kind-configs

my KIND configurations for different practices

CKA, CKAD and CKS test environment support calico and flannel. The KIND cluster configrations will be added first.

1. [*] kustomize

2. [*] jsonnet

3. [*] tanka

4. [*] jsonnet-bundler

5. [*] helm

6. [] kubecfg

7. [*] telepresence

8. [*] skaffold

9. [*] tilt

10. [*] Service catalog

11. [*] github self-hosted actions-runner for kubernetes

12. [*] Istio : Fundamentals for Istio by Solo.io, Intermediate for Istio by Solo.io, Fundamentals for Istio Ambient Mesh by Solo.io

13. [*] envoyproxy: Envoy Fundamentals, Fundamentals for Envoy by Solo.io

14. database

    1. [*] mysql operator

    2. [] postgresql

    3. [] ClickHouse

15. Security

    1. [] App Armor

    2. [*] Calico: CERTIFIED CALICO OPERATOR: LEVEL 1, CERTIFIED CALICO OPERATOR: AWS EXPERT

    3. [] hsm

    4. [] Trivy

    5. [] Sysdig

    6. [] Falco

16. Certification management

    1. [*] cert-managr

    2. [*] Let’s Encrypt

    3. [*] ACME webhook for GoDaddy: helm based

17. LMA stack: logging, monitoring and alerting

    1. [*] ECK

    2. [] logstash: elastic doesn’t provide logstash for k8s

    3. [] Fluentd

    4. [] alerting ?

18. application cicd

    1. [*] argo-workflow

    2. [] Progressive Delivery—​argocd rollouts

    3. [*] knative

    4. [*] gitops argocd

    5. [] tiggermesh

    6. [*] tekton, Cloud Native CI/CD, used by knative and triggermesh

    7. [*] fluxcd: one project one instance

19. Build

    1. [*] bazel

    2. [] Buck

    3. [] BuildXL

20. Secret Management

    1. [] secret management https://github.com/banzaicloud/bank-vaults

    2. [*] sealed-secrets

    3. [] External Secrets

    4. [] Secrets Store CSI

21. Kubernetes cloud provider

    1. [*] eksctl

    2. [*] Alibaba Cloud Container Service for Kubernetes (ACK)

22. API gateway, Service Mesh

    1. [*] mesh, basically istio now is the de facto standard.

23. AI, Big Data, Machine Learning

    1. [] kubeflow: installation

Prerequisites

Docker, kind, kinder, jq, yq, kustomize and helm are installed at your machine

Usage

#in wsl2 + docker, run following command before start docker service
sudo mkdir /sys/fs/cgroup/systemd
sudo mount -t cgroup -o none,name=systemd cgroup /sys/fs/cgroup/systemd
sudo service docker start

./up.sh [cluster-name]

Development

up.sh will call kind with the cluster configuration to create the cluster if there isn’t kind clusters named kind. after the creation of the cluste, up.sh will call the corresponding hook script if it exists under ./configs folder.

naming convention

1. [clust-name]-cluster.yaml: mandate

2. [clust-name]-hook.sh: optional

Clusters

Clusters and their configuration features and purposes

Incident Reports or Post-mortems

• Incident Reports or Post-mortems

Labs

• Kubernets Tasks

• Kubernetes CKA hands-on challenge

• Telepresence Tutorials

• Cilium

• Service Catalog Walkthrough

• etcd operations guide

• Network Policy

• Migrating the Kubernetes Network Overlay With Zero Downtime

• istio