• Mirantis — Creators of LENs
  • https://docs.mirantis.com/welcome/
  • https://github.com/lensapp/k8slens-status

• Komodor - Monitoring

• The Kubernetes API

• API in One Page

• spec and status

• k8s dev stats

• CHANGELOGS

• k8s admin tips

• Installing

• kubectl cheatsheet-1 - kubectl cheatsheet-2

• kubectl convert plugin

• kustomize

• kpt

• Krew - kubectl plugin manager

  • Krew - kubectl plugins1

  • Krew - krew plugins

  kubectl krew update
  kubectl krew search
  k krew update; k krew upgrade s
  
  kubectl krew install ctx
  kubectl krew install ns

• KubeByExample

• https://learnk8s.io/

• Blogs about k8s

• https://github.com/kubernetes-up-and-running/examples - Kubernetes: Up and Running

• https://github.com/marcel-dempers/docker-development-youtube-series - Mark Dempers

• https://github.com/crackitty/k8s-training-ftbotr

• Antonputra Tutorials

• freecodecamp how-to-become-a-certified-kubernetes-application-developer

• https://www.stacksimplify.com/

• Awesome Lists

  • Awesome-Kubernetes - from project-awesome

  • https://awesome-architecture.com/devops/kubernetes/kubernetes/

  • https://nubenetes.com/ - Awesome k8s list

  • https://github.com/tomhuang12/awesome-k8s-resources

# see krew above
k top no
k top po

# troubleshooting
kubectl get nodes -v=10
kubectl events -n flux-system --for OCIRepository/podinfo --watch
kubectl config set-context --current --namespace=<namespace-name>
journalctl -u kubelet
kubectl config get-contexts

# new env
asdf plugin list all
asdf plugin add kubectl
asdf plugin add flux2
...
asdf list all <util> # get a list of available versions
asdf install <util> <version>
asdf set <util> <version> # set the version for this directory and below
asdf current # list of active plugins

kubectl version
flux version

k3s kubectl get nodes -o wide

• Groups

• Find deprecated resources
  • Pluto
  • https://github.com/doitintl/kube-no-trouble

• Getting Started

• https://www.crossplane.io/

• https://github.com/k8s-at-home/awesome-home-kubernetes

• Arkade - The Open Source Kubernetes Marketplace

• https://www.padok.fr/en/blog/deploy-kubernetes-firecracker

• https://blog.cloudkernels.net/posts/kata-fc-k3s-k8s/

• https://cluster-api.sigs.k8s.io/

• https://rootlesscontaine.rs/ - rootless containers

• https://github.com/kubernetes-sigs/kubespray - uses ansible

  • https://kubespray.io/#/

  • Homelab setup article

  • Computing for geeks - kubespray

• Kind

  • https://kind.sigs.k8s.io/docs/user/quick-start/

  • https://kind.sigs.k8s.io/

• Setup Guides

  • https://github.com/TheCase/kubernetes-on-proxmox

  • https://github.com/devisnotnull/hertzer-proxmox-kubernetes-install-guide

  • Kubernetes cluster with CoreOS using Proxmox and pfSense

• Installers

  • KubeAdmin

  • https://www.downloadkubernetes.com/

  • https://kubernetes.io/docs/reference/generated/kubectl/kubectl-commands#create

  • https://kubernetes.io/docs/setup/#configuring-vsphere-cloud-provider

• MicroK8s

  • memory opt

  • Try Ubuntu microk8s

  • Using Portainer

• https://github.com/kubernetes/minikube

• k0s

  • https://k0sproject.io/ - no arm option

  • https://github.com/k0sproject/k0s - from Team Lens

• https://github.com/doitintl/zorya - GCP on Schedule

• GitOps

• Config Pods and Containers

• Anthos config-management

• Google Config Sync

• Deployment Tools

• Bitnami Resource presets

• Pods

• Init Containers

• Resources

  resources:
          limits:
            cpu: 500m
            memory: 500Mi
          requests:
            cpu: 100m
            memory: 50Mi

