Kubernetes

Azure Kubernetes Chronicles part 4: Dataprotection Welcome back to the Azure Kubernetes Chronicles! In previous episodes, we explored network-related topics like container network interfaces, eBPF, and observability in Azure Kubernetes Service (AKS). But securing an AKS cluster goes beyond networking and runtime security — it extends to protecting, recovering, and managing data. In this episode, we’re shifting gears to focus on a topic that’s equally critical but often underestimated: data protection in AKS. While Kubernetes brings agility and scalability, it also introduces complexities in securing persistent storage, managing sensitive secrets, and ensuring compliance with evolving regulations like NIS2 and DORA. ...

Azure Kubernetes Chronicles part 3: Observability Welcome back to the Azure Kubernetes Chronicles! In our previous posts, we explored the basics of Container Network Interfaces (CNIs) and had a first glance at how eBPF is changing networking within Azure Kubernetes Service (AKS). If you haven’t had a chance to read it yet, you might want to catch up here. In this episode, we’re diving even deeper into the labyrinth of Kubernetes by shining a light on a topic that’s both critical and fascinating: Observability! ...

Azure Kubernetes Chronicles Networking using eBPF Welcome back to the Azure Kubernetes Chronicles, a blog series dedicated to unraveling the complexities of Kubernetes on Azure. In the first edition, we explored the fundamentals of the Container Network Interface (CNI), its role in Kubernetes networking, and how it powers communication within clusters. Building on that foundation, this next episode delves into the transformative impact of eBPF (extended Berkeley Packet Filter) when integrated with CNI. By combining these technologies, we unlock new possibilities for enhancing networking, security, and observability in Kubernetes environments, particularly on Azure Kubernetes Service (AKS). ...

Azure Kubernetes Chronicles Container Network Interfaces In today’s cloud landscape, Kubernetes has become one of the backbones of modern application development, empowering businesses to deploy, scale, and manage containerized applications effortlessly. But with great power comes great complexity! That’s where Azure Kubernetes Service (AKS) comes into play — a managed Kubernetes service designed to make your container orchestration journey smoother and more productive. This blog series, Azure Kubernetes Chronicles, is here for platform engineers, CloudOps professionals and Cloud architects who are beginning their Kubernetes journey or looking to streamline their operations to guide you through the essentials and beyond, as we dive into some of the tools, features, and best practices for leveraging Azure Kubernetes to its fullest potential.In this first part the focus lies on the Container Network Interface (CNI). ...

Introduction This year KubeCon / CloudNativeCon Europe was held in the Netherlands at the RAI conference center in Amsterdam. KubeCon started with the different sponsor hosted and CNCF hosted colocated events like ArgoCon, CiliumCon, Observability day and Azure Day with Kubernetes. Very cool that it was hosted in the Netherlands, felt as home game. In this post I want to give a recap of the Azure Day with Kubernetes and KubeCon with some of the highlights, announcements and interesting sessions that I have attended. Videos of all the colocated events are or will become available in the next days. Watch this channel for the all the talks of KubeCon and other events like KCD. ...

Introduction Recently Azure Kubernetes Service (AKS) Edge Essentials became general available. AKS Edge Essentials is the latest addition to the AKS portfolio which already consist of Azure Kubernetes Services and AKS hybrid cluster. The product was originally announced at Ignite 2022 as AKS light. With AKS Edge, Microsoft makes it possible to run AKS on local Windows machines or Edge devices running the Windows operating system. AKS Edge Essentials includes the following features, managed by Microsoft: ...

On the 23rd and 24th of February the Kubernetes Community Days (KCD) were organised by the Dutch Kubernetes meetup group backup by the CNCF. The first KCD of its kind was organised in 2019 in the Netherlands. Nowadays it is an CNCF supported event organised by the local community in a country. There are KCD events everywhere in the world. A successful KCD event consists of keynotes, workshops and presentations round the topic Kubernetes. It is not only talks. Important part is also the social component which focuses on the community. For instance a a rather large group of the attendees went after the event to a karaoke bar.This year at the of the conference was a vegan barbecue followed by a dance party which was free for all attendees and after 23:00 everybody was welcome. The location was the ‘party-location’ Westerunie. ...

If you install k3s with the default settings it also installs Traefik as a load balancer. Traefik also offers a dashboard which is very easy to enable. If you go on your k3s machines to the path /var/lib/rancher/k3s/server/manifests you can find their traefik.yaml. To enable the Traefik dashboard you have to add dashboard.enabled: “true” to the yaml. root@k3s-master-1:/var/lib/rancher/k3s/server/manifests# cat traefik.yaml apiVersion: helm.cattle.io/v1 kind: HelmChart metadata: name: traefik namespace: kube-system spec: chart: https://%{KUBERNETES_API}%/static/charts/traefik-1.77.1.tgz set: rbac.enabled: "true" ssl.enabled: "true" metrics.prometheus.enabled: "true" kubernetes.ingressEndpoint.useDefaultPublishedService: "true" dashboard.enabled: "true" root@k3s-master-1:/var/lib/rancher/k3s/server/manifests# cat traefik.yaml apiVersion: helm.cattle.io/v1 kind: HelmChart metadata: name: traefik namespace: kube-system spec: chart: https://%{KUBERNETES_API}%/static/charts/traefik-1.77.1.tgz set: rbac.enabled: "true" ssl.enabled: "true" metrics.prometheus.enabled: "true" kubernetes.ingressEndpoint.useDefaultPublishedService: "true" dashboard.enabled: "true" After a few minutes you will see some extra pods getting started. ...

As I already explained in my earlier post, this was my first KubeCon | CloudNativeCon that I attended. What I liked about KubeCon was the diversity in sessions and that it was often a difficult choice per time slot which session to attend. For me this congress was next to attending sessions also about networking with vendors and other attendees. There were a lot of good opportunities and I spoke to a lot of people. ...

In my post about first experience with k3s I blogged about setting up my k3s based cluster on Raspberry PI’s. Since that post I have added two more nodes Raspberry Pi’s and also updated to the 0.3.0 version of k3s. pi@k3s-master-1:~ $ kubectl get nodes NAME STATUS ROLES AGE VERSION k3s-master-1 Ready master 4h11m v1.13.5-k3s.1 k3s-node-1 Ready node 129m v1.13.5-k3s.1 k3s-node-2 Ready node 118m v1.13.5-k3s.1 k3s-node-3 Ready node 119m v1.13.5-k3s.1 pi@k3s-master-1:~ $ Next step for me was getting the Kubernetes Dashboard up and running. I used the information from Web UI (Dashboard) First downloaded I the kubernetes-dashboard.yaml ...