⎈ Extending GitOps, Reducing Docker images by 40%, The traffic police, Prometheus and Thanos evolutionary tale, H100 GPUs in AKS

This newsletter is brought to you by Sysdig — Sysdig stops cloud attacks in real time by instantly detecting changes in risk with runtime insights and open source Falco.

📚 Articles

1. Extending GitOps: effortless continuous integration and deployment on Kubernetes
2. Optimizing Wireshark in Kubernetes
3. How I reduced the size of my very first published Docker image by 40%
4. Monitoring reinvented: Prometheus and Thanos evolutionary tale
5. Overcoming the deployment challenges of H100 GPUs in AKS
6. Loxilb cluster networking: elevating Kubernetes networking capabilities
7. The future is not Docker
8. Kubernetes security for dummies
9. The traffic police: controlling outgoing traffic with mirrord
10. Exploring AKS' Node Autoprovision
11. Implementing fractional gpus in Kubernetes with aliyun scheduler
12. Buildkit build-time container teardown arbitrary delete (CVE-2024-23652)
13. Buildkit mount cache race: build-time race condition container breakout (CVE-2024-23651)
14. Vulnerability: runc process.cwd and leaked fds container breakout (CVE-2024-21626)

🌟 5 Steps to Securing Kubernetes

The complexity of Kubernetes often leads DevOps teams to postpone security measures until production deployment.

This delay poses significant risks.

Use this checklist to guide your security strategy as you escalate the use of containers and Kubernetes.

📖 Tutorials

1. Mastering Ingress context path based routing in AWS EKS using Terraform
2. Gitops your Terraform resources on Azure with Flux
3. Scale your apps using KEDA in Kubernetes

💼 Kubernetes jobs

Software Engineer 💰 $130K to $200K a year · 🏢 based in the office (and remote from home) in Long Beach, CA, USA

Software Engineer 💰 €35K to €50K a year · 🌎 remote from Italy

Platform Engineer 💰 £85K to £105K a year · 🏢 based in the office (and remote from home) in London, GB

👉 Discover more opportunities on Kube Careers.

🛠 Tools and libraries

1. Lingo: ML model proxy
2. Open Virtual Networking
3. weave-gitops
4. Kubetail
5. Caddy Ingress Controller
6. Trident: dynamic storage orchestration

📅 Upcoming Kubernetes events

🔥 Kubernetes Community Days Lahore 2024 📅 Jul 7

The platform engineer's survival guide to Kubernetes networking 📅 Jul 9

Devopsdays Taipei 📅 Jul 10

Multi-Cloud Kubernetes with KubeAdmiral & Squeeze Your Kubernetes 📅 Jul 10

🔥 Devopsdays Nashville 📅 Jul 10

🔥 Kraken discovery labs 📅 Aug 6

👉 You can find more events on Kube Events.

📢 Call for papers closing soon

🔥 Kubernetes Community Days Porto 2024 ⏳ closes Jul 15

Kubernetes Community Days Denmark 2024 ⏳ closes Sep 16

KubeCon India ⏳ closes Aug 25

🔥 Kube Native 2024 ⏳ closes Aug 26

Cilium + eBPF Day North America ⏳ closes Jul 15

🔥 Platform Engineering 2024 ⏳ closes Aug 5

QCon San Francisco ⏳ closes Sep 18

Open Source Monitoring Conference ⏳ closes Aug 15

Devopsdays Bogotá ⏳ closes Sep 2

👉 You can find more Call for Papers on Kube Events.

Until next time!

— Dan