#kubernetes - January 2020

January 2020
Austin Cawley-Edwards
Austin Cawley-Edwardsalmost 7 years ago
Heyo, does anyone have experience with fluentd-kubernetes-daemonset / restricting the namespaces it has access to? I'm running into large logging costs for namespaces that are not mission-critical. Thanks!
Pierre Humberdroz
Pierre Humberdrozalmost 7 years ago
Did someone use VPA with kops ?
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)almost 7 years ago
Interesting choice on using jsonnet again...
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)almost 7 years ago(edited)

Early efforts with ksonnet were focused around creating patterns to help organize configurations across many applications for large deployments of Kubernetes. Feedback from the community was that the purpose of ksonnet was meaningful, but the language and concepts could be intimidating for new and casual users. We worked to streamline the user experience through a Visual Studio Code extension and a new command line tool, ks, but despite our efforts, ksonnet has not yet resonated with its intended audience.

>
Prior to the acquisition, Heptio had been shifting focus and resources away from ksonnet; with the acquisition, we felt it was the right time to rethink our investment in ksonnet. As a result, work on ksonnet will end and the GitHub repositories will be archived.
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)almost 7 years ago
Chris Fowles
Chris Fowlesalmost 7 years ago
damn it
Chris Fowles
Chris Fowlesalmost 7 years ago
lens quickly became an everyday tool for me
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)almost 7 years ago(edited)
I could see it becomign that - especially for local dev, or sandbox environments
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)almost 7 years ago
doesn't appear to be open source though, right? The lens repo doesn't contain the source
Chris Fowles
Chris Fowlesalmost 7 years ago
yeh it's just issue management on the github project i think
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)almost 7 years ago

We tried to build something amazing but our plans of creating business around open source software has failed
Chris Fowles
Chris Fowlesalmost 7 years ago
(i'm kind of sick of the faux open source vibe that gives off)
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)almost 7 years ago
just curious what that refers to 😃
Chris Fowles
Chris Fowlesalmost 7 years ago
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)almost 7 years ago
lol, yes, a repo for issues doesn't count as "open source" 😃
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)almost 7 years ago
aha
Chris Fowles
Chris Fowlesalmost 7 years ago
i think they were trying to go the Banzai route and build cloud on k8s company
Chris Fowles
Chris Fowlesalmost 7 years ago
tanka looks promising
Chris Fowles
Chris Fowlesalmost 7 years ago
i've been working through trying to build out our deployments using kustomize and there's a few pretty big limitations in getting a decently dry structure
mfridh
mfridhalmost 7 years ago
Kapitan has an intersting thing added more recently... -https://github.com/deepmind/kapitan/pull/190

Similar as Kuku - https://github.com/xarg/kuku

and Karavel - https://medium.com/@greegorey/writing-yet-another-kubernetes-templating-tool-2c5de0e2e7a

I really like these projects... reminds a bit of the Apache Aurora config languages (and its immense possibilities), plus you can create really nice terse wrapping classes which abstracts away everything, and include any python function for sourcing/generating whatever anywhere you'd like....

Anyone else on the Kuku or Karavel pill? 😄
Arjun Iyer
Arjun Iyeralmost 7 years ago
Hi folks, I’m the founder of a startup building a service for SRE & Devops to monitor and verify rollouts continuously within K8s. This will help devs release with confidence and provide deep visibility into the deployment process. We ingest k8s events, metrics (from prometheus) and logs to monitor rollout progression and determine via statistical analysis whether the service has regressed. If issues are found during the rollout we recommend actions to unblock the rollout or to rollback the deployment. If this is relevant to you can you reply to this msg or send me a DM. We’re looking for folks to sign up for our early beta and would love your feedback. Thanks!
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)almost 7 years ago
@Arjun Iyer any demo videos? 😃
dalekurt
dalekurtalmost 7 years ago
Hey Guys! So last Friday I completed my CKA exam and passed it.
If anyone is interested, here are a few resources I used to prepared
• Linux Academy Cloud Native Certified Kubernetes Administrator (CKA) - https://linuxacademy.com/cp/modules/view/id/327
• Udemy - https://www.udemy.com/course/certified-kubernetes-administrator-with-practice-tests
Additionally, I have been sharing some tips and tricks on my instagram https://instagram.com/dalekurt
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)almost 7 years ago
awesome job @dalekurt! congrats and thanks for sharing
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)almost 7 years ago
I think that's going to help others who want to also get their CKA
James D. Bohrman
James D. Bohrmanalmost 7 years ago
Big thanks to @Nick Kampe for helping me brainstorm this!
Carlos Tovar
Carlos Tovaralmost 7 years ago
Carlos Tovar
Carlos Tovaralmost 7 years ago
I've been unable to get the gmsa-webhook to work yet
btai
btaialmost 7 years ago(edited)
https://aws.amazon.com/blogs/aws/eks-price-reduction/
$876 annual savings for EKS cluster applied immediately
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)almost 7 years ago
That’s pretty awesome!
Chase Ward
Chase Wardalmost 7 years ago
@Chase Ward has joined the channel
Jonathan
Jonathanalmost 7 years ago(edited)
Hi everyone! Been searching around for a while and can't seem to find an answer for this issue. I cant get the lifecycle postStart command to work as intended. This is the error im getting: 



 Warning  FailedPostStartHook  20s (x2 over 21s)  kubelet, gke-nodepool-name  Exec lifecycle hook ([sh -c echo "hello world"]) for Container "container-name" in Pod "pod-name" failed - error: command 'sh -c echo "hello world"' exited with 126: , message: "cannot exec in a stopped state: unknown\r\n

Has anyone run in to this before?

Update: There was an issue in the Docker container that prevented it from ever reaching the lifecycle hook in a healthy state. Fixing the underlying issue also solved this error
nutellinoit
nutellinoitalmost 7 years ago
Hi everyone! We OSS our permission manager tool for Kubernetes. If anyone wants to take a look: https://github.com/sighupio/permission-manager
Zachary Loeber
Zachary Loeberalmost 7 years ago
Saw that one get announced, looks neato. Any alignment with rbac manager?
Zachary Loeber
Zachary Loeberalmost 7 years ago
yeah, different purposes and all but it would be a good pairing for certain (it lets you use CRDs to define your rbac rules)
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)almost 7 years ago
This looks rad @nutellinoit! thanks for sharing
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)almost 7 years ago
@Jeremy G @Alex Siegman @Daren ☝️
Alex Siegman
Alex Siegmanalmost 7 years ago
Saw this get announced. Looks pretty neat. Doesn't solve any pain points for us now, but if I needed to have more least-access RBAC stuff in kube, or especially for app access if apps start interacting with the kube api directly, this seems like a good potential fit