#kubernetes - December 2018

K8s API server cve https://groups.google.com/forum/m/#!topic/kubernetes-announce/GVllWCg6L88

More details

@here upgrade Kubernetes ASAP. remote root capabilities are believed possible.

https://news.ycombinator.com/item?id=18612571
gravitational guys have reproduced the kubernetes exploit

Any feels on EKS yet?

We’re still not doing much with it

hey @patrickleet! just connected you with @davidvasandani in #terraform

what a nightmare

I'm sure theres people out there not realizing their clusters exposed

Created a #kubecon channel for those going. Would be create if we could have some members connect.

Looks interesting
https://medium.com/booking-com-infrastructure/introducing-shipper-daf9244e3882

yea, that’s neat that it works together with helm

looks like it introduces a new primitive to manage the process, so it should work well with other CI/CD systems (e.g. #codefresh)

@dustinvb ☝️

anyone read this?

ksonnet looks really interesting, trying to uncover what advantages this has over go templates

what is the standard people are using to deploy kubernetes across the board? KOPS or somthing?

we use mostly kops since it provides a complete solution with in place cluster updates/upgrades

but we also have EKS modules

EKS currently lacks some features and requires blue/green deployment with ASGs to perform updates/upgrades

yea just trying to get some more hands on experience with it!

Yea, so there’s no one tool that I would recommend

using one tool for all clouds, means you only get the lowest-common-denominator

many of the clouds offer some features to differentiate themselves

so for google, I’d recommend GKE all the way and using gcloud on the command line

vs, on AWS I think kops is still the best option

wow

And using github to publish the roadmap

that’s forward

I created a #kops channel for specific chatter around that.

Speaking of cluster upgrades... https://aws.amazon.com/blogs/compute/making-cluster-updates-easy-with-amazon-eks/

I was all... YAAAAAAY

and then AWWWWWW 😞

Oops, swing and a miss!

@Daren how are you deploying Argo?

Yes

I saw it looked like it was 3 charts

Do you deploy all of them?

Lukasz manages it, invite him in and I’m sure he will share

He has worked closely with them and contributed back

@wookasz ^

@wookasz has joined the channel

hey @wookasz! i'm curious about deploying argo for one of our clients

was wondering if you could point me in the right direction

(are you using a helmfile by anychance?)

Yes

This makes me really worried to touch EKS for anything close to mission critical https://github.com/awsdocs/amazon-eks-user-guide/issues/17

they are working on that https://github.com/aws/containers-roadmap/issues/57

@Daren ☝️

this looks like the best solution so far

@mumoshu has joined the channel

anyone take the k8 exam on here?

I had a call with one of the guys at KubeCost - they are looking for beta testers

With kubecost you can see how much things running on kubernetes are costing you backed out to your AWS spend

know the cost of any labels

know how much a namespace is costing

etc.

let me know if your interested