What does it take to build a Kubernetes cluster on bare metal?

In this episode of KubeFM, you will learn how to plan and execute a successful setup for a bare-metal Kubernetes cluster.

You will follow Mathias' journey as he rebuilt his cluster several times and learn how to:

- Identify dependencies and priorities between components to avoid incidents in the future.
- Leverage FluxCD to have a predictable and documented setup.
- Secure the nodes from external traffic with firewalls and Cilium cluster-wide network policies.
- Use Talos to have a self-contained Kubernetes operating system.

Mathias also shared tips and advice for other engineers embarking on the same process.

Watch it here: https://kube.fm/bare-metal-kubernetes-mathias

Listen on:

- Apple Podcast https://kube.fm/apple
- Spotify https://kube.fm/spotify
- Amazon Music https://kube.fm/amazon
- Overcast https://kube.fm/overcast
- Pocket casts https://kube.fm/pocket-casts
- Deezer https://kube.fm/deezer

🗓 Kubernetes events starting in the next 24 hours:

21 Nov, 16:30 UTC - Automating legacy system management with GitOps: a journey from on-premises to Kubernetes | Cloud Native Linz - 📍 In-person meetup

21 Nov, 17:00 UTC - Connect Terraform with Argo CD for easy Kubernetes bootstrapping | CloudTruth - 📍 Online webinar

21 Nov, 18:30 UTC - Review of Kubernetes releases & Kubernetes OIDC workload identity for external resources | Cloud Native Madrid - 📍 In-person meetup

→ See all Kubernetes events

Starting in 3 months:

🔥 Advanced Kubernetes course (Singapore) (Learnk8s)
📍 In-person workshop

📅 19 Feb
⏰ 19/02/2024, 01:00 UTC

→ Visit the website

Starting in 3 months:

🔥 Advanced Kubernetes course (Learnk8s)
📍 In-person workshop

📅 19 Feb
⏰ 19/02/2024, 09:00 UTC

→ Visit the website

This week on the Learn Kubernetes Weekly:

⚖️ Load balancing long-lived connections
💪 40% more performant with Cilium
👷‍♀️ Single-tenant architecture with Crossplane
🥷 1 yaml away from disaster
📚 SecurityContext with examples

Read it now: https://learnk8s.io/issues/54

🗓 Kubernetes events starting in the next 24 hours:

23 Nov, 03:15 UTC - Cloud Technical Series APAC Q4 2023 | Google - 📍 Online conference

23 Nov, 13:00 UTC - Automate Kubernetes with Rundeck | Rundeck Europe, Middle East, & Africa - 📍 Online meetup

22 Nov, 16:00 UTC - Harnessing the power of operators in Kubernetes | Cloud Native Vienna - 📍 Online & in-person meetup

23 Nov, 12:00 UTC - 🔥 Open source cloud strategies and solutions | Sardina Systems - 📍 In-person conference

→ See all Kubernetes events

Starting in 3 months:

🔥 CIVO Navigate North America 2024 (Civo)
📍 In-person conference

📅 20 Feb
⏰ 20/02/2024, 08:58 UTC

→ Visit the website

Starting in less than 24 hours:

🔥 Open source cloud strategies and solutions (Sardina Systems)
📍 In-person conference

📅 23 Nov
⏰ 23/11/2023, 12:00 UTC

→ Visit the website

Starting in about a week:

🔥 DevSecOps 2023 (Conf42)
📍 Online conference

📅 30 Nov
⏰ 30/11/2023, 12:00 UTC

→ Visit the website

🗓 Kubernetes events starting in the next 24 hours:

23 Nov, 16:00 UTC - ArgoCD pitfalls and mysteries | Cloud Native Austria - 📍 In-person meetup

23 Nov, 17:00 UTC - Autoscaling Kafka consumers in Kubernetes | Cloud Native Bilbao - 📍 In-person meetup

24 Nov, 00:30 UTC - Managing applications with Kubernetes | SpringPeople - 📍 Online webinar

→ See all Kubernetes events

Starting in about a week:

🔥 Kubernetes Community Days Utrecht 2023 (KCD Netherlands)
📍 In-person conference

📅 1 Dec
⏰ 01/12/2023, 07:00 UTC

→ Visit the website

🗓 Kubernetes events starting in the next 24 hours:

25 Nov, 04:30 UTC - Leveraging Kubernetes as the foundation for your development environments | Cloud Native Thane - 📍 In-person meetup

25 Nov, 05:30 UTC - Kubernetes and Cloud Native for beginners | Infosys & Infracloud - 📍 In-person conference

→ See all Kubernetes events

Starting in 2 months:

🔥 Advanced Kubernetes course (Learnk8s)
📍 Online workshop

📅 25 Jan
⏰ 25/01/2024, 13:00 UTC

→ Visit the website

🗓 Kubernetes events starting in the next 24 hours:

27 Nov, 09:00 UTC - 🔥 Advanced Kubernetes course (Munich) | Learnk8s - 📍 In-person workshop

→ See all Kubernetes events

Starting in 2 months:

🔥 DevOps 2024 (Conf42)
📍 Online conference

📅 25 Jan
⏰ 25/01/2024, 17:00 UTC

→ Visit the website

Starting in two weeks:

🔥 DevOpsCon Singapore (S&S Media)
📍 Online & in-person conference

📅 11 Dec
⏰ 11/12/2023, 01:00 UTC

→ Visit the website

Starting in about a week:

🔥 European Cloud Summit (Cloud Summit)
📍 In-person conference

📅 4 Dec
⏰ 04/12/2023, 08:00 UTC

→ Visit the website

Starting in less than 24 hours:

🔥 Advanced Kubernetes course (Munich) (Learnk8s)
📍 In-person workshop

📅 27 Nov
⏰ 27/11/2023, 09:00 UTC

→ Visit the website

Starting in about a week:

🔥 DevOpsCon Munich (S&S Media)
📍 Online & in-person conference

📅 4 Dec
⏰ 04/12/2023, 12:00 UTC

→ Visit the website

🗓 Kubernetes events starting in the next 24 hours:

27 Nov, 16:15 UTC - Building distributed applications with Dapr & server-side WebAssembly with Spin | Stockholm - 📍 In-person meetup

28 Nov, 10:00 UTC - Mastering capacity planning for Kubernetes | Cloud Native Kuala Lumpur - 📍 In-person meetup

→ See all Kubernetes events

By default, Kubernetes Secrets are not encrypted; values are merely base64 encoded.

And this is fine — at least, this is what Mac argues in this episode of KubeFM.

Mac says it all comes down to thinking strategically about security and where the Secrets could be leaked.

In this episode, you will learn:

- How to define a threat model to inform your security posture and mitigations.
- How Kubernetes Secrets offer sufficient guarantees for most common threat models.
- If you should use Hashicorp Vault or Kubernetes Secrets (and when not to use auto-unsealing).

Mac also covers tips and advice on becoming a security expert.

Watch it here: https://kube.fm/kubernetes-secrets-mac

Listen on:

- Apple Podcast https://kube.fm/apple
- Spotify https://kube.fm/spotify
- Amazon Music https://kube.fm/amazon
- Overcast https://kube.fm/overcast
- Pocket casts https://kube.fm/pocket-casts
- Deezer https://kube.fm/deezer