Kubernetesã§ã‚¢ãƒ—リã®å®‰å®šç¨¼åƒã¨é«˜é »åº¦ã®ã‚¢ãƒƒãƒ—デートを両立ã™ã‚‹ãŸã‚ã®ãƒ—ラクティス / Best Practices for Applications on Kubernetes�to Achieve Both Frequent Updates and Stability
Kubernetesã§ã‚¢ãƒ—リã®å®‰å®šç¨¼åƒã¨é«˜é »åº¦ã®ã‚¢ãƒƒãƒ—デートを両立ã™ã‚‹ãŸã‚ã®ãƒ—ラクティス / Best Practices for Applications on Kubernetes�to Achieve Both Frequent Updates and Stability
Kubernetesã§ã‚¢ãƒ—リã®å®‰å®šç¨¼åƒã¨é«˜é »åº¦ã®ã‚¢ãƒƒãƒ—デートを両立ã™ã‚‹ãŸã‚ã®ãƒ—ラクティス / Best Practices for Applications on Kubernetes�to Achieve Both Frequent Updates and Stability
NSA, CISA release Kubernetes Hardening Guidance > National Security Agency Central Security Service > Article View
FORT MEADE, Md.  – The National Security Agency (NSA) and the Cybersecurity and Infrastructure Security Agency (CISA) released a Cybersecurity Technical Report, “Kubernetes Hardening Guidance,†today. This report details threats to Kubernetes environments and provides configuration guidance to minimize risk. Kubernetes is an open source system that automates the deployment, scaling, and management
PodSecurityPolicyã®å»ƒæ¢ã«å‚™ãˆã¦ã€ä¸€è¶³å…ˆã«PodSecurity Admissionを試ã—ã¦ã¿ã‚ˆã†! - Qiita
PodSecurityPolicyã®å»ƒæ¢ã«å‚™ãˆã¦ã€ä¸€è¶³å…ˆã«PodSecurity Admissionを試ã—ã¦ã¿ã‚ˆã†!kubernetes PodSecurityPolicyã®å»ƒæ¢ã¨PodSecurity Kubernetesã®v1.21ã§PodSecurityPolicy(以下PSP)ãŒéžæŽ¨å¥¨ã¨ãªã‚Šã€v1.25ã§ã¯å‰Šé™¤ã•ã‚Œã‚‹äºˆå®šã¨ãªã£ã¦ã„ã¾ã™ã€‚ PSPãŒå»ƒæ¢ã•ã‚Œã¦ã—ã¾ã„ã¾ã™ãŒã€ä»£ã‚ã‚Šã«PodSecurityã¨ã„ã†æ–°ã—ã„組ã¿è¾¼ã¿ã®Admission ControllerãŒè¿½åŠ ã•ã‚Œã‚‹ã‚ˆã†ã§ã™ã€‚ é †èª¿ã«é–‹ç™ºãŒé€²ã‚ã°v1.22ã‹ã‚‰alpha機能ã¨ã—ã¦åˆ©ç”¨å¯èƒ½ã¨ãªã‚‹ã‚ˆã†ã§ã™ãŒã€å¾…ã¡ãã‚Œãšã‚³ã‚¢æ©Ÿèƒ½ãŒmergeã•ã‚ŒãŸæ®µéšŽã§ä»Šã§ãã‚‹ã“ã¨ã‚’検証ã—ã¦ã¿ã¾ã—ãŸã€‚ 以下ã¯ãƒ‰ã‚ュメントもãªã„状態ãªã®ã§ã€ã‚³ãƒ¼ãƒ‰ã‚’軽ã確èªã—ãªãŒã‚‰å‹•ä½œã¦ã¿ãŸãŸã‚記事ã«ã—ã¦ã¿ã¾ã—ãŸã€‚ 2020/09/02 追記 Kubernetes Me
Kubernetes 専門家ã¨ã—ã¦çŸ¥ã‚‹ã¹ã 47 ã®ã“㨠- 誰ã‹ã®å½¹ã«ç«‹ã¦ã°ã„ã„ブãƒã‚°
