Anything about kubernetes
This post will discuss Kubernetes Resources, Requests, and Limits. In the Kubernetes cluster, the scheduler chooses the best node to place a pod. To decide the best node, the scheduler makes decisions based on the availability of the resources like CPU, RAM, etc., on all the nodes. Then, the scheduler would place the Pod on …
In this post, we will run a security scan on a Kubernetes cluster using Kubescape. Some time back, NSA has released the Kubernetes cluster hardening guide; this guide provides several DOs and DON’TS. The problem is manually running the guide and testing the cluster for each recommendation is a big task. Here comes the need …
How to run a security scan on a Kubernetes Cluster Read More »
This post will do all the steps required to set up dynamic volume provisioning using NFS. We will be using a fresh Kubernetes cluster with no storage class provisioned. Unlike cloud environments, there are no storage provisioners available in the home environment by default. Sure, you can have it, but you need to configure it …
How to provision Dynamic Volumes(NFS) on a home lab? Read More »
Adding a Node to Kubernetes Cluster using Kubespray Kubespray is a great tool to create a production-ready Kubernetes cluster. However, Kubespray is not limited to spinning the cluster, and you can do many other cluster management operations using kubespray. E.g., scaling the cluster, upgrading the cluster, etc. In this post, we will see an example …
Kubesec is an open-source tool to perform security analysis of the Kubernetes resources(pods, deployments, etc.). Kubesec read the manifest resource file and conducted grading in terms of security aspects. The better security practices in the manifest file would result in higher grading by Kubesec and vice versa.Developers can manually execute this lightweight tool to grade …
This article will showcase how to extend kubectl using kubectl plugins. Sometimes the out-of-the-box kubectl is not enough to provide the desired interaction with the API server. Many times users end up writing scripts, getting complex desired results. Therefore, Kubectl plugins will introduce a new kubectl subcommand to add custom features.Several open-source plugins are available …
Ever wondered if your Kubernetes Cluster is following the security practices? A tool called Kube-bench by Aquasecurity provides automated checks to validate the cluster is running as per CIS Kubernetes benchmarks. This tool runs many checks to validate the configuration of the cluster and provide a benchmark score. This helps users to find the implementation of security practices …
Is your Kubernetes cluster following best security practices ? Read More »
In this post, we will see how Kubespray could be used to create a cluster on an On-Prem environment(or on your laptop with a bunch of virtual machines). Kubespray is a “Certified Kubernetes Distributions, Hosted Platforms, and Installers.” You can create a Kubernetes cluster using kubespray with minimal configuration in the inventory file. However, It …
How to create Kubernetes Cluster fast using Kubespray? Read More »
