⎈ Kubernetes at Decathlon, Webhook used by attackers, When is admin not admin? HPA based on Google Calendar, Database in Kubernetes: a good idea?

This newsletter is brought to you by Otterize — automate workload IAM policies: zero-friction development, zero-trust security.

---

📚 Articles

1. Kubernetes webhook used by attackers

2. When is admin not admin? When it's super-admin!

3. Kubernetes HPA based on events in Google Calendar

4. Seamless data exchange with Kafka Connect and Strimzi on Kubernetes at Decathlon

5. Database in Kubernetes: is that a good idea?

6. Rightsizing Kubernetes requests/limits usage

7. Per-pod PIDs limit on EKS

8. Docker Engine exposed: understanding namespaces, cgroups, union filesystems, and security layers

9. Journey into Kubernetes: building resilience, one container at a time

10. How an EKS upgrade almost broke our production

11. What is Kubernetes Downward API and why you might need it?

12. Exhausting conntrack table space crippled our Kubernetes cluster

13. Do Linux containers suffer any performance penalty compared to physical servers?

14. Our top 13 deployment & templating tools for Kubernetes

15. Small Kubernetes for your local experiments: k0s, MicroK8s, kind, k3s, and minikube

---

🌟 Human readable Network Policies and Kafka ACLs

Instead of managing pod identities and manually authoring individual network policies, Otterize implements intent-based access control (IBAC).

Declare what the pods can do, and everything is automatically wired together.

---

📖 Tutorials

1. Multi-environment Kubernetes setup with Flux and vCluster on AWS

2. Setting up a K3S cluster on Alpine Linux with Raspberry Pi 5 using a Mac

3. Efficient cloud native application deployment — KCL and KubeVela integration

---

📺 This week on the KubeFM podcast

Hacking Alibaba Cloud's Kubernetes cluster

---

💼 Kubernetes jobs

Site Reliability Engineer 💰 €78K to €82K a year · 🏢 based in the office (and remote from home) in Bucharest, RO

Software Engineer 💰 ¥4.8M to ¥6.34M a year · 🌎 remote from Japan

Site Reliability Engineer 💰 £70K to £75K a year · 🏢 based in the office (and remote from home) in Nottingham, GB

Software Engineer 💰 kr. 540K to kr. 660K a year · 🏢 based in the office (and remote from home) in Copenhagen, DK

👉 Discover more opportunities on Kube Careers.

---

🛠 Tools and libraries

1. Omni: SaaS deployment of Kubernetes

2. cdebug: container debugging

3. Percona Operator for MySQL

4. Kubernetes Web View

5. Declarative TUI dashboard

6. Admiral: Fargate logs

7. Cloudflare Tunnel Ingress Controller

8. OPA Image Scanner admission controller

9. secretgen-controller

10. Tetragon

---

📅 Upcoming Kubernetes events

🔥 Should you use Kubernetes and Docker in your next project? 📅 May 30

Running 10,000 ephemeral stateful jobs in managed Kubernetes daily 📅 May 30

Devopsdays Ukraine: let's talk security 📅 Jun 4

The state of ingress: why do we need Gateway API? 📅 Jun 5

🔥 Kubernetes Community Days Czech Slovak 2024 📅 Jun 6

🔥 Advanced Kubernetes course 📅 Jun 13

👉 You can find more events on Kube Events.

---

📢 Call for papers closing soon

KubeCon North America ⏳ closes Jun 10

🔥 Kubernetes Community Days UK ⏳ closes Jun 4

🔥 Kubernetes Community Days Washington DC 2024 ⏳ closes Jun 3

Kubeday Colombia ⏳ closes Jun 29

🔥 Kubernetes Community Days Austria 2024 ⏳ closes Jun 23

Kubernetes Community Days Lahore 2024 ⏳ closes Jun 22

🔥 Kube Native 2024 ⏳ closes Aug 26

🔥 CloudX 2024 ⏳ closes Jun 14

🔥 Platform Engineering 2024 ⏳ closes Aug 5

👉 You can find more Call for Papers on Kube Events.

---

---

Until next time!

— Dan