ã“ã®è¨˜äº‹ã¯ç§ãŒéŽåŽ» 3 å¹´ã»ã© Kubernetes ã«æºã‚ã‚‹ä¸ã§å¦ã‚“ã ã€ã¡ã‚‡ã£ã¨è¦‹ã¤ã‘ã«ãã„知è˜ã‚’ã¾ã¨ã‚ãŸã‚‚ã®ã§ã™ã€‚ 特ã«ã‚«ã‚¹ã‚¿ãƒ コントãƒãƒ¼ãƒ©ãƒ¼ã‚’開発ã™ã‚‹ã‚ˆã†ãªäººã«å¿…è¦ã¨ãªã‚‹çŸ¥è˜ç¾¤ã§ã™ã€‚ 感想ã¨ã‹æŒ‡æ‘˜ã¨ã‹ã‚れ㰠Twitter ã¾ã§ãŠå¯„ã›ãã ã•ã„。 æ›´æ–°å±¥æ´ 2021-03-05: "コンテナ㮠resources.limits 㨠resources.requests ã®é•ã„ã«ã¤ã„ã¦" ã®é …を補足ã—ã¾ã—㟠(thanks to @superbrothers) API コントãƒãƒ¼ãƒ©ãƒ¼å®Ÿè£… プãƒã‚°ãƒ©ãƒ ã¨é€£æºå‹•ä½œ 資æºç®¡ç† ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ モニタリング アクセスコントãƒãƒ¼ãƒ« API kube-apiserver ãŒå‚™ãˆã‚‹æ‹¡å¼µæ©Ÿæ§‹ã‚’列挙ã—ãªã•ã„ 回ç”例 Custom resources: OpenAPI スã‚ーマã§ç‹¬è‡ªã®ãƒªã‚½ãƒ¼ã‚¹åž‹ã‚’è¿½åŠ ã§ãã‚‹ Aggregation layer: kube-ap
Serviceã‚’ãŸãšãã¦3000è¡Œ - Kubernetesコードリーディングã®æ—…
Kubernetes上ã«ãƒ¯ãƒ¼ã‚¯ãƒãƒ¼ãƒ‰ã‚’展開ã™ã‚‹ã†ãˆã§Serviceã¯æ¬ ã‹ã™ã“ã¨ã®ã§ããªã„リソースã§ã™ã€‚Serviceã¯Podã«å¯¾ã™ã‚‹ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ãƒˆãƒ©ãƒ•ã‚£ãƒƒã‚¯ã‚’抽象化ã—ã€ã‚¯ãƒ©ã‚¹ã‚¿å†…部/外部ã®ãƒãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚µã¨ã—ã¦ä¸»ã«æ´»èºã—ã¾ã™ã€‚ Serviceã®ç´°ã‹ã„機能やè¨å®šã«é–¢ã—ã¦ã¯å…¬å¼ã®ãƒ‰ã‚ュメントã«è²ã‚‹ã¨ã—ã¦ã€ã“ã®ãƒ‰ã‚ュメントã§ã¯ServiceãŒä½œæˆã•ã‚Œã‚‹æµã‚Œ[1]ã¨ãƒ«ãƒ¼ãƒ†ã‚£ãƒ³ã‚°ã¸ã®å½±éŸ¿ã‚’実装コードをèªã¿ãªãŒã‚‰è§£èª¬ã—ã¾ã™ã€‚ 環境 ã“ã®ãƒ‰ã‚ュメントã§ã¯Kubernetes v1.20ã‚’å…ƒã«å‹•ä½œæ¤œè¨¼ã¨ã‚³ãƒ¼ãƒ‰ãƒªãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã‚’ã—ã¦ã„ã¾ã™ã€‚ã¾ãŸçœç•¥ã®ãŸã‚ã€ã‚¯ãƒ©ã‚¹ã‚¿ã®è¨å®šã‚’次ã®ã¨ãŠã‚Šã«è¨å®šã—ã¦ã‚ã‚Šã¾ã™ã€‚ featureGateã®EndpointSliceã¨EndpointSliceProxyingã¯æœ‰åŠ¹ v1.20ã§ã®ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆè¨å®š kube-proxyã®èµ·å‹•ãƒ‘ラメータproxy-modeã¯iptables 手元ã®
ゼãƒã‹ã‚‰å§‹ã‚ã‚‹Kubernetes Controller / Under the Kubernetes Controller
ゼãƒã‹ã‚‰å§‹ã‚ã‚‹Kubernetes Controller / Under the Kubernetes Controller
ã¤ãã£ã¦å¦ã¶Kubebuilder · ã¤ãã£ã¦å¦ã¶Kubebuilder