• Image Management

  • https://www.devspace.sh/

  • https://skaffold.dev/

  • Image Garbage Collection

  • Pull images from private repo

• Share files in a pod

  • https://kubernetes.io/docs/tasks/access-application-cluster/communicate-containers-same-pod-shared-volume/

• https://github.com/goharbor/harbor — Harbor is an open source trusted cloud native registry project that stores, signs, and scans content

• https://openkruise.io/

• https://kubevela.io/
  • https://github.com/openkruise/rollouts from https://github.com/openkruise/kruise

• https://carvel.dev/

• https://github.com/tumblr/k8s-sidecar-injector

• https://containrrr.dev/watchtower/ — Automatic image updates

• Serverless

  • https://github.com/openfaas/faas - https://www.openfaas.com/ Serverless functions

  • https://github.com/fission/fission - serverless functions

  • https://github.com/nuclio/nuclio - event and data processing

  • https://github.com/virtual-kubelet/virtual-kubelet - gateway?

  • https://fnproject.io/

• https://github.com/kalmhq/kalm - Application Manager

• Keel - automate updates

  • https://keel.sh/

• KubeApps from BitNami

  • https://github.com/vmware-tanzu/kubeapps

  • https://kubeapps.dev/ — deploy apps inside cluster

  • https://bitnami.com/kubernetes/kubeapps

  • https://github.com/bitnami/charts/tree/main/bitnami/kubeapps

  • https://kubeapps.dev/docs/latest/

    kubectl get --namespace default \
    secret kubeapps-operator-token \
    -o go-template='{{.data.token | base64decode}}' 

• Skaffold - auto deploy

  • https://skaffold.dev/

  • https://github.com/GoogleContainerTools/skaffold

• Knative

  • https://knative.dev/docs/

  • https://github.com/knative/client

• From docker-compose

  • https://loft.sh/blog/docker-compose-to-kubernetes-step-by-step-migration/

  • https://kubernetes.io/docs/tasks/configure-pod-container/translate-compose-kubernetes/

  • https://stackoverflow.com/questions/54834455/how-to-convert-docker-compose-to-kubernetes

  • compose to a helm chart

  • https://golangexample.com/convert-docker-compose-to-a-configurable-helm-chart/

• Operator SDK

  • Operator SDK

  • https://operatorhub.io/

  • Introduction

  • https://sdk.operatorframework.io/

  • https://github.com/operator-framework/operator-sdk

• Job and CronJob

  • Job from command line

  • Running a bash script inside a Job object

    containers:
            - name: phylum-runner
              image: 262x09.dkr.ecr.us-west-2.amazonaws.com/backend:4.1.626
              command:
                - bash
                - -c 
                - |
                  for y in $(seq 2021 2023); do 
                    for m in $(seq 1 12); do
                      ./manage.py tenant_command  run_report_phylum -s prod1 --year=$y --month=$m
                    done
                  done
              envFrom:
                - configMapRef:
                    name: x-production-backend-conf

• https://kluctl.io/

• gitops run

• Helm

  Helm

• Operator

  • https://operatorhub.io/

  • https://olm.operatorframework.io/

• Flagger - progressive delivery

• Internal DNS for Services and Pods

  # rabbitmq example
  BROKER_URL=\
  amqp://<username>:<password>\
  @<kubernetes-service-name>.<namespace>.svc.cluster.local:5672/<virtual-host>

• coredns.io

• https://github.com/projectcontour/contour - ingress controller

• Service Mesh
  • https://istio.io/ -
  • https://www.solo.io/products/gloo-mesh
  • Calico
  • https://github.com/chaos-mesh/chaos-mesh
  • https://github.com/linkerd/linkerd2
  • https://github.com/hashicorp/consul - hashicorp mesh

• k8s docs on Multi-tenancy

• https://github.com/clastix/capsule/

• Making k8s Multi-tenant

• Create k8s service / user account restricted to a namespace

• Pod Security Standards

• https://github.com/jtblin/kube2iam

  • Using kube2iam for access

  • Using on Rancher

• https://github.com/aquasecurity/kube-bench

• https://github.com/falcosecurity/falco - runtime security

• https://github.com/aquasecurity/kube-hunter - looks for security weakness (old)

