Kubernetes Book Club 📚
Book: Istio in Action
This week Chapters: 6
Solving application networking challenges
Every Friday @ 1:00PM EST
Get a calendar invite and join the Discord here santana.dev/book-club
Pinned Tweet
Follow
Carlos Santana
@csantanapr
Containers Specialist SA | Kubernetes contributor | Steering Committee | Opinions are my own
Carlos Santana’s Tweets
AWS Prescriptive Guidance includes patterns for EKS, for example:
Access container applications privately on Amazon EKS using AWS PrivateLink and a Network Load Balancer
docs.aws.amazon.com/prescriptive-g
12
It took 5 minutes to migrate to substack including custom domain configured
news.santana.dev
I will be resuming my newsletter in 2023 🚀
3
Show this thread
🚨PSA: I just saw the memo that revue newsletter service is shutting down (January 18, 2023) help.getrevue.co/en/articles/68
Quote Tweet
Unfortunately revue is getting discontinued and I have to migrate the newsletter to substack. I will be doing that today, hopefully the transition will be smooth.
Show this thread
1
2
Show this thread
What's better than Kubernetes Best Practices? 🤔
A CLI tool that checks if you are following Best Practices
Recently open sourced tool hardeneks, try it on your EKS cluster 🚀
github.com/aws-samples/ha
25
95
Suggested Read: AsyncAPI vs OpenAPI: Answers to Your Burning Questions About the Two Leading API Specs solace.com/blog/asyncapi- via
2
Last week, I ran some of my own experiments with AWS Lamdba SnapStart and Java Spring Boot. I have a documented history of complaining about JVM cold start times dating back 3 years before AWS Lambda was first announced (Google App Engine). So here are my findings... 1/22
4
41
141
Show this thread
A lot of people are going to be buying raspberry pi this Christmas with advising on learning lower-level infrastructure fundamentals on this space today
5
10
48
cloud native #securitycon, #gitopscon, and #backstagecon the top 3 events with the most attendees during KubeCon NA 2022
2
Interesting! ko, Talos Linux, and Kubescape are also applying to CNCF as sandbox projects
List here docs.google.com/spreadsheets/d
Quote Tweet
Why Loft Labs Is Donating DevSpace to CNCF - The New Stack thenewstack.io/why-loft-labs-
2
9
And for all the nerds like me, I forgot to mention one of the best parts of 1.26 is the new enhancements GitHub project board replacing the infamous spreadsheet
5
Show this thread
🚀 Kubernetes v1.26: Electrifying 🚀
This release includes a total of 37 enhancements
My top:
1. CEL in Admission Control graduates to alpha
2. Dynamic Resource Allocation graduates to alpha
Don't miss the webinar on Tuesday, January 17, 2023
kubernetes.io/blog/2022/12/0
1
14
44
Show this thread
Why Loft Labs Is Donating DevSpace to CNCF - The New Stack
2
5
14
It also supports spot, here is a small EKS cluster I created a few minutes ago for something I'm testing
1
4
Show this thread
🚀Introducing EKS Node Viewer on your terminal 🔥
github.com/awslabs/eks-no
eks-node-viewer is a tool for visualizing dynamic node usage within a cluster. It was originally developed as an internal tool at AWS for demonstrating consolidation with Karpenter.
6
35
200
Show this thread
In case your are feeling generous these holidays you can DM me for my shipping address and send me a Lightboard. 🎅
revolutionlightboards.com/collections/li
1
1
Kubernetes Book Club 📚
Book: Istio in Action
This week chapters 5 and 6
Reducing the risk of deploying new code
Solving application networking challenges
Fridays 1:00PM EST
Get a calendar invite and join the Discord here santana.dev/book-club
2
7
Threat Hunting with Kubernetes Audit Logs | Square Corner Blog
Good examples using CloudWatch filters to analyze EKS kube-api audit logs
2
5
Looking forward to this webinar, last week I started learning about crossplane and upbound to improve the experience for customers with AWS providers
Quote Tweet
Join us in 
ONE HOUR for our live webinar with @hasheddan and @weaveworks to learn how to shift your cloud applications deployment security left 
buff.ly/3X9YNb1
ONE HOUR for our live webinar with @hasheddan and @weaveworks to learn how to shift your cloud applications deployment security left buff.ly/3X9YNb1
2
3
New release of 1.19.4 includes two CVE fixes CVE-2022-41720 and CVE-2022-41717
groups.google.com/g/golang-annou
One of the them affecting http2 server
1
11
Amazon Joins the Open Invention Network (OIN)
openinventionnetwork.com/amazon-joins-t
"OIN, the organization formed to safeguard open source software (OSS) and the largest patent non-aggression community in history, announced today that Amazon has joined as a community member"
1
1
1
4
2
11
17
Show this thread
ChatGPT, How do I run docker builds on Kubernetes?
- dockershim (/var/run/docker.sock)
- buildah
- kaniko
1
1
5
This is not your typical functions vs. containers slide deck
Is a set of new whitepapers from talking to a lot of customers and understanding their use cases and how they want to modernized their applications
2
Show this thread
Serverless or Kubernetes on AWS
Guidance and whitepapers from authors and including great contributors from my team at
aws.amazon.com/architecture/s
1
6
9
Show this thread
Kubernetes Book Club
Book: Istio in Action
Chapters: 3,4,5
Istio’s data plane: The Envoy proxy
Istio gateways: Getting traffic into a cluster
Reducing the rist of deploying new code
Fridays 1:00PM EST
Get a calendar invite and join the Discord here
3
6
so I wrote a thing redmonk.com/jgovernor/2022 turns out
decided it wanted to be included in the post before i hit publish so it made some relevant announcements at #reinvent today. I will be writing more about this
5
16
51
Introducing VPC Lattice
You can define policies for traffic management, network access, and monitoring across AWS compute services (instances, containers, and serverless functions) Connectivity between VPCs and accounts.
No sidecar proxies!
8
31
Show this thread
Here are all the Kubernetes Sessions at AWS re:Invent 2022
A lot of the presenters I have the pleasure to work with, making the best cloud to run Kubernetes on your terms.
9
25
Resuming Kubernetes BookClub this week
Book: Istio in Action
Chapters: 3,4,5
3. The Envoy proxy
4. Getting traffic into a cluster
5. Reducing the risk of deploying new code
Fridays 10:00AM PST (1:00PM EST)
Get a calendar invite and join the Discord here santana.dev/book-club
3
9
Just found out about “Hacking the Cloud” by
hackingthe.cloud
I like that each section is a short read and also has an AWS CTF
hackingthe.cloud/aws/capture_th
4
17
Transparent encryption of node to node traffic on Amazon EKS using WireGuard and Cilium | Containers
Remember that Service Mesh is not the only way to encrypt traffic between nodes
1
1
16
Microservices development using AWS controllers for Kubernetes (ACK) and Amazon EKS blueprints | Containers
Define your cloud service with kube yaml!
3
There is always something to be grateful for.
13