ã¤ãã£ã¦å¦ã¶Kubebuilder 本資料ã§ã¯Kuberbuilderを利用ã—ã¦ã‚«ã‚¹ã‚¿ãƒ コントãƒãƒ¼ãƒ©ãƒ¼/オペレーターを開発ã™ã‚‹æ–¹æ³•ã«ã¤ã„ã¦å¦ã³ã¾ã™ã€‚ Kubebuilderã¨ã¯ Kubebuilderã¯ã€Kubernetesã‚’æ‹¡å¼µã™ã‚‹ãŸã‚ã®ã‚«ã‚¹ã‚¿ãƒ コントãƒãƒ¼ãƒ©ãƒ¼/オペレーターを開発ã™ã‚‹ãŸã‚ã®ãƒ•ãƒ¬ãƒ¼ãƒ ワークã§ã™ã€‚ Kubernetesã§ã¯ã€æ¨™æº–ã§ç”¨æ„ã•ã‚Œã¦ã„ã‚‹Deploymentã‚„Serviceãªã©ã®ãƒªã‚½ãƒ¼ã‚¹ã‚’利用ã™ã‚‹ã“ã¨ã§ã€ç°¡å˜ã«ã‚¢ãƒ—リケーションã®ãƒ‡ãƒ—ãƒã‚¤ã‚„サービスã®æä¾›ãŒã§ãるよã†ã«ãªã£ã¦ã„ã¾ã™ã€‚ ã•ã‚‰ã«æ¨™æº–リソースを利用ã™ã‚‹ã ã‘ã§ãªãã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ãŒç‹¬è‡ªã®ã‚«ã‚¹ã‚¿ãƒ リソースを定義ã—ã¦Kubernetesを機能拡張ã™ã‚‹ã“ã¨ãŒå¯èƒ½ã«ãªã£ã¦ã„ã¾ã™ã€‚ ã“ã®ã‚«ã‚¹ã‚¿ãƒ リソースを扱ã†ãŸã‚ã®ãƒ—ãƒã‚°ãƒ©ãƒ をカスタムコントãƒãƒ¼ãƒ©ãƒ¼ã¨å‘¼ã³ã¾ã™ã€‚ ã¾ãŸã€ã‚«ã‚¹ã‚¿ãƒ コントãƒãƒ¼ãƒ©ãƒ¼ã‚’利用ã—ã¦ç‹¬è‡ªã®ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã®ã‚»ãƒƒãƒˆã‚¢ãƒƒãƒ—
Level Triggering and Reconciliation in Kubernetes | HackerNoon
Too Long; Didn't Read Kubernetes is the most popular container orchestrator by far. Much of its success comes from its reliability. It unrelentingly keeps running your desired number of running containers, in time. This behavior comes from a core philosophy in the design of KuberNETes. It is self-healing, says Joe Beda, the CTO of Heptio. The goal seeking behavior of the control loop is very stabl
転è·ã—ãŸã‚‰Kubernetesã ã£ãŸä»¶ - Qiita
TL;DR Kubernetes ãŒã©ã®ã‚ˆã†ã«ã€äººé–“ã®ä½œæ¥ã‚’自動化ã—ã¦ã„ã‚‹ã®ã‹ã‚’ã€å®Ÿéš›ã« Kubernetes ãŒã‚„ã£ã¦ã„る作æ¥ã‚’手作æ¥ã§è¡Œãªã† ã“ã¨ã§å¦ã³ã¾ã—ょã†ã€‚ ã“ã®Qiita ã®å†…容ã¯ã€CloudNative Days Tokyo 2019 ã«ãŠã‘る発表ã®ã€ã€Œè»¢è·ã—ãŸã‚‰Kubernetesã ã£ãŸä»¶ã€ã‚’書ã下ã‚ã—ã€å®Ÿéš›ã«ãƒ‡ãƒ¢ãŒè¡Œãˆã‚‹ã‚ˆã†ã«ä¿®æ£ã‚’åŠ ãˆãŸã‚‚ã®ã«ãªã‚Šã¾ã™ã€‚ YouTube Speakerdeck ã“ã®ç‰©èªžã¯ãƒ•ã‚£ã‚¯ã‚·ãƒ§ãƒ³ã§ã‚ã‚Šã€ç™»å ´ã™ã‚‹å›£ä½“å・会社å・人åç‰ã¯æž¶ç©ºã®ã‚‚ã®ã§ã€å®Ÿåœ¨ã™ã‚‹å›£ä½“・会社・人物ç‰ã¨ã¯ã€ä¸€åˆ‡ã€é–¢ä¿‚ãŒã‚ã‚Šã¾ã›ã‚“。 ã“ã‚Œã¾ã§ã®ã‚らã™ã˜ ã‚ã‚‹æ—¥ã€æŸZ社ã«è»¢è·ã—ãŸç¨²æ´¥ã•ã‚“ã«ä¸Žãˆã‚‰ã‚ŒãŸä»•äº‹ã¯ã€â€œKubernetes ã®ä¸€å“¡â€ã«ãªã‚‹ã“ã¨ã ã£ãŸï¼ï¼Ÿ æŸZ社ã¯ã€è¦ªä¼šç¤¾ã‹ã‚‰ã®ä¾é ¼ã§ Kubernetes クラスタをé‹ç”¨ã—ãªã‘ã‚Œã°ãªã‚‰ãªããªã‚Šã¾ã—ãŸãŒã€ 「Kubernetes
