Category: Kubernetes

  • The source code for this article is available on GitHub. I recently purchased the GMKtec NucBox K11 Mini PC for building my AI homelab and support my ongoing journey on MLOps and deep learning. This blog post explains my motivations for building my AI homelab, the difficulties I encountered along the way, the design decisions I…

    + , , , , , , ,
  • The source code for this article is available on: GitHub, GitCode. Kubeflow transforms Kubernetes into a self-service platform for AI practitioners and data scientists alike. It incorporates both established and emerging cloud and AI-native projects such as Istio, Envoy and Knative to support the entire MLOps lifecycle: data cleaning and preprocessing, model training, validation and serving etc. Originally developed by Google to…

    + , , , , , , , ,
  • The source code for this lab exercise is available on GitHub. GitOps is the practice of delivering infrastructure and applications in a declarative manner based on a single, authoritative source of truth. Oftentimes, the source of truth is defined within a Git repository, hence the term GitOps, though recent developments have…

    + ,
  • Ceph is a distributed, scalable, fault-tolerant solution for provisioning block, file and object storage to applications. While deploying Ceph to Kubernetes with Rook is simple and is sufficient for most Kubernetes use cases, certain scenarios may benefit from configuring Rook with an external Ceph cluster instead or as an additional option:…

    + ,
  • DISCLAIMER: The contents in this article must NOT be considered as official CKS training material by any means and is provided solely for reference. CKS candidates are strongly encouraged to consult official CNCF training content such as LFS260: Kubernetes Security Essentials and study independently for the exam. Encrypting data at rest and in transit…

    + , ,
  • I purchased the LFS260: Kubernetes Security Essentials course about a month ago and was working through the course material recently in preparation for the Certified Kubernetes Security Specialist (CKS) exam. The course included plenty of hands-on lab exercises covering each topic in detail which I followed through by creating a 2-node kubeadm cluster on…

    + , ,
  • Inspired by How eBPF will solve Service Mesh – Goodbye Sidecars | Isovalent Blog Service meshes are an infrastructure layer designed for the microservices era and typically provide the following features on top of microservices-oriented platforms such as Kubernetes: (source: “How eBPF will solve Service Mesh – Goodbye Sidecars | Isovalent Blog”)…

    + , , ,
  • The source code for this lab exercise is available on GitHub. Apache Kafka (Kafka) is an open source event streaming platform governed by the vendor-neutral Apache Software Foundation. It is optimized for processing vast amounts of data in real time, focused on availability, reliability and scalability. At the heart of Kafka is the…

    + , ,
  • Recall that each Kubernetes request goes through 3 stages as it is evaluated by the API server: See also: Controlling Access to the Kubernetes API | Kubernetes While many built-in admission controllers are enabled by default on Kubernetes, it was already possible since the early days of Kubernetes to extend admission control by…

    + ,
  • The source code for this lab exercise is available on GitHub. In our previous article Running stateful workloads on Kubernetes with Rook Ceph, we saw how Kubernetes CSI enables us to take volume snapshots on supported storage backends as a first step towards protecting our data on Kubernetes. However, snapshots operate at the infrastructure…

    + , , ,