In this article you will learn about the challenges that the team at
SDA SE faced when using a GitOps deployment and why they implemented their own Kubernetes Operator for MongoDB to speed up our deployments and reduce mistakes.

More: https://medium.com/sda-se/kubernetes-operator-to-the-rescue-how-our-own-mongodb-operator-improved-our-deployments-6d5ba3324abc

This article discusses the challenges the team at Home Depot experienced with Clouddriver’s approach to managing Kubernetes clusters (with ~500 Kubernetes providers, Clouddriver used around 100 CPUs and 250GB of memory), along with some solutions.

More: https://blog.spinnaker.io/go-clouddriver-scaling-spinnaker-to-1000-kubernetes-clusters-at-the-home-depot-c2dc1a05be8e

In this tutorial, you will learn how to automate blue/green Deployments with Argo Rollouts.

More: https://faun.pub/kubernetes-practice-automating-blue-green-deployment-with-argo-rollouts-2279aa890c53

In this article, you will explore the new Kubernetes Gateway API and compare it with the existing Kubernetes Ingress API for handling external traffic.

More: https://navendu.me/posts/gateway-vs-ingress-api

In this article, you will learn how to manage multiple clusters with Argo CD and Advanced Cluster Management for Kubernetes.

More: https://piotrminkowski.com/2022/10/24/gitops-with-advanced-cluster-management-for-kubernetes

Azure Key Vault provider for Secret Store CSI driver allows you to get secret contents stored in Azure Key Vault instance and use the Secret Store CSI driver interface to mount them into Kubernetes pods.

More: https://github.com/Azure/secrets-store-csi-driver-provider-azure

This week on the Learn Kubernetes Weekly newsletter:

👉 21 Articles
👉 1 Tutorial
👉 7 GitHub repos

📆 44 events (meetups, conferences, workshops) this week
📆 8 Call for paper expiring this week

Read it now: https://learnk8s.io/learn-kubernetes-weekly

In this case study, you'll learn how the team at Prezi managed to update the CSI driver installed as DaemonSet.

This required working around the immutable spec.selector.matchLabel and spec.template.metadata.labels fields.

More: https://engineering.prezi.com/intro-4727024fc2c1

In this article, you'll learn how the team at Dynamic Yield saved on compute resources by scaling up and down workers using the Horizontal Pod Autoscaler and Celery.

More: https://medium.com/m/global-identity?redirectUrl=https%3A%2F%2Fblog.dy.engineering%2Fhpa-for-celery-workers-6efd82444aee

Kyverno is a policy engine designed for Kubernetes.

It can validate, mutate, and generate configurations using admission controls and background scans.

Kyverno policies are Kubernetes resources and do not require learning a new language.

More: https://github.com/kyverno/kyverno

argocd-vault-replacer is an Argo CD plugin to replace placeholders in Kubernetes manifests with secrets stored in Hashicorp Vault.

The tool scans the current directory recursively for any YAML files and attempts to replace strings following a pattern.

More: https://github.com/crumbhole/argocd-vault-replacer

In this article, you will learn how to set up readiness and liveness health-check probes in Kubernetes with Spring Boot.

More: https://medium.com/@eumaho/setting-up-readiness-and-liveness-health-check-probes-in-kubernetes-with-springboot-674eb1038377

In this article, you’ll discuss CloudNativePG along with its features and capabilities.

You will then compare it to Stolon, Crunchy Data, Zalando, KubeDB, and StackGres.

More: https://blog.palark.com/cloudnativepg-and-other-kubernetes-operators-for-postgresql

KubernOcular is a free, open-source tool which harnesses the power of Prometheus and the Kubernetes-Client Node API to give developers an insightful and holistic view of Kubernetes clusters.

More: https://github.com/oslabs-beta/KubernOcular

Over 5 years, the total time needed to create and destroy an OCI container has passed from almost 160ms to a little bit more than 5ms.

Learn what's changed in this article.

More: https://scrivano.org/posts/2022-10-21-the-journey-to-speed-up-oci-containers

Discover how leveraging CI/CD pipelines based on Kubernetes gives organizations improved control and more efficient management, allowing for faster recovery and replication of runtime environments.

More: https://groundcover.com/blog/ci-cd-kubernetes

During one of the load tests, the team at Trendyol ran into a latency issue between two APIs deployed in Kubernetes.

In this case study, you will learn how the team narrowed down the issue to cAdvisor and IO operations.

More: https://medium.com/trendyol-tech/kubernetes-io-problem-investigation-1e8aa0cf4909

The PCI council released (generic) guidance for organizations using tools like Docker and Kubernetes in payment systems.

This series of articles is meant to discuss the details and how to apply it specifically to Kubernetes.

More: https://www.container-security.site/defenders/PCI_Container_Orchestration_Guidance.html

In this article, you will learn how to solve authentication in a reusable way using sidecar containers in Kubernetes.

More: https://betterprogramming.pub/kubernetes-authentication-sidecars-a-revelation-in-microservice-architecture-12c4608189ab

In this article, you will follow Prashant's journey in scaling EKS to 1000+ pods and learn how to overcome these challenges:

- AWS resource limits.
- IP addresses exhaustion.
- Packets drop.
- Control plane performance issues.

More: https://devopslearning.medium.com/lesson-learned-while-scaling-kubernetes-cluster-to-1000-pods-in-aws-eks-d2d399152bc2

Service Hub is a tool to create and manage a Self-Service portal for your applications using Kubernetes and Helm.

More: https://github.com/JovianX/Service-Hub