I don't use kubernetes.
2018/12/11 (æ ª)セプテーニ・オリジナル様主催㮠新宿 Geek Loungeã§ã®è³‡æ–™ã§ã™ã€‚ #shinjukuglRead less
Choosing a CNI Network Provider For Kubernetes
Choosing a CNI Network Provider for Kubernetes 11 Nov 2017 [ kubernetes cni ] The Container Network Interface (CNI) is a library definition, and a set of tools under the umbrella of the Cloud Native Computing Foundation project. For more information visit their GitHub project. Kubernetes uses CNI as an interface between network providers and Kubernetes networking. Why Use CNI Kubernetes default ne
Exploring the Networking Foundation for EKS: amazon-vpc-cni-k8s + Calico | Amazon Web Services
AWS Open Source Blog Exploring the Networking Foundation for EKS: amazon-vpc-cni-k8s + Calico ä¸æ–‡ç‰ˆ At AWS re:invent, Amazon announced Elastic Container Service for Kubernetes (EKS), and revealed details of how container networking would work — and be secured — on this exciting new platform. In particular, EKS leverages a new AWS Container Network Interface (amazon-vpc-cni-k8s) plug-in, together wit
Sustainable Kubernetes
KubernetesクラスタをæŒç¶šå¯èƒ½ã«ã™ã‚‹ãŸã‚ã«ã€ã„ã¾ã‹ã‚‰ã§ãã‚‹ã“ã¨ã€‚ Sustainable Kubernetes = Baseline Kubernetes + Continuous Security + GitOps builderscon 2018ã®ç™»å£‡è³‡æ–™ã§ã™ã€‚ https:/…
Kubernetes é‹ç”¨è¨è¨ˆã‚¬ã‚¤ãƒ‰ / A design guide for Kubernetes in production (Japanese)
2018/04/19 JAPAN CONTAINER DAYS V18.04 (https://containerdays.jp/) ã«ã¦ç™ºè¡¨ã—ãŸã‚‚ã®ã‚’åŠ ç†ä¿®æ£ã—ã¾ã—ãŸã€‚ Abstract: Kubernetes ã¯è±Šå¯Œãªæ©Ÿèƒ½ã¨ãã®é«˜ã„拡張性ã«ã‚ˆã‚Šã€ç¾å®Ÿã«ãŠã‘る様々ãªãƒ¦ãƒ¼ã‚¹ã‚±ãƒ¼ã‚¹ã«å¯¾å¿œã§ãる一方ã€â€¦
Kubernetes Fundamentals (LFS258) | Linux Foundation
