Daniel's Tech Blog

Cloud Computing, Cloud Native & Kubernetes

Tag: Kubernetes

  • Running gVisor on Azure Kubernetes Service for sandboxing containers

    gVisor is one option beside Kata Containers or Firecracker for sandboxing containers to minimize the risk when running untrusted workloads on Kubernetes. -> https://gvisor.dev/ Currently, the only managed Kubernetes service which supports gVisor in dedicated node pools per default is Google Kubernetes Engine. But with a bit of an effort this is doable as well…

  • Run the Istio ingress gateway with TLS termination and TLS passthrough

    The Istio ingress gateway supports two modes for dealing with TLS traffic: TLS termination and TLS passthrough. Running Istio with TLS termination is the default and standard configuration for most installations. Incoming TLS traffic is terminated at the Istio ingress gateway level and then sent to the destination service encrypted via mTLS within the service…

  • Using Conftest for Azure Policy for Kubernetes

    Conftest is a tool that lets you write tests against structure data like Kubernetes templates. -> https://www.conftest.dev/ So, why should you use Conftest when you already established your policies with Azure Policy for Kubernetes? As Azure Policy for Kubernetes uses Gatekeeper the OPA implementation for Kubernetes under the hood it uses Gatekeeper constraint templates written…

  • Mitigating slow container image pulls on Azure Kubernetes Service

    It might happen that you experience slow container image pulls on your Azure Kubernetes Service nodes. First thought might be the Azure Container Registry is the root cause. Even when using the ACR without the geo-replication option enabled, image pulls from an ACR in Europe to AKS nodes running in Australia are fast. Therefore, it…

  • Azure Policy for Kubernetes – custom policies on Azure Arc enabled Kubernetes

    On September 1st Microsoft announced the public preview of the custom policy support for Azure Policy for AKS. -> https://azure.microsoft.com/en-us/updates/custom-aks-policy-support-now-public-preview/ I am already using the public preview on my AKS cluster and was curious about if this would work as well with Azure Arc enabled Kubernetes. The short answer is yes, but with some minor…

  • Local Kubernetes setup with KinD on Podman

    In one of my last blog posts I walked you through the setup how to run Podman on macOS with Multipass as Docker for Desktop alternative. -> https://www.danielstechblog.io/running-podman-on-macos-with-multipass/ Today I briefly show you the local Kubernetes setup with KinD on Podman. Even the Podman support of KinD is in an experimental state it runs stable…

WordPress Cookie Notice by Real Cookie Banner