#kubernetes - August 2020

any suggestion for the service that auto-syncs secrets stored in AWS Parameter Store -> k8s secrets?

Can someone tell me how I set the TLS security policy on an ELB to use the “ELBSecurityPolicy-TLS-1-2-2017-01” predefined policy? I found what looks like the annotation necessary to do that, but after applying it, I am not seeing a change on the ELB……
<http://service.beta.kubernetes.io/aws-load-balancer-security-policy|service.beta.kubernetes.io/aws-load-balancer-security-policy>: ELBSecurityPolicy-TLS-1-2-2017-01

figured it out
<http://service.beta.kubernetes.io/aws-load-balancer-ssl-negotiation-policy|service.beta.kubernetes.io/aws-load-balancer-ssl-negotiation-policy>: ELBSecurityPolicy-TLS-1-2-2017-01

Hey guys, anyone here is able to tell me why this call doesn't delete the deployment resource in kubernetes 1.17?

curl -H "Content-type: application/json" -H "Authorization: Bearer XXXXXXXXXX" -k -X DELETE "<https://kubernetes:7010/apis/apps/v1/namespaces/%7Chttps://<host:<port>/apis/apps/v1/namespaces/><namespace>/deployments/<deployment_name>>"

Hey folks — I’m looking for a pointer in the right direction regarding database migrations on kubernetes.

I’ve inherited an ECS application that is in progress on migration to K8s. One of the patterns currently in place is using Lambdas to run Database migrations through an NPM project. It’s a bit complicated and we need to overhaul the process anyway, so I’m looking to pull this into the k8s migration and do it the “k8s way”. I’m wondering how others approach running initial database creation, migration, and seeding scripts? K8s jobs? Init containers? Or some other k8s pattern I’m not aware of?

Any thoughts / suggestions / things I should read?

🎉 https://aws.amazon.com/blogs/containers/saving-money-pod-at-time-with-eks-fargate-and-aws-compute-savings-plans/

Basic Kubernetes networking question: Do CNIs or any networking layer in K8s use bridge port at the NIC level to do it’s magic OR it uses just multiple IPs per interface to do it’s thing? wondering about networking layer performance compared to Bridge mode in other settings

As per our company policy, linux server will get latest patch updates from kernal level for evry 2 months , which will cause all the machines to force reboot.
at that time kubernetes cluster is getting broken ..
all nodes will be in notready state. did some one faced similar problem... ?
if so how is handling.... ?

Is there a public document I could refer to on how to extend k8s HPA? I want to write a custom HPA that uses custom metrics to scale down. e.g. I have a custom metric that I can get from prometheus that is connection count to a pod, I want my pods only to scale down when connection is 0 and not send any new connections to it. Is there such a thing already?

If im running an app that requires one instance under a deployment, how do I ensure 1 pod is always available? Case is manual deletion of the pod causes some downtime. PDB doesn't seem to do it.

Hey folks, in helm if I want to share template helper functions with my many application Charts (functions like fullName that are pretty consistent across applications) — what is the best way to do that? Create a parent chart and treat all application charts as subcharts? Or is there a better way?

Just installed OpenShift dedicated on AWS, any better advice to construct Jenkins on it? I use GitLab store BE/FE app source codes and try to deploy on OpenShift Pods.

@Jonathan Tobe has joined the channel

Has someone ever used Gitlab Auto DevOps with custom Docker images for a worker and a service in the same repository? Not using the Herokuish/etc
If so, how was the configuration experience?

https://gravitational.com/blog/kubernetes-kustomize-kep-kerfuffle/

Interesting read

AWS Controllers for Kubernetes - https://github.com/aws/aws-controllers-k8s

Is anyone using Datadog Log collection with EKS + Fargate? Did you have to jump through the whole Firelens + Fluentbit hurdles similar to DD + ECS log collection?

Hello guys,
I'm trying to install lens in centos 7.6(64-bit) using snap (https://snapcraft.io/install/kontena-lens/centos) and installation is successful, but when i run kontena-lens it gives below
/snap/kontena-lens/110/kontena-lens: error while loading shared libraries: libgtk-3.so.0: cannot open shared object file: No such file or directory
sudo yum provides libgtk-3.so.0
Last metadata expiration check: 0:40:31 ago on Fri 28 Aug 2020 06:00:51 AM UTC.
gtk3-3.22.30-3.el8.i686 : GTK+ graphical user interface library
Repo : @System
Matched from:
Provide : libgtk-3.so.0

gtk3-3.22.30-3.el8.i686 : GTK+ graphical user interface library
Repo : rhel-8-appstream-rhui-rpms
Matched from:
Provide : libgtk-3.so.0

sudo yum install gtk3-3.22.30-3.el8.i686 -y

after installing all dependency packages still getting same error any suggestion on this ?

What do folks prefer for a visual K8s Tool? Lens, k9s, Octant, or other?