Hello guys, this is a short guide for explaining how to run the kube-bench tool against your EKS clusters via Gitlab CI Pipeline. For those who never had heard about the kube-bench, It’s an OSS tool created by AquaSecurity that checks whether Kubernetes is deployed securely by running the checks…

Hey, I’m back here to share a much more efficient way to scale your Gitlab Runner using a custom metric about the number of jobs, instead of using the default metrics of resource usage. To do this, we need to export the metrics to the API “/apis/external.metrics.k8s.io/v1beta1” into Kubernetes. Before…

Hello folks, I’m back to share something interesting that happened recently with a colleague of mine during the deployment of a new version of an app in our EKS cluster. He asked me for help to figure out why the Kubernetes was not assigning an IP address to the Ingress…

Hello, I’m back again, but now to share a super cool way to improve Gitlab CI pipelines. Sometimes it’s hard to visualize the workflow due to many jobs, mainly when you are using Gitlab to create a Terraform workflow to run against multiple environments. Even though that Gitlab has the…

I am just sharing a wired behavior trying to run the Helm Diff Upgrade to check what Helm Upgrade would change to a chart of mine installed in the EKS cluster. Follow below the error that I got running “helm diff upgrade”: It’s interesting because I did remember that…

If you are working with Kubernetes you probably heard the announcement about the dockershim deprecation last year (as a part of the Kubernetes v1.20 release). At that time, the Dockershim Deprecation FAQ was created, where it’s possible to understand much better the plan to remove it from the codebase of…

We must take into account that when we are working with EKS, will exist an important behavior around the network context that is the reservation for IP addresses. This behavior is extremely important for optimizing the IP address allocation to a POD inside the EKS cluster. Still, depending on the…

Sometimes we experience some small problems during troubleshooting inside the Kubernetes cluster, mainly about to list processes running there, or trying to execute commands like curl or netstat. This is pretty much normal when we are trying to run any one of those commands mentioned above inside a container. …

In a little less than 5 months that I started working on an American Cloud Consulting Company, I was assigned the task to migrate the production Cassandra Cluster of a client of ours as one of the first tasks of mine. To be honest I was scared at first, mainly…