Rafael Moraes Natali

Learning and practicing DevOps Engineer | Kubernetes | Linux | Cloud | Automation

[marionete @marionete_io]

#Marionete are #Hiring for #DevOps #Engineers

We are looking for 2 Senior DevOps Engineers to join our team

- Cloud Implementation (AWS | Azure | GCP)
- Kubernetes
- Terraform
- CI/CD Pipelines

https://t.co/NeMOMPTDyx

#cloud #aws #azure #GCP #Kubernetes #k8s #cicd #Terraform

[Rafael Moraes Natali @rafaelmnatali]

I just published How to configure audit policy for Secrets on Kubernetes https://t.co/WtcQRbI9sB

[Rafael Moraes Natali @rafaelmnatali]

In this article, I describe how Istio + mTLS + ClusterIP breaks the pod-to-pod within the #servicemesh and why we need to use #Kubernetes Services as Headless to correct it.

https://t.co/LlLsS8CHSX

[Rafael Moraes Natali @rafaelmnatali]

@thenewstack You can call whatever you want. There is no "silver-bullet". Every team/project/company is different. The best is to discuss and understand what works best for what you need to deliver.

[Rafael Moraes Natali @rafaelmnatali]

In this article, learn how to prevent network connectivity errors when a Pod run comands at startup and Istio is enabled.
https://t.co/MKq7sgrW01

#Kubernetes #istio #ServiceMesh

[Rafael Moraes Natali @rafaelmnatali]

#Kubernetes Pods can be debugged in many forms. For example, you can attach an ephemeral container to a running Pod to interactive troubleshoot with the `kubectl exec` command.
kubectl debug -it ephemeral-demo --image=busybox:1.28 --target=ephemeral-demo

https://t.co/oZNgwBWQZG

[Rafael Moraes Natali @rafaelmnatali]

#Linux #Bash script tip...

Error handling:

set +xoe pipefail

[Rafael Moraes Natali @rafaelmnatali]

#Linux #Bash script tip...

Create functions:

check_test_pod_status{
kubectl get pods test-pod
}
function header {
echo -e "\n-- ${1}"
}

[Rafael Moraes Natali @rafaelmnatali]

#Linux #Bash script tip...

Loop files in a directory:

for f in $secrets_path
do
echo 'Processing $f file...'
cat "$f"
done

[Rafael Moraes Natali @rafaelmnatali]

When automating #Kubernetes resources creation/deployment, you want to make sure they are Running before proceed. Use `kubectl wait` to wait for a specific condition on one or many resources.

https://t.co/rrXb6jmrk9

[Rafael Moraes Natali @rafaelmnatali]

@confluentinc Broker

[Rafael Moraes Natali @rafaelmnatali]

#Kubernetes Labels are key/value pairs that are attached to objects, such as pods. Labels are intended to be used to specify identifying attributes of objects that are meaningful and relevant to users.

https://t.co/3fa3AqYb8M

[Rafael Moraes Natali @rafaelmnatali]

When deleting #Kubernetes resources, you can use:
`--ignore-not-found=false`
to treat "resource not found" as a successful delete. Useful to include in scripts and automation.

[Rafael Moraes Natali @rafaelmnatali]

#tdd development benefits:
1. Clear requirements
2. Greater confidence in the code
3. Just enough code in production

[Rafael Moraes Natali @rafaelmnatali]

A #Kubernetes security context defines privilege and access control settings for a Pod or Container.
To specify security settings for a Pod, include the `securityContext` field in the Pod specification.
https://t.co/YuHyAYsKje

[Rafael Moraes Natali @rafaelmnatali]

#github you can clone a repository using a specific ssh key. Use the `core.sshCommand` option from #git clone.

[Rafael Moraes Natali @rafaelmnatali]

#Kubernetes cheat sheet... use the `field-selector` to get all pods that are in a specific state.

See these examples for the "Complete" status...

[Rafael Moraes Natali @rafaelmnatali]

You can secure a #Kubernetes Ingress by specifying a Secret that contains a TLS private key and certificate. The Ingress resource only supports a single TLS port, 443, and assumes TLS termination at the ingress point.

https://t.co/mvec0waSfF

[Rafael Moraes Natali @rafaelmnatali]

Learn how #Ansible can be used to automate the configuration of Network Policies in #Kubernetes

https://t.co/dh3h4UGxmJ

#infrastructure #automation #DevOps

[Rafael Moraes Natali @rafaelmnatali]

@kcduk_io @KubernetesDays Submitted my proposal today!