This course is ideal for those wishing to manage a containerized application infrastructure. This includes existing IT administrators, as well as those looking to start a cloud career. The Kubernetes Fundamentals course will teach you how to use the container management platform used by companies like Google to manage their application infrastructure. You will learn how to install and configure a
AWS 㧠Kubernetes クラスタを構築ã—ã¦å¦ã¶ãƒ¯ãƒ¼ã‚¯ã‚·ãƒ§ãƒƒãƒ—「aws-workshop-for-kubernetes〠- kakakakakku blog
Kubernetes ã‚’å¦ã¶ãŸã‚，AWS ã‹ã‚‰å…¬å¼ã«å…¬é–‹ã•ã‚Œã¦ã„るワークショップ資料「aws-workshop-for-kubernetesã€ã‚’試ã—ãŸï¼ŽKubernetes ã‚’å¦ã¶ãŸã‚ã®ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ãŒç¶²ç¾…çš„ã«ã‚ã‚‹ãŸã‚，今回ã¯ãƒ¯ãƒ¼ã‚¯ã‚·ãƒ§ãƒƒãƒ—ã®ç´¹ä»‹ã¨ï¼Œå®Ÿéš›ã«è©¦ã—ãŸä¸€éƒ¨ã®ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã‚’ã¾ã¨ã‚ãŸã„ã¨æ€ã†ï¼Žæ—¢ã« Kubernetes を詳ã—ã知ã£ã¦ã„る人ã§ã‚ã‚Œã°æ—©ã進ã‚られるã‹ã‚‚ã—ã‚Œãªã„ã‘ã©ï¼ŒKubernetes åˆå¿ƒè€…ã ã¨ï¼Œç†è§£ã—ãªãŒã‚‰é€²ã‚ã‚‹ã“ã¨ã«ãªã‚‹ã®ã§ï¼Œå…¨ã‚³ãƒ³ãƒ†ãƒ³ãƒ„を終ãˆã‚‹ã®ã¯ã‹ãªã‚Šã®æ™‚é–“ãŒå¿…è¦ã«ãªã‚‹æ°—ãŒã™ã‚‹ï¼Žãƒ¯ãƒ¼ã‚¯ã‚·ãƒ§ãƒƒãƒ—資料ã¯å…¨ã¦ GitHub ã«å…¬é–‹ã•ã‚Œã¦ã„ã¦ï¼Œèª¤æ¤ãªã©ãŒã‚ã‚Œã°ï¼Œãƒ—ルリクエストをé€ã‚‹ã“ã¨ã‚‚ã§ãる． github.com ãªãŠï¼Œãƒ¯ãƒ¼ã‚¯ã‚·ãƒ§ãƒƒãƒ—資料㯠AWS Technical Evangelists ã®ã€Œã‚°ãƒ—タ先生ã€ãŒãƒ¡ã‚¤ãƒ³ã§ä½œæˆã•ã‚Œã¦ã„ã¦ï¼Œãã‚Œã ã‘ã§ã‚‚ã†ãƒ¢ãƒãƒ™ãƒ¼ã‚·ãƒ§ãƒ³ãŒä¸ŠãŒã‚‹
Introducing Skaffold: Easy and repeatable Kubernetes development | Google Cloud Blog
Introducing Skaffold: Easy and repeatable Kubernetes development As companies on-board to Kubernetes, one of their goals is to provide developers with an iteration and deployment experience that closely mirrors production. To help companies achieve this goal, we recently announced Skaffold, a command line tool that facilitates continuous development for Kubernetes applications. With Skaffold, deve
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
Project Calico - Secure Networking for the Cloud Native Era
Gardener - The Kubernetes Botanist
GitHub - vmware-archive/kubeless: Kubernetes Native Serverless Framework
{{#tags}}- {{label}}
{{/tags}}