Зачем мигрировать с Istio Sidecar на Ambient, если у вас всё хорошо

Всем привет! С вами Песковацков Илья (@ilia_peskovatskov), лид DevOps-направления. Мы два года жили прекрасно с Istio Sidecar, решали свои проблемы, в частности, с метриками и безопасностью. Но просто спокойно работать любознательным инженерам скучно и мы решили посмотреть на новый режим Ambient. В статье расскажу, как мы прорабатывали, провели и с чем столкнулись в рамках миграции своих кластеров Istio с Sidecar режима на Ambient. Вроде познакомились, тогда погнали.

https://habr.com/ru/companies/alfa/articles/1037978/

#istio #sidecarконтейнеры #ambient #kubernentes #k8s #миграция

This week's post is about all the ways that bare Kubernetes pods are weird.

https://blog.appliedcomputing.io/p/bare-pods-are-weird-man

#kubernetes #k8s #simkube

People running #K8S on #Proxmox, what do you use for ReadWriteMany storage?

For RWO I am using proxmox-csi, but still need a good solution for RWX.

My storage is using Ceph inside Proxmox, but I'm not sure if things will get a bit funny if I try to use CephFS as the Proxmox UI doesn't seem to expose anything for CephFS

Great time co-presenting with Levi McCormick @ @OpenSourceNorth! We shared our #multicloud journey at @JamfSoftware across @awscloud & @azure.

#Cloud #CloudNative #K8s #Jamf

Kubernetes exposure checks for real clusters

Your This Kubernetes ingress-nginx Flaw Can Crash Your Cluster exposure may already be visible in the logs.

#Kubernetes #K8s #CloudNative #ContainerSecurity #DevSecOps #CyberSecurity #InfoSec

A new GPU-enabled Kubernetes cluster just went live.
The platform team shared one simple instruction: Add "gpu=enabled" to schedule workloads on GPU nodes.
A teammate deployed an ML inference application with the correct affinity configuration… yet every pod is stuck in "Pending".

Can you figure out what's wrong and get the application running?

https://www.learnbyfixing.com/scenarios/ml-inference-workload-is-pending/

#LearnByFixing #DevOps #SRE #Sysadmin #kubernetes #k8s

I have a quick post about all the ways that bare pods are weird in Kubernetes; currently available for paid subscribers, will open to free subscribers next week!

A reminder: we're trying to get to around $5k in paid subscription revenue on the blog. Right now we're hovering at just under $1k. If you like the things we're posting, please consider signing up for a paid subscription!

https://blog.appliedcomputing.io/p/bare-pods-are-weird-man

#kubernetes #k8s #simkube