Posts in 2017
Kubernetes 1.7: Security Hardening, Stateful Application Updates and Extensibility
Friday, June 30, 2017 in Blog
Today we’re announcing Kubernetes 1.7, a milestone release that adds security, storage and extensibility features motivated by widespread production use of Kubernetes in the most demanding enterprise environments. At-a-glance, security enhancements …
Draft: Kubernetes container development made easy
Wednesday, May 31, 2017 in Blog
_Today's post is by _Brendan Burns, Director of Engineering at Microsoft Azure and Kubernetes co-founder. About a month ago Microsoft announced the acquisition of Deis to expand our expertise in containers and Kubernetes. Today, I’m excited to …
Managing microservices with the Istio service mesh
Wednesday, May 31, 2017 in Blog
Today’s post is by the Istio team showing how you can get visibility, resiliency, security and control for your microservices in Kubernetes. Services are at the core of modern software architecture. Deploying a series of modular, small …
Kubespray Ansible Playbooks foster Collaborative Kubernetes Ops
Friday, May 19, 2017 in Blog
Today’s guest post is by Rob Hirschfeld, co-founder of open infrastructure automation project, Digital Rebar and co-chair of the SIG Cluster Ops. Why Kubespray? Making Kubernetes operationally strong is a widely held priority and I track many …
Kubernetes: a monitoring guide
Friday, May 19, 2017 in Blog
Today’s post is by Jean-Mathieu Saponaro, Research & Analytics Engineer at Datadog, discussing what Kubernetes changes for monitoring, and how you can prepare to properly monitor a containerized infrastructure orchestrated by Kubernetes. …
Dancing at the Lip of a Volcano: The Kubernetes Security Process - Explained
Thursday, May 18, 2017 in Blog
Editor's note: Today’s post is by Jess Frazelle of Google and Brandon Philips of CoreOS about the Kubernetes security disclosures and response policy. Software running on servers underpins ever growing amounts of the world's commerce, communications, …
How Bitmovin is Doing Multi-Stage Canary Deployments with Kubernetes in the Cloud and On-Prem
Friday, April 21, 2017 in Blog
Editor's Note: Today’s post is by Daniel Hoelbling-Inzko, Infrastructure Architect at Bitmovin, a company that provides services that transcode digital video and audio to streaming formats, sharing insights about their use of Kubernetes. Running a …
RBAC Support in Kubernetes
Thursday, April 06, 2017 in Blog
Editor’s note: this post is part of a series of in-depth articles on what's new in Kubernetes 1.6 One of the highlights of the Kubernetes 1.6 release is the RBAC authorizer feature moving to beta. RBAC, Role-based access control, is an authorization …
Configuring Private DNS Zones and Upstream Nameservers in Kubernetes
Tuesday, April 04, 2017 in Blog
Editor’s note: this post is part of a series of in-depth articles on what's new in Kubernetes 1.6 Many users have existing domain name zones that they would like to integrate into their Kubernetes DNS namespace. For example, hybrid-cloud users may …
Advanced Scheduling in Kubernetes
Friday, March 31, 2017 in Blog
Editor’s note: this post is part of a series of in-depth articles on what's new in Kubernetes 1.6 The Kubernetes scheduler’s default behavior works well for most cases -- for example, it ensures that pods are only placed on nodes that have sufficient …