Articles on Kubernetes — This series covers Kubernetes topics in depth. It is done in a practical way where you get your “hands dirty” by trying things out. ● ConfigMaps | Kubernetes ConfigMaps | Kubernetes A ConfigMap is an API object used to store non-confidential data in key-value pairs. Pods can consume ConfigMaps as…faun.pub ● Secrets | Kubernetes Secrets | Kubernetes Secrets are similar to ConfigMaps but are specifically intended to hold confidential data.faun.pub

An overview of the Linux “dmesg” and “uname” command — Kernel Ring Buffer The kernel ring buffer is a data structure that records messages related to the kernel's operation. It is a special kind of buffer with a constant size, so as an outcome while receiving new messages automatically deletes the older ones. dmesg (diagnostic message) dmesgcommand displays kernel-related messages on Unix-like systems. It is used…

Distribute the helm charts from a private repository — Suppose, we have a scenario where we want to distribute our helm chart internally or within the organization. One of the ways to achieve that is to create a private repository using the Apache Server and the server will serve as a helm repository.

AppArmor for docker and kubernetes — AppArmor is a Linux kernel security module that allows the system administrator to restrict programs’ capabilities with per-program profiles. Profiles can allow capabilities like network access, raw socket access, and the permission to read, write, or execute files on matching paths. In this article, we will discuss how we can…

A series on Linux — Linux Architecture

A guideline to encrypt kubernetes secrets data. — Etcd Overview Kubernetes uses etcd as Kubernetes’ backing store for all cluster data. Etcd is a consistent and highly-available key-value store. In this article, our main concern is how kubernetes stores secrets on the etcd cluster. Since secrets can be very sensitive to be compromised. We need to be extra careful about…

Seccomp for docker and kubernetes — In this article, we will discuss Seccomp. Seccomp stands for secure computing mode and has been a feature of the Linux kernel since version 2.6.12. It can be used to sandbox the privileges of a process, restricting the calls it is able to make from userspace into kernel space. Kubernetes…

Helm hook configurations and helm release test — Previous Article: Helm — Data Sharing Between Parent and Child Chart Helm provides us with a chart mechanism that allows us to interfere at certain points in a release’s life cycle. For example, we can use hooks to: ● Prioritize the task during the installation process. Such as, loading a…

Data exchange between parent and child chart in helm — Previous Article: Helm — Dependencies In helm, we can exchange data between the child chart and the parent chart. And also we can manipulate child chart values from parent chart. The various ways to achieve that are discussed in this article. Overriding Values from a Parent Chart In helm, a sub-chart/child chart is also considered “stand-alone”…