9. Strategic vs Tactical

   Entire books have been written on the topic of Strategic vs Tactical. At the risk of creating more noise, I'd like to add my experience to the collection.

   Talking with Tom Hatch about, well, a lot of things, this topic came up and he had the best illustration. I'm sure …

   read more

10. Automatic Updates for Raspberry Pi's

    Problem

    Raspberry Pi's are great but they don't automatically update themselves. And once we've figured out how to make them do whatever it is we wanted them to do, we're not likely to log back in just for updates.

    We need to set the machine to update itself.

    Solution

    There …

    read more

11. Using cert-manager in Kubernetes with Lets Encrypt

    Problem

    We have Kubernetes. We need a cert. We want to use Let's Encrypt to create (and manage) that cert for us.

    Solution

    We can install cert-manager and, with three objects, do exactly that. At a high level, we create a ClusterIssuer, we configure it with our cloud credentials (in …

    read more

12. Rotating Pinniped Credentials in Tanzu Kubernetes Grid

    Problem

    We've successfully implemented user authentication in our TKG clusters. Now, we'd like to update the client ID/secret for our TKG Management Cluster.

    Solution

    TKG uses Pinniped to support authentication, including to OIDC providers. However, exactly which Kubernetes object we need to update/reconfigure is not immediately obvious. Fortunately …

    read more

13. Cluster Node Autoscaling in Tanzu Kubernetes Grid (TKG)

    Problem

    We need to reliably implement cluster autoscaling for our Kubernetes platform. How can we do that? And how can we know it's working?

    Solution

    TKG uses the ClusterAPI provider, part of the Cluster Autoscaler but makes it easy to configure. We'll ask TKG to enable Cluster Autoscaler for us …

    read more

14. User Management in Tanzu Kubernetes Grid (TKG)

    Problem

    User management is not part of Kubernetes. You have to tie Kubernetes to an external system. This gets.... complicated.

    Solution

    For TKG, we can hook our Kubernetes clusters up to any OIDC provider. For this excercise, we'll use Okta. At a high level, here's what we'll do.

    • Create a …

    read more

15. GPU-Enabled Kubernetes Clusters with Tanzu Kubernetes Grid

    Stated Goal

    We want easy GPU access for Kubernetes workloads in our TKG clusters. This is done by:

    • Installing GPU device drivers on our Kubernetes worker nodes
    • Installing the device plugins on our Kubernetes worker nodes
    • Applying the appropriate labels to our Kubernetes worker nodes so that GPU workloads can …

    read more

16. kapp-controller Getting Started

    Problem

    As of today, there is no single answer to the question "How do I deploy my workload?". Helm Chart? A set of yaml files? Templated yaml files?

    And not just user-facing apps - how do I consistently deploy ingress controllers? K8s cluster user auth services? Diagnostics, metrics, and so forth …

    read more

17. Vsphere 7u1 - Embedded Kubernetes with HA Proxy and Ubiquiti Home Networking Setup

    Problem

    Now that Vsphere 7u1 is out (yay!), you, too, can run Vsphere with Kubernetes without NSX-T. But for the home lab of a former developer, what does that look like? We have our fancy Ubiquiti networking but we're not sure how to make the right networks. We also don't …

    read more

18. Vsphere 7 with Kubernetes Quickstart - User Edition

    Problem

    You got a Kubernetes! Your Vsphere team has given you access to a Vsphere Workload Management Namespace, which means you can start making clusters! But how, exactly? Assuming they didn't give you enough directions, how do you from 'access' to 'I have a Kubernetes workload!' ?

    Solution

    At a high …

    read more

« Page 2 / 4 »