Author: Vidushi Bansal

Introduction to a Modern Reverse-Proxy: Traefik

Reading Time: 3 minutes Traefik is an open source API gateway, written in Golang and was developed in a Unix-centric way. It is designed to simplify the complexity regarding microservices operations. Traefik performs auto-configuration of services, which means that the developer only needs to worry about developing and deploying applications. Traefik auto-configures with sensible defaults and sends a request to the said service. With changing requirements and needs of Continue Reading

Clusters

Reading Time: 4 minutes Open-source container clusters and their managed equivalents have evolved and gradually taken on large-scale production workloads. Kubernetes and its expanding ecosystem of Cloud Native projects have become the platform of choice for managing and scheduling containers. By implementing all of the features described above, Kubernetes empowers developers to scale alongside their success. The managed Kubernetes offerings provide them with even greater flexibility while minimizing DevOps Continue Reading

Kubernetes: Best Practices

Reading Time: 3 minutes Building large Clusters:  A cluster is a set of nodes running Kubernetes agents, managed by a master. It supports clusters with up to 5000 nodes. When setting up a large Kubernetes cluster, the following issues must be considered. Quota Issues: To avoid running into cloud provider quota issues, Increase the quota for things like CPU, IPs, etc. ETCD storage: To improve performance of large clusters, Continue Reading

RBAC in kubernetes

Reading Time: 4 minutes Starting with Kubernetes version 1.6.0, cluster security was ramped up considerably. In earlier versions, if you managed to acquire the authentication token from one of the pods, you could use it to do anything you want in the cluster. RBAC in kubernetes prevents unauthorized users from viewing or modifying the cluster state. The default ServiceAccount isn’t allowed to view cluster state, let alone modify it Continue Reading