Native support for Kubernetes Network Policies on EKS

Introduction When a new Kubernetes cluster is created, there is no isolation between pods running on that cluster. All pods are allowed to communicate with each other and the outside. To control traffic between the different workloads and external services, Kubernetes provides the NetworkPolicy objects. Network Policies are native Kubernetes objects to define these isolation rules. Why Network Policies? One way of viewing a Kubernetes cluster is a platform that is capable of hosting different heterogeneous workloads and managing them on this same platform....

September 18, 2023 · 5 min · Mossaab Stiri

Kubernetes Readiness, Liveness and Startup Probes

Introduction As a container orchestrator, Kubernetes manages the lifecycle of containers in a cluster. The kubelet will ensure that the containers of the different pods are running and healthy. These pods (podSpec) are provided through the apiserver. Different probes are used by the kubelet to decide how to treat a container and what actions to take. We can use each of these probes to achieve an optimal experience when running our containers....

April 16, 2023 · 6 min · Mossaab Stiri

Let's Encrypt and cert-manager: Securing Kubernetes Services

Introduction Kubernetes is becoming more and more popular these recent years. Many new projects choose it - by default - as a platform. Its flexibility and advantages are numerous to the point that many of the legacy applications are getting refactored, containerized, and migrated to Kubernetes. In real life, it is common to have services you develop and maintain, and third-party services and tools, deployed altogether in the same cluster (or clusters)....

March 28, 2023 · 14 min · Mossaab Stiri