Learnk8s and Linode are launching a three-part, free educational program on Kubernetes scaling.

Each session comes with a webinar, code samples and a step-by-step article:

- Unit 1: "Request-based autoscaling in Kubernetes: scaling to zero and back" (21st of Sept)
- Unit 2: "Proactive cluster autoscaling in Kubernetes" (28th of Sept)
- Unit 3: "Scaling Kubernetes to multiple clusters and regions" (5th of Oct)

What you can expect:

- A live webinar (Chris, Salman & Daniele will present them). The event is recorded, and you can watch it later too.
- A step-by-step tutorial on Linode's blog where you can try everything we demo live.
- A collection of noscripts and resources helpful to understand and (if you want) extend our code.

You can sign up here: bit.ly/k8s-scale

Permission Manager is an application that enables a super-easy and user-friendly RBAC management for Kubernetes.

With Permission Manager, you can create users, assign namespaces/permissions, and distribute Kubeconfig YAML files via a nice & easy web UI.

More: https://github.com/sighupio/permission-manager

Master Kubernetes with this a 4-day Advanced Kubernetes workshop on the 22nd of September (in 3 weeks)!

_What should you expect?_

- Learn how to architect and design clusters from the ground up (in the cloud or on-prem).
- Explore the Kubernetes internal component and how the system is designed with resiliency in mind.
- **Deep-dive into the networking components and observe the packets flowing into the cluster.
- Hands-on labs to test the theory with real-world scenarios!


You can sign up here: https://learnk8s.io/online-advanced-september-2022

In this article, you will learn how to combine LDAP, Dex and Gangway to log in users in a Kubernetes cluster.

More: https://medium.com/upstream-engineering/kubernetes-authentication-using-ldap-and-oauth2-83c3457becf8

In this series of articles, you will explore:

1. How to secure image signing with cosign and AWS KMS.
2. How to use the sigstore Policy-controller to validate images in Kubernetes via admission controller.

More: https://medium.com/@slimm609/image-signing-validation-on-k8s-4b3202dbcd6c

🗓 Kubernetes events starting in the next 24 hours:

05 Sep 8:00 am GMT - 🔥 ContainerDays 2022 | ContainerDays - 📍 Online & in-person conference

05 Sep 1:00 pm GMT - Microsoft Azure virtual training day: cloud-native apps | Microsoft - 📍 Online webinar

→ See all Kubernetes events

Hello,

We wanted to share some discounts we received from the Conference organisers. We hope you will find these helpful.

We share more in our newsletter. You can subscribe to our Newsletter here: https://kube.events


1. SKILup Festival: London (50% off)
Date: September 13, 2022
Discount code: https://www.skilupfestival.io/london-22?promo=KubeEvents

2. SREday 2022, London (30% off)
Date: September 15-16, 2022 https://checkout.eventcreate.com/sreday/select-buy Coupon code: SREDAY-KUBE-EVENTS

3. DevOpsDays Washington DC 2022 (20% off)
Date: September 15-16, 2022 https://www.eventbrite.com/e/345684861727/?discount=K8SEVENTSFRIENDS
The Strange Loop conference ($75 off) Date: September 22-24, 2022
Tickets page: https://ti.to/strange-loop/2022
Coupon code: KUBE

Master Kubernetes with this a 4-day Advanced Kubernetes workshop on the 22nd of September (in 2 weeks)!

_What should you expect?_

- Learn how to architect and design clusters from the ground up (in the cloud or on-prem).
- Explore the Kubernetes internal component and how the system is designed with resiliency in mind.
- **Deep-dive into the networking components and observe the packets flowing into the cluster.
- Hands-on labs to test the theory with real-world scenarios!


You can sign up here: https://learnk8s.io/online-advanced-september-2022

What happens if an attacker accesses your Prometheus server?

How much information can they get for fingerprinting the cluster?

In this article, you will learn how attackers use this information and how to secure your cluster.

More: https://sysdig.com/blog/exposed-prometheus-exploit-kubernetes-kubeconeu

This article will look into how you can secure Ingress resources via adding TLS to Ingress and then procuring TLS/SSL certificates.

More: https://armosec.io/blog/kubernetes-ingress-security

In this article you will explore how users and workloads are authenticated with the Kubernes API server.

More: https://learnk8s.io/authentication-kubernetes

Reducing infrastructure costs boils down to turning apps off when you don't use them.

However, the challenge is figuring out how to turn them on automatically when needed.

Take the example of a Kubernetes dev cluster: you might want not to run any service during the weekend.

In this webinar, Salman will demo live how you can use KEDA and the HTTP scaler to intercept and monitor the requests to your services and scale your pods accordingly.

In the process, you will discover how you can scale to zero and create pods only when you need them.

You can register here (it's free): https://kube.events/t/8d60478c-573e-4e07-bd3d-972706ea8307

In this article, you will learn about Kubernetes security and architecture by reviewing reports from Chekov — a tool designed to find misconfigurations before they’re deployed.

More: https://blog.frankel.ch/learning-auditing-kubernetes-manifests

Over 900k Kubernetes exposures were observed across the internet during a routine threat-hunting exercise.

While this does not imply that all exposed instances are vulnerable to attacks, it still makes them a target.

You can learn more in this report.

More: https://blog.cyble.com/2022/06/27/exposed-kubernetes-clusters

All unpatched versions of Argo CD starting with v1.3.0 are vulnerable to a symlink following bug allowing a malicious user with repository write access to leak sensitive YAML files from Argo CD's repo-server.

More: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31036

Secrets in Kubernetes are used to store sensitive information.

This blog post will show how to secure Kubernetes secrets using the Hashicorp vault.

More: https://infracloud.io/blogs/kubernetes-secrets-hashicorp-vault

Switchboard is a Kubernetes operator that automates the creation of DNS records and TLS certificates when using Traefik v2 and its IngressRoute custom resource.

More: https://github.com/borchero/switchboard

When your Kubernetes cluster runs low on resources, the Cluster Autoscaler provision a new node and adds it to the cluster.

The cloud provider has to create a virtual machine from scratch, provision it and connect it to the cluster.

The process could take more than a few minutes from start to end.

But there's an alternative: you can proactively create nodes that are already provisioned when you need them.

In this webinar, Chris will demo live how you can configure Pod Priorities and a placeholder pod to pre-warm node instances for quicker scaling.

You can register here (it's free): https://kube.events/t/f60e2777-059f-4ef7-a11e-5d71150f956f

All versions of Argo CD starting with v1.0.0 are vulnerable to a cross-site noscripting (XSS) bug allowing a malicious user to inject a javanoscript: link in the UI.

More: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31035

In this article, you will learn why PodSecurityPolicies never made it as a GA feature, why they had to be replaced and what you should consider going forward.

More: https://macchaffee.com/blog/2022/psp-deprecation

In an affected version of KubeEdge a malicious message can crash CloudCore by triggering a nil-pointer dereference in the UDS Server.

This bug has been fixed in Kubeedge 1.11.0, 1.10.1, and 1.9.3.

More: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31076