Kubernetes Hacks and Tricks — #1 Immutable ConfigMaps & Secrets
#Kubernetes ConfigMap & Secret resources have a field called immutable which, if set to true, ensures that the data of ConfigMap/Secret cannot be updated after resource is created.
#Kubernetes Hacks and Tricks — #2 Optional ConfigMaps & Secrets in Pods
In some apps, app configs are set by default in the codebase (hard-coded) and if you want to override them, you can provide your override values via environment variables
#Kubernetes Hacks and Tricks — #4 Find worker node info from Pod spec info
In access-limited clusters where you don’t have access to cluster resources, you may need worker nodes’ info like worker node name, node IP address, etc.
#Kubernetes Hacks and Tricks — #5 Pod DNS Policy and DNS Config options
What really is dnsPolicy in Pod spec, and when should we change it? By setting the dnsPolicy option in Pod spec, you define how DNS requests should be resolved.
K8s changed its main repository from k8s.gcr.(io) to registry.k8s.i(o), so you should update your manifests ASAP. Learn how to find running Pods using the legacy image registry.
Open Policy Agent (OPA), is an open source, general purpose policy engine. OPA decouples policy decisions from other responsibilities of an app, like those commonly referred to as business logic.
OPA works equally well making decisions for Kubernetes, Microservices, functional app authorization and more, thanks to its single unified policy language.
In a a nutshell, the OPA policy engine evaluates requests to determine whether they conform to configured policies.
OPA can integrate with Kubernetes easily: it expects a JSON input, is easy to containerize & supports dynamic configuration,
Always keep this in mind when you're dealing with #Kubernetes:
Running a pod without a deployment can be done, however it is generally not recommended.
#Kubernetes now recommends running almost all of your Pods in Deployments instead of using custom ReplicaSets.
Without a deployment, Pods can still be created and run through unmanaged ReplicaSets. While you will still be able to scale your app you lose out on a lot of base functionality deployments provide and drastically increase your maintenance burden.#Kubernetes
Serverless 101: A series to help you understand what AWS serverless services do. It talks about how to use the services together to build highly scalable applications using event-driven architecture built on serverless.
▶️
👇
Serverless 101: Amazon SQS
A high-level overview of SQS. SQS is a fully managed message queuing service that makes it easy to decouple and scale microservices, distributed systems, and serverless apps.