⎈ conntrack limiting your Gateway, Lookup resources inside Helm, Cilium native routing in Kind, DaemonSets: the Philosopher's Stone of lazy sysadmins

This newsletter is brought to you by Otterize — automate workload IAM policies: zero-friction development, zero-trust security.

---

📚 Articles

1. How conntrack could be limiting your Kubernetes Gateway

2. Lookup Kubernetes resources inside Helm Charts

3. Play with Cilium native routing in Kind cluster

4. EKS pods stuck in Init/ContainerCreating state

5. DaemonSets: the Philosopher’s Stone of lazy sysadmins

6. Hardening container images: best practices and examples for Docker

7. Why I prefer Kyverno over Gatekeeper for native Kubernetes policy management

8. Unlocking Kubernetes performance with no CPU resource limits

9. 8 tips to boost the efficiency of command execution on Kubernetes using k9s

10. How to work with the kubectl debug command

11. JVM on Kubernetes: avoiding pitfalls in resource configuration

12. Why FaaS is a better choice than Kubernetes

13. Policy enforcement in Kubernetes: restricting kubectl exec with Gatekeeper

---

🌟 Human readable Network Policies and Kafka ACLs

Instead of managing pod identities and manually authoring individual network policies, Otterize implements intent-based access control (IBAC).

Declare what the pods can do, and everything is automatically wired together.

---

📖 Tutorials

1. Scaling a bare metal cluster into the cloud

2. Secret management in EKS using SSM Parameter Store, KMS and ESO

3. Kubernetes, Talos OS, Raspberry PI 4, and the power duo of Prometheus and Grafana!

4. Set up a Kubernetes cluster in under 5 minutes with Proxmox and k3s

5. Create managed resources using Crossplane Composite

---

📺 This week on the KubeFM podcast

Observability will speed up your Kubernetes troubleshooting

---

💼 Kubernetes jobs

Software Engineer 💰 kr. 540K to kr. 660K a year · 🏢 based in the office (and remote from home) in Copenhagen, DK

DevOps Engineer 💰 US$110K to US$130K a year · 🏢 based in the office (and remote from home) in British Columbia, CA

Software Engineer 💰 $170K to $226K a year · 🏢 based in the office (and remote from home) in San Francisco, CA, USA

Software Engineer 💰 £110K to £120K a year · 🏢 based in the office (and remote from home) in London, GB

DevOps Engineer 💰 $100K to $160K a year · 🌎 remote from the United States

👉 Discover more opportunities on Kube Careers.

---

🛠 Tools and libraries

1. Helm Uniform Layer Library

2. kubernetes/git-sync

3. Wireguard operator

4. Kraken registry

5. Capsule: Kubernetes operator for multi-tenancy

6. Kubetail

---

📅 Upcoming Kubernetes events

🔥 Kubernetes Community Days Argentina 2024 📅 May 10

🔥 Kuberentes Community Days Dhaka 2024 📅 May 11

🔥 Advanced Kubernetes course (Munich) 📅 May 13

🔥 Kubernetes Community Days Istanbul 📅 May 15

Understanding Amazon EKS blueprints with Amazon EKS add-ons for clusters 📅 May 16

👉 You can find more events on Kube Events.

---

📢 Call for papers closing soon

KubeCon North America ⏳ closes Jun 10

🔥 Kubernetes Community Days Lima, Perú 2024 ⏳ closes May 16

KubeDay Japan ⏳ closes May 19

🔥 Kubernetes Community Days UK ⏳ closes Jun 4

🔥 Kubernetes Community Days Washington DC 2024 ⏳ closes Jun 3

Kubernetes Community Days Austria 2024 ⏳ closes Jun 22

🔥 CloudX 2024 ⏳ closes Jun 14

KubeVirt Summit 2024 ⏳ closes May 20

The DevOps conference 2024 ⏳ closes May 13

👉 You can find more Call for Papers on Kube Events.

---

---

Until next time!

— Dan