Several posts this week on Kubernetes operations, from debugging running pods to scheduling and from migrating to Kubernetes at scale to service mesh complexity.

StackHawk sponsors Devops Weekly

Join StackHawk on Tuesday March 25 for a hands-on authenticated security testing workshop. Follow along as we walk through three common authentication scenarios step-by-step. Register:
http://sthwk.com/authentication

News

A detailed case study focused on a large infrastructure architecture effort moving from managing virtual machines to Kubernetes.
https://stackoverflow.blog/2021/05/19/rethinking-system-architecture-can-kubernetes-help-to-solve-rewrite-anxiety/

An important post on the risks with the AWS “free” tier when it comes to learning and unexpected bills. This can apply to other developer-focused metered services as well.
https://cloudirregular.substack.com/p/please-fix-the-aws-free-tier-before

A post on adopting service mesh that’s also a post on the risks inherent in adopting early stage technologies, in this case looking at dropping Istio and moving to Linkerd.
https://medium.com/polymatic-systems/service-mesh-wars-goodbye-istio-b047d9e533c7

Some observations on the imbalance in knowledge between vendors and buyers and the importance of market forces in solving some of the security challenges that are ever more visible.
https://www.scmagazine.com/perspectives/fix-a-broken-market-and-we-can-resolve-so-many-cybersecurity-issues/

New features in Kubernetes often lead to interesting user tooling a little later. This post looks at EphemeralContainers and the kubectl debug tool for debugging running pods.
https://martinheinz.dev/blog/49

Another pod on debugging Kubernetes, this time looking at pod status and in particular looking at debugging pending pods with the scheduler.
https://www.datadoghq.com/blog/debug-kubernetes-pending-pods/

A pair of posts looking into garbage collection in Java and how to monitor its impact on your applications.
https://sematext.com/blog/java-garbage-collection-logs/
https://sematext.com/blog/java-gc-log-analysis-tools/

Tools

Batect is a tool for defining repeatable tasks to aid local development. Running builds, executing tests, running deployments, spinning up dependent services, etc.
https://batect.dev