DevOps Hunter Security Automation

 Overview of DaemonSets Kubernetes DaemonSet is one of the controllers which are at the Kubernetes Master node. A DaemonSet ensures that all or some nodes run a Pod As nodes are added to the Kubernetes cluster, Pods have added accordingly for each node as per the DaemonSet defined. As nodes are removed or drained from the Kubernetes cluster, they are GC. Deleting a DaemonSet will clean up those Pods it created on each node The DaemonSet Controller creating pods on each nodes Where we can use this DaemonSet? When a Kubernetes cluster running many microservices with multi-nodes there will be a need for Monitoring the system resources with collecting metrics and Logging should be enabled for the application level or database level to collect respective access and server-specific logs. Some example daemon pods can be: Collectd, Node exporter -- Monitoring daemon on nodes for Prometheus Fluentd, logstash – log collection daemon for ELK, EFK stacks Ceph, glusterd – Storage daemon for Clo...

Hello DevOps Engineers, DevSecOps Professionals, SREs, Platform Engineers, and Kubernetes Enthusiasts! As Kubernetes adoption grows, managing large numbers of YAML manifests becomes increasingly difficult. A typical application deployment may require multiple Kubernetes objects such as: Deployments Services ConfigMaps Secrets Ingress Resources Horizontal Pod Autoscalers (HPA) Service Accounts Managing all these resources individually can quickly become complex and error-prone. This is where Helm comes into the picture. Helm is the most widely used package manager for Kubernetes and is often referred to as the "apt" or "yum" of Kubernetes." In this blog post, we'll learn & explore: What Helm is Why Helm is important How Helm Charts work Installing Helm on Linux Creating and validating Helm Charts Deploying applications using Helm Customizing deployments with values files Best practices for production environments What is a helm chart?  Helm is a package...

We have seen the word 'replicas' in the Docker Swarm services definition time. How to work with ReplicaSet?   What does ReplicaSet do? ReplicaSet will define the group of pods. You can tell how many replicas of pods for your application. The template section will define how many pods and their specification will be defined. Defining ReplicaSet allows you to deploy podand keep it alive as per configuration. How to create ReplicaSet? ReplicaSet relationship with Pod apiVersion: apps/v1 kind: ReplicaSet metadata: name: my-tcat-rs labels: version: "3.0" spec: replicas: 2 selector: matchLabels: project: MyWeb role: frontend template: metadata: labels: project: MyWeb role: frontend env: dev spec: conta...