign that - especially for local dev, or sandbox environments
doesn’t appear to be open source though, right? The lens repo doesn’t contain the source
yeh it’s just issue management on the github project i think
We tried to build something amazing but our plans of creating business around open source software has failed
(i’m kind of sick of the faux open source vibe that gives off)
just curious what that refers to
probably this https://github.com/kontena/pharos-cluster
lol, yes, a repo for issues doesn’t count as “open source”
aha
i think they were trying to go the Banzai route and build cloud on k8s company
tanka looks promising
i’ve been working through trying to build out our deployments using kustomize and there’s a few pretty big limitations in getting a decently dry structure
2020-01-13
Kapitan has an intersting thing added more recently… -https://github.com/deepmind/kapitan/pull/190
Similar as Kuku - https://github.com/xarg/kuku
and Karavel - https://medium.com/@greegorey/writing-yet-another-kubernetes-templating-tool-2c5de0e2e7a
I really like these projects… reminds a bit of the Apache Aurora config languages (and its immense possibilities), plus you can create really nice terse wrapping classes which abstracts away everything, and include any python function for sourcing/generating whatever anywhere you’d like….
Anyone else on the Kuku or Karavel pill?
2020-01-14
Hi folks, I’m the founder of a startup building a service for SRE & Devops to monitor and verify rollouts continuously within K8s. This will help devs release with confidence and provide deep visibility into the deployment process. We ingest k8s events, metrics (from prometheus) and logs to monitor rollout progression and determine via statistical analysis whether the service has regressed. If issues are found during the rollout we recommend actions to unblock the rollout or to rollback the deployment. If this is relevant to you can you reply to this msg or send me a DM. We’re looking for folks to sign up for our early beta and would love your feedback. Thanks!
@Arjun Iyer any demo videos?
But we do have a 1-pager to share with folks who are interested and we would love to get some feedback!
2020-01-15
Hey Guys! So last Friday I completed my CKA exam and passed it. If anyone is interested, here are a few resources I used to prepared
• Linux Academy Cloud Native Certified Kubernetes Administrator (CKA) - https://linuxacademy.com/cp/modules/view/id/327
• Udemy - https://www.udemy.com/course/certified-kubernetes-administrator-with-practice-tests Additionally, I have been sharing some tips and tricks on my instagram https://instagram.com/dalekurt
awesome job @dalekurt! congrats and thanks for sharing
I think that’s going to help others who want to also get their CKA
2020-01-18
I’ve been unable to get the gmsa-webhook to work yet
2020-01-21
https://aws.amazon.com/blogs/aws/eks-price-reduction/ $876 annual savings for EKS cluster applied immediately
4
it would be great if they added EKS at California
That’s pretty awesome!
2020-01-22
@Chase Ward has joined the channel
2020-01-26
2020-01-28
Hi everyone! Been searching around for a while and can't seem to find an answer for this issue. I cant get the lifecycle postStart command to work as intended. This is the error im getting:
Warning FailedPostStartHook 20s (x2 over 21s) kubelet, gke-nodepool-name Exec lifecycle hook ([sh -c echo "hello world"]) for Container "container-name" in Pod "pod-name" failed - error: command 'sh -c echo "hello world"' exited with 126: , message: "cannot exec in a stopped state: unknown\r\n
Has anyone run in to this before?
Update: There was an issue in the Docker container that prevented it from ever reaching the lifecycle hook in a healthy state. Fixing the underlying issue also solved this error
2020-01-29
2020-01-31
Hi everyone! We OSS our permission manager tool for Kubernetes. If anyone wants to take a look: https://github.com/sighupio/permission-manager
Saw that one get announced, looks neato. Any alignment with rbac manager?
The one from fairwinds?
yeah, different purposes and all but it would be a good pairing for certain (it lets you use CRDs to define your rbac rules)
This looks rad @nutellinoit! thanks for sharing
@Jeremy G (Cloud Posse) @Alex Siegman @Daren
Saw this get announced. Looks pretty neat. Doesn’t solve any pain points for us now, but if I needed to have more least-access RBAC stuff in kube, or especially for app access if apps start interacting with the kube api directly, this seems like a good potential fit