k8s

Restrict K8s Secret access to a specific ServiceAccount

Rafael Natali

Oct 42 min read

Restrict K8s Secret access to a specific ServiceAccount

Restrict K8s Secret access to a specific ServiceAccount. Good practices for Kubernetes Secrets.

92 views0 comments

Hands-on: Assigning Pods to Nodes using Affinity Rules

Rafael Natali

Sep 212 min read

Hands-on: Assigning Pods to Nodes using Affinity Rules

Create a highly available and resilient Kubernetes platform using Pod Affinity/Anti-affinity.

61 views0 comments

Handling Kubernetes vulnerabilities with CIS Benchmark

Rafael Natali

Sep 134 min read

Handling Kubernetes vulnerabilities with CIS Benchmark

In this article, I will use a tool called kube-bench to evaluate a Kubernetes cluster for vulnerabilities covered in the CIS benchmark.

19 views0 comments

Securing your Azure Kubernetes Services Cluster

Rafael Natali

Sep 72 min read

Securing your Azure Kubernetes Services Cluster

In this article, I will present my perspective on securing an Azure Kubernetes cluster with the principle of least privilege as a top priori

20 views0 comments

Rafael Natali

Aug 315 min read

Kubernetes Certification Learning Path

Kubernetes is a widely adopted technology, with 84% of organisations actively using or evaluating it, according to the 2023 Cloud Native...

13 views0 comments

Rafael Natali

Feb 52 min read

Kubernetes Network In Action - 3/3

This is the third and final articles explaining and detailing the Kubernetes Network model with a hands-on approach. In the first article...

54 views0 comments

Rafael Natali

Jan 303 min read

Kubernetes Network In Action - 2/3

This is the second of three articles explaining and detailing the Kubernetes Network model with a hands-on approach. In the first...

60 views0 comments

Rafael Natali

Jan 222 min read

Kubernetes Network In Action - 1/3

This is the first part of three articles explaining and detailing the Kubernetes Network model with a hands-on approach. The series will...

103 views0 comments

Monitoring Kafka Container Health with Probes

Rafael Natali

Jan 152 min read

Monitoring Kafka Container Health with Probes

This article will describe how to use Kubernetes Probes to monitor the health of your Kafka pods. Container Health K8s provides a number...

94 views0 comments

Rafael Natali

Dec 18, 20231 min read

Backing up an etcd cluster

All Kubernetes objects are stored on etcd. Periodically backing up the etcd cluster data is important to recover Kubernetes clusters...

24 views0 comments

Running Kafka in Kubernetes with Kraft mode and SASL authentication.

Rafael Natali

Sep 26, 20233 min read

Running Kafka in Kubernetes with Kraft mode and SASL authentication.

Learn how to launch an Apache Kafka with the Apache Kafka Raft (KRaft) consensus protocol and SASL/PLAIN authentication. This article is...

1,096 views0 comments

Running Kafka in Kubernetes with KRaft mode and SSL

Rafael Natali

Sep 20, 20233 min read

Running Kafka in Kubernetes with KRaft mode and SSL

Learn how to launch an Apache Kafka with the Apache Kafka Raft (KRaft) consensus protocol and SSL encryption. This article is a...

157 views0 comments

Running Kafka in Kubernetes with KRaft mode

Rafael Natali

Sep 14, 20233 min read

Running Kafka in Kubernetes with KRaft mode

Learn how to launch an Apache Kafka with the Apache Kafka Raft (KRaft) consensus protocol, removing Kafka's dependency on Apache...

1,677 views0 comments

Deploying Applications in Kubernetes Engine Made Easy with Ansible

Rafael Natali

Aug 22, 20233 min read

Deploying Applications in Kubernetes Engine Made Easy with Ansible

Ansible infrastructure-as-code to automate Nginx deployment in Google Kubernetes Cluster (GKE) on Google Cloud Platform (GCP)....

10 views0 comments

Automate Your Kubernetes Cluster Setup Using Ansible: A Comprehensive Tutorial

Rafael Natali

Aug 22, 20234 min read

Automate Your Kubernetes Cluster Setup Using Ansible: A Comprehensive Tutorial

Using Ansible to install, setup, and configure a Google Kubernetes Cluster (GKE) on Google Cloud Platform (GCP). Automating the setup of...

12 views0 comments

Rafael Natali

Aug 16, 20232 min read

Kubernetes Pod network connectivity issue with Istio enabled

A K8s Pod can return an Error when trying to reach the network before the Istio Sidecar is Running. Many applications execute commands or...

6 views0 comments

How to expose Kubernetes services to external traffic using Istio Gateway

Rafael Natali

Aug 15, 202310 min read

How to expose Kubernetes services to external traffic using Istio Gateway

Use a Gateway to manage inbound and outbound traffic for your mesh, letting you specify which traffic you want to enter or leave the...

13 views0 comments