Kubernetes

Resources like CPU, Memory, Disk are critical for the performance of the node and the pods(containers) running on it.  You can read a detailed post about these resources here. In this post, we will cover the commands for printing the resources in a short and meaningful format.  A concise yet meaningful format is helpful for […]

This post will discuss Kubernetes Resources, Requests, and Limits. In the Kubernetes cluster, the scheduler chooses the best node to place a pod. To decide the best node, the scheduler makes decisions based on the availability of the resources like CPU, RAM, etc., on all the nodes. Then, the scheduler would place the Pod on

In this post, we will run a security scan on a Kubernetes cluster using Kubescape. Some time back, NSA has released the Kubernetes cluster hardening guide; this guide provides several DOs and DON’TS. The problem is manually running the guide and testing the cluster for each recommendation is a big task. Here comes the need

This post will do all the steps required to set up dynamic volume provisioning using NFS. We will be using a fresh Kubernetes cluster with no storage class provisioned. Unlike cloud environments, there are no storage provisioners available in the home environment by default. Sure, you can have it, but you need to configure it

Adding a Node to Kubernetes Cluster using Kubespray Kubespray is a great tool to create a production-ready Kubernetes cluster. However, Kubespray is not limited to spinning the cluster, and you can do many other cluster management operations using kubespray. E.g., scaling the cluster, upgrading the cluster, etc.  In this post, we will see an example

Kubesec is an open-source tool to perform security analysis of the Kubernetes resources(pods, deployments, etc.). Kubesec read the manifest resource file and conducted grading in terms of security aspects. The better security practices in the manifest file would result in higher grading by Kubesec and vice versa.Developers can manually execute this lightweight tool to grade

This article will showcase how to extend kubectl using kubectl plugins. Sometimes the out-of-the-box kubectl is not enough to provide the desired interaction with the API server. Many times users end up writing scripts, getting complex desired results. Therefore, Kubectl plugins will introduce a new kubectl subcommand to add custom features.Several open-source plugins are available

Ever wondered if your Kubernetes Cluster is following the security practices? A tool called Kube-bench by Aquasecurity provides automated checks to validate the cluster is running as per CIS Kubernetes benchmarks.  This tool runs many checks to validate the configuration of the cluster and provide a benchmark score. This helps users to find the implementation of security practices