Introduction The idea of this short tutorial is to see if we can get Cilium mutual-auth working on a sef-managed cluster. I used a 3-node cluster on AWS based on - Ubuntu 20.04 - Containerd 1.6.21 - Kubernetes v1.27.4 Install instructions are based on https://github.com/xxradar/k8s-calico-oss-install-containerd, …

Introduction Pods are the fundamental building block of Kubernetes applications. They are the smallest, most basic deployable resource and can represent as little as a single instance of a running process. Pods are made of one or more containers sharing specific Linux namespaces ( netns, utsns and ipcns). That is why…

Solving the untrusted certificate issues in pods !! Introduction Mitmproxy is a free and open source interactive HTTPS proxy. All information can be found here https://mitmproxy.org/. In this short tutorial, we are not going to focus on all cool features mitmproxy offers, but rather on how to use it inside Kubernetes. …

I’ve always been intrigued by how kubernetes pods relate to containers. As you probably know, containers running on the same host, share the Linux kernel. That’s why a container image does not contain a kernel, only software and tools that make up a distro like for example a package manager. …

Today, I had a few minutes to take the less then 100 seconds challenge to install Robusta, an open source platform for Kubernetes troubleshooting and automation with some pretty cool integration options like Slack, Teams, etc … Robusta is capable of handling application error (ex. Java), track kubernetes changes (ex…

Why consider a service mesh? I’ve always been very intrigued by the service mesh concept. It can offer quite some intriguing features, but often they are perceived as a nice to have, rather then a must have if you’re just experimenting with kubernetes. …

Introduction Startup, readiness, and liveness probes are very well described in the Kubernetes documentation. kubelet uses these probes defined in the pod manifest to verify whether a pod is booting, ready to accept traffic and still alive. It is kubelet who actually executes the probes (and not the pod itself). There…

1. Lets create a TOR socks proxy image This should be easy via this Dockerfile FROM ubuntu ENV DEBIAN_FRONTEND=noninteractive RUN apt-get update RUN apt-get install -y bash curl privoxy tor tzdata vim net-tools COPY config /etc/privoxy/config COPY start.sh . CMD [ "/start.sh"] and some (probably to enhance) script to run the proxies in the container/pod. See https://github.com/xxradar/torproxy …

Wireshark in a terminal …