• https://github.com/open-policy-agent/gatekeeper - policy controller

• https://github.com/kyverno/kyverno - policy manager

• https://github.com/bridgecrewio/checkov - config checker

• https://github.com/yannh/kubeconform - manifest validator

• https://github.com/kubescape/kubescape - security scan

• https://github.com/mike-engel/jwt-cli

• https://github.com/openshift/origin - conformance test suite for openshift

• https://github.com/project-copacetic/copacetic - directly patch container image vulnerabilities

• https://github.com/tenable/terrascan - detect compliance and security violations

• Trivy

  • Aquasecurity Trivy Operator - https://github.com/aquasecurity/trivy-operator

  • https://github.com/aquasecurity/trivy - secuity scanner

  • https://github.com/aquasecurity/trivy - image scanner

• Checkly pricing

• Kyverno - Policy Engine

  • https://kyverno.io/docs/introduction/

• Using IAM Service Account Instead of Instance Profile on EKS

• Intent Based Access Control (IBAC)

• Kube Hardening

• Otterize: Intent-Based Access Control

• Decode service-account tokens

• https://kyverno.io/ - Policy Manager

• https://external-secrets.io/latest/,

• Signing Bin - sigstore

• https://www.padok.fr/en/blog/kubernetes-security-resources

• Starboard Operator - vulnerability scanner

• https://console.carbonetes.com/signin

• https://www.pomerium.com/docs - id aware proxy

• https://www.aquasec.com/

• https://www.stackrox.io/

• https://anchore.com/

• RBAC

  • Limiting Access

  • Explained

• rancher local-path-provisioner

• https://github.com/kubernetes-csi/external-snapshotter

• https://github.com/wagoodman/dive - see what is in container

• vcluster - in a namespace

# stop services for db backup
kubectl scale deployment <deployment-name> --replicas=0 -n <namespace>
kubectl patch cronjob <cronjob-name> -n <namespace> -p '{"spec": {"suspend": true}}'
kubectl get pods -n <namespace>
# backup
kubectl scale deployment <deployment-name> --replicas=<original-replicas> -n <namespace>
kubectl patch cronjob <cronjob-name> -n <namespace> -p '{"spec": {"suspend": false}}'
# check
kubectl get pods -n <namespace>
kubectl get deployments -n <namespace>

• https://github.com/kubernetes/kube-state-metrics

• https://github.com/prometheus-operator/kube-prometheus - v51.9.2

  • Upgrade CRDs first

• https://github.com/prometheus-operator/prometheus-operator

  • Prometheus Operator

• Grafana Agent Operator

• Grafana k8s monitoring

• https://github.com/iwilltry42/rancher2-job-monitor

• https://github.com/google/cadvisor then add prometheus

• Monitor, Logging and Debugging

• https://www.kubecost.com/

• https://github.com/thanos-io/thanos - prometheus setup. thanos getting started

• https://github.com/jaegertracing/jaeger - https://www.jaegertracing.io/

• Commercial

  • DataDog

  • sysdig

• Logging

  • https://www.fluentd.org/

  • https://github.com/stern/stern — tail logs (old)

  • https://github.com/boz/kail - tails the logs

    # Include/Exclulde namespace
    kail -n airflow
    kail --ignore-ns=airflow

• https://middleware.io/ - commercial monitoring

• kubectl

  export KUBECONFIG=$PWD/.kube/cp-kdev-k3s.yaml
  
  kubectl ctx
  kubectl ns
  kubectl auth can-i get pods
  kubectl describe pod -n x-production > mro/describe-pods-prod.yml
  kubectl logs podname -c containername --previous
  kubectl config view --minify
  kubectl exec -it x-production-api-xxx -- /bin/bash

• Kubernetic

  • https://docs.kubernetic.com/

• https://octant.dev/docs/

• Lens and Simular

  • https://github.com/lensapp/lens

    • https://k8slens.dev/

    • https://github.com/lensapp/lens-extensions

  • https://github.com/freelensapp/freelens

    • Freelens Extensions

  • https://github.com/gimlet-io/capacitor

  • Headlamp

• Connect to AI

  • https://github.com/xeol-io/kubegpt - links to OpenAI

  • https://github.com/k8sgpt-ai/k8sgpt - scan and diagnos

• Tools

• https://github.com/cnrancher/kube-explorer

• https://github.com/FairwindsOps/pluto - tool to help with k8s objects upgrade
  • Quickstart

• https://github.com/kuberhealthy/kuberhealthy

• https://github.com/kdash-rs/kdash

• https://codeberg.org/hjacobs/kube-ops-view - web ascii dashboard

  • hjacobs - other useful tools?

• https://github.com/doitintl/kube-no-trouble

• Zora - Help with k8s best practices

• Right-Size-Guide (rsg)

• https://www.fairwinds.com/

• https://prodfiler.com/

• https://www.parca.dev/ - profiling

• Troubleshoot Pending Pods

  • debug pending pods - datadog

• https://codeberg.org/hjacobs/kube-ops-view

• https://www.kubecost.com/

• Monitor, Logging and Debugging

• Debug Apps

• Debug Cluster

• Sonobuoy

  sonobuoy run --wait
  results=$(sonobuoy retrieve)
  sonobuoy results $results
  sonobuoy delete --wait
  # during
  sonobuoy status
  sonobuoy logs

• Kubewarden

• Elemental enable centralized, full cloud-native OS management with Kubernetes

• https://carvel.dev/ - kapp controller

• https://www.datree.io/ - datree

• https://keel.sh/ - Operator to automate deployment updates

• https://kustomize.io/

• https://github.com/kubesphere/kubeeye

• https://github.com/cloudnativelabs/kube-shell

• https://github.com/derailed/k9s

• https://github.com/groundnuty/k8s-wait-for

• https://github.com/wagoodman/dive - see inside containers

• https://github.com/kubernetes-sigs/kubespray - deploy prod ready clusters. Docs: https://kubespray.io/#/

• https://github.com/weaveworks/scope - weaveworks

• https://kops.sigs.k8s.io/ - get a production grade Kubernetes cluster up and running

• https://kro.run/ - resource orchestrator

• https://keptn.sh/stable/ - deployments

• Kubernetes-Tools

• DZone - Best Kubernetes Tools

• Kalm - k8s setup

  • https://docs.kalm.dev/ - Kalm makes it easier to setup a working Kubernetes

  • https://github.com/kalmhq/kalm - last commit in Apr21

• Portainer on K8S

  • https://portainer.github.io/k8s/charts/portainer/

  kubectl create namespace portainer
  helm repo add portainer https://portainer.github.io/k8s/
  helm repo update
  helm upgrade -i -n portainer portainer portainer/portainer
  export NODE_PORT=$(kubectl get --namespace portainer -o jsonpath="{.spec.ports[1].nodePort}" services portainer)
  export NODE_IP=$(kubectl get nodes --namespace portainer -o jsonpath="{.items[0].status.addresses[0].address}")
  echo https://$NODE_IP:$NODE_PORT

  • https://www.portainer.io/ Portainer Docs

• Clean up replica sets

  kubectl get rs --all-namespaces | awk '$3 == 0 {print $2, $1}' | while read rs namespace; do
    kubectl delete rs $rs -n $namespace
  done

• Spacelift

  • https://spacelift.io/

• Utilities from Fairwinds

  • https://www.fairwinds.com/open-source-software

  • pluto

  • nova

• Load Testing

  • https://k6.io/open-source/

• Cost

  • VMware tanzu-cloudhealth

  • https://opencost.io/

  • https://spot.io/

  • https://cloudcustodian.io/

• Digital Ocean doc on Scalable Secure Django

• https://docs.replicated.com/

• https://github.com/emberstack/kubernetes-reflector

• https://kubesphere.io/

• https://spinnaker.io/

• https://www.sumologic.com/pricing

• civo

• https://kyverno.io/ - Native policy manager

• Perfectscale for cost optimization

10.4.18.35:8443->10.4.16.236:40672

• Monitoring